Privacy — 1.0

Last updated 18 October 2026

Your screenshots, drawings, clipboard contents, sessions, paths, and files stay local. There are no accounts, sync, analytics, crash uploads, attachments, or background check-ins.

No account, sync, analytics, crash uploads, or background check-ins. Screenshots, clipboard contents, drawings, sessions, and exported files remain on your device. Each time you open More Apps, the app downloads the current catalog and its screenshots from HumansAreUseful.ai. Opening My Reports does not make a network request; sending feedback, checking report status, and managing a report's contact details connect only when you choose those actions.

Before feedback is sent, the app discloses that automated agents and service providers may process the report. Adding an email address requires explicit consent and verification.

What the app stores on your computer

• Sessions — the original image and edit history, stored locally so undo and rewind can work.
• Preferences — your tool, color, stroke width, language, hotkey, and window choices.
• Diagnostic logs — standard operating-system logs, which age out on their own. They record that things happened; they never contain your image contents or the text you type.

Saved sessions on macOS

On macOS, use Settings ▸ Reveal in Finder for the actual folder. Sessions are stored in DrawOnClip/Sessions in the app's Application Support directory, inside its sandbox for the App Store build. When backups are off, new work is not saved for later.

Unkept, closed sessions normally expire 14 days after last work. Above 50 unkept closed sessions, fully exported work may be removed earlier. Sessions marked Keep and sessions in open editors are protected from automatic cleanup. Deleting a session removes its original and history after confirmation, never separately exported images.

Keep does not prevent explicit deletion. Delete… and Clear All Data can also remove kept sessions after confirmation. Separate exports and external backups remain untouched.

On Windows and Linux, saved sessions use the platform's standard per-user application-data folder. The same Keep and cleanup rules apply.

The un-redacted original

This is the part worth being explicit about. When you redact something, every image you export is a flattened render with the hidden pixels genuinely absent. But while the session still exists, the original image is kept inside that session so undo can work.

It never leaves your computer — but it will be copied by any backup that copies the app's data folder. If a capture is sensitive enough that this matters:

• On macOS, File ▸ Delete Session Now erases that session's saved data immediately, including the original, and stops it being saved further. The window stays open so you can finish and export.
• On macOS, Settings ▸ Clear All Data removes every saved session and resets preferences. It tells you exactly what will go before you confirm.
• On Windows and Linux, clear saved sessions in Settings to remove their originals and edit history. Turning backups off prevents new work from being saved for recovery. External backups remain untouched.

What your exports contain

Exported images are flat renders at full resolution. They carry:

• no embedded thumbnail;
• no leftover metadata from the original capture;
• no hidden trailing bytes past the end of the image data.

That last one is the flaw that famously let “cropped” screenshots be un-cropped in other tools. It is excluded here by construction, and an automated test enforces it on every build.

Files you export are yours. The app never touches them again, and “Clear All Data” does not delete them.

Support and compatibility data

Explicit service requests may include app version, build, distribution, platform and OS version, architecture, locale, and essential capability booleans. They never include screenshots, logs, paths, clipboard contents, session data, or exported files. Anonymous reports receive an opaque local receipt. Report content is retained for 24 months after closure; verified contact data is removed 90 days after the final notice or sooner through the report's contact-management control. See the HumansAreUseful.ai privacy notice for service-provider, security, and deletion details.

Permissions the app may ask for

• Screen capture or recording — only when a platform requires it for a capture initiated from inside the app. Reading an image already on the clipboard needs no such permission.
• File access — only when you choose a file to open or an export destination.

Removing it completely

Use Settings to clear saved sessions before uninstalling the application through your operating system. Files you exported and external backups are not removed.

This website

drawonclipboard.com is a set of static files. It loads no third-party fonts, scripts, or trackers, and has no analytics. If you choose a language, it stores one first-party cookie containing only that language tag; “Follow browser language” removes it. The site is hosted on Cloudflare Pages, whose hosting layer may retain ordinary request logs. App support requests use the separately disclosed HumansAreUseful.ai App Services boundary described above.

Changes

If any of the above changes, this page changes with it and the date at the top moves.