Legal

Privacy Policy

A clipboard manager sees everything you copy. That is a lot of trust to ask for, so this page describes exactly what happens to your data — in plain language, not in the kind of prose written to be skimmed past.

Last updated 16 August 2026. Covers Ledge for Mac and Ledge for iPhone & iPad.

1. Who we are

Ledge is a macOS application published by the developer of ledgemac.com, with a free companion app for iPhone and iPad. Questions about this policy, or any request concerning your data, go to support@ledgemac.com and reach a human.

2. What the app stores on your Mac

Everything you copy, and everything you drop on the Shelf, is stored locally on your Mac in the app's own database. This includes text, images, links, files, and screenshots. It is your data, on your disk, and it is never transmitted to us under any circumstances.

Ledge applies these rules to what it captures:

• Password managers are skipped. Anything a source application marks as concealed or transient never enters history at all. It is not recorded and then hidden — it is never recorded.
• History expires by itself. Items older than 30 days are removed automatically. You can change that window in Settings, and pinned items are kept regardless.
• You can exclude applications. Copies made in applications you name are ignored entirely.
• You can delete anything, at any time. Individual items or the whole history, from within the app.

3. iCloud sync is optional and private

On the Mac, iCloud sync is switched off by default. If you switch it on, your items synchronise through your own private iCloud database using Apple's CloudKit, protected by your Apple Account. We have no access to it and no ability to read it. We cannot recover your data for you either — that is the trade-off of an architecture where we hold no keys.

The iPhone and iPad app has sync on by default, because reading that database is the entire reason it exists. It is the same private database, still yours, still invisible to us.

4. The iPhone and iPad app

Ledge for iPhone & iPad is free and has no servers of its own. It reads and writes the same private iCloud database as your Mac, and talks to nothing else.

The important difference from the Mac: it never reads your clipboard on its own. iOS does not allow background clipboard access, and Ledge does not try. Items only reach it three ways, and you start all three:

• The share sheet — you choose Ledge from another app's Share menu.
• The paste button — Apple's own paste control, where your tap is the permission. Ledge sees the clipboard at that moment and not before.
• Typing a note into the app yourself.

You can put the app behind Face ID, Touch ID, or your passcode in Settings. It is off by default; with it on, the list is also hidden in the app switcher. Ledge stores no biometric data — iOS answers yes or no and tells us nothing else.

The app has no analytics, no advertising identifiers, no third-party SDKs, and no crash reporting that reaches us. Apple's own App Store metrics are the only thing we ever see, and those are anonymous and aggregate.

5. What our servers actually receive

Ledge has no accounts, no sign-in, and no user profiles. Our licence server exists for one purpose: to confirm that a licence key is valid and to bind it to one Mac at a time. It stores:

• The email address you purchased with, so we can send your licence key and any transfer confirmation.
• Your order number, so a licence can be matched to a purchase and refunds can be honoured.
• An opaque device identifier for the Mac the licence is active on. It is a random-looking string used only to enforce "one Mac at a time". It contains no name, no serial number, and nothing that describes you or your hardware.

That is the complete list. We do not receive your clipboard contents, your file names, your IP address for storage, your location, or anything about how you use the app.

Activation is a single online round-trip. After that, your licence is verified on your Mac with public-key cryptography and Ledge works fully offline. The app does not phone home, and there is no background telemetry to disable because there is none to begin with.

On IP addresses: like any web server, ours briefly sees the IP address of incoming requests and uses it in memory to rate-limit abuse. It is not written to disk, not linked to your licence, and not retained.

6. Payments

We never see or handle your card details.

• Card and PayPal orders are processed by Lemon Squeezy, which acts as merchant of record. Your payment details go to them, not to us, and their own privacy policy governs that data. We receive the resulting order number and email address.
• Bank transfer orders from Vietnam are processed through SePay, which notifies us when a transfer matching your order arrives. We receive confirmation of payment and your email address; we do not receive your bank account details.

7. Email

We send you exactly two kinds of email: your licence key after purchase, and a confirmation link if you ask to release a licence from a Mac you no longer have. There is no marketing list, and we do not send newsletters. Your address is not sold, shared, or passed to anyone beyond the payment providers above.

8. This website

ledgemac.com is a set of static files. It sets no cookies, runs no analytics, embeds no tracking pixels, and loads no third-party scripts or fonts. Nothing about your visit is recorded beyond the ordinary server logs any web server keeps.

When you start a purchase you are handed to Lemon Squeezy's checkout, which is their page under their policy.

9. Permissions Ledge asks for

On the Mac, two, and both are optional:

• Accessibility — used solely so auto-paste can send ⌘V to the application you were just using. Everything else in Ledge works without it.
• Access to your screenshot folder — so screenshots saved to the Desktop can appear in history.

Ledge does not request screen recording, does not log keystrokes, and does not read the contents of your disk. The Permissions tab in Settings shows exactly what has been granted, with one-click reset.

On iPhone and iPad, one, and only if you ask for it: Face ID or Touch ID, to unlock the app when you turn the lock on. Ledge asks for no photo library access, no location, no contacts, and no notifications.

10. Your rights

Because your clipboard data lives on your Mac, you already have complete control of it: view it, export it by dragging items out, or delete it in the app.

For the three fields our server holds, write to support@ledgemac.com and you may ask us to tell you what we hold about you, correct it, or delete it. Deleting your record deactivates the licence, so we will confirm that is what you want before doing it. We aim to respond within 30 days.

11. Children

Ledge is a productivity tool for general audiences and is not directed at children under 13. We do not knowingly collect data from them.

12. Changes to this policy

If this policy changes in a way that affects what we collect, we will update the date at the top of this page and describe the change here. We will not quietly broaden what we collect and leave you to notice.