Privacy note

The Copytrove app

Your clipboard content never leaves your Mac: we do not collect it, and the app has no analytics, advertising, crash-reporting SDK or remote configuration.

With one exception, the app makes no network request unless you start an action. The exception: while automatic update checks are on (they are on by default; you can turn them off in Settings → About), the app verifies your licence status with our licence server together with the update check (at most once a day). It is a separate request from the update request; it sends only the activation record of this Mac (licence ID and an irreversible device digest), and the reply is “valid / this Mac was removed / licence refunded”. On a removed or refunded Mac, Pro turns off at the next verification; with no verification for 60 days the app asks you to verify, and on day 75 Pro pauses until you do (your data is not deleted). Apart from that, the data it sends us is on a licence action you start (activate, renew/re-verify, “Remove this Mac”): your licence key, an irreversible device digest (a one-way hash of your Mac's hardware ID), the device model name (e.g. MacBookPro18,1) and the app version. Your computer name, user name and clipboard content are never sent.

The other optional network feature is off: link preview is off by default (if you turn it on, your Mac requests the linked page from that site). Update checks are on by default (at most once a day); you can turn them off in Settings → About — if you do, the app checks only when you choose “Check for Updates…”, licence verification also happens only then, and the 60/75-day rule applies. Automatically downloading and installing updates is off by default. You do not need an account to use the app.

Licence account panel

The web account panel is optional and only for managing your licence. There is no password; you sign in with a single-use link sent to your email.

The account panel is shared by all Moontra apps (account.moontrasoftware.com); if you bought the Moontra Bundle, one licence key activates every app in the bundle. Licence activation and verification are run by one Moontra licence service on a server in Hetzner's Finland data centre.

• Your email address (from the purchase) and licence record: package (1 or 5 Macs), update-entitlement end date, status.
• Sign-in link: single-use, valid for 15 minutes; only its hash is stored on our server.
• Session cookie: set when you sign in; strictly functional, httpOnly, 7 days, ends at sign-out; not used for advertising or tracking.
• Your active devices: device model name, activation date and, if you give one, a short device name.
• Payment history (date, type, amount, Paddle invoice link): shown from Paddle's notifications; we do not have your card details.
• Not processed: clipboard content, computer name, user name, file names, the apps you use, location, usage/telemetry data. The licence key and email are not written to server logs.
• Bundle: the apps your licence covers and a separate list of active devices for each app. The device digest is derived separately for each app; the same Mac's digest in two apps is different and cannot be matched directly.

Transactional emails

We send: (1) your licence key after purchase or renewal, (2) a sign-in link when you ask for one, (3) a renewal reminder 30 days before, 1 day before and on the day your update entitlement ends (the app does not stop working if you do not renew). These are service emails, not marketing; reminders can be switched off in the panel, licence-key and sign-in emails cannot. Sender: license@moontrasoftware.com.

Emails go out through Resend, a processor that handles your email address and the email content on our behalf; this is a transfer abroad (Resend is Plus Five Five, Inc. of San Francisco, USA; data is mainly processed in the USA, its sub-processor list is at resend.com/legal/subprocessors, and transfers rely on the EU Standard Contractual Clauses). No clipboard data or device digest is sent to Resend.

A bundle purchase sends one email with one key; it contains an activation link for each app in the bundle.

The website (waitlist)

We use your email and survey answers only to tell you when Copytrove launches and to help set a fair price. The basis is your explicit consent, which you can withdraw at any time.

• Waitlist form: your email address, interface language, optional price-survey answers (four price points), the feature you are interested in, the test-price group shown to you, and the time of sign-up. The consent box must be ticked.
• Browser storage: one test-price group value is kept in your tab's session storage; it is cleared when the tab closes and is not sent as a cookie.
• Analytics, advertising and trackers: none. This site uses no third-party analytics or advertising scripts. The site keeps no access log that records visitors' IP addresses. Technical error logs contain no IP address, email or licence key; they are deleted as new versions are released.

Sharing and transfers

We do not sell your email. Waitlist data (only email and form answers) is kept in a PostgreSQL database on the company's own server in Hetzner's Finland data centre (transfer abroad: see the KVKK notice). If you buy, Paddle processes your payment and invoicing data under its own privacy policy and passes us the limited information needed for the purchase (for example email, country, order number). We email you the licence key through Resend (see above). Clipboard content and device digests are never shared.

The licence and account records of all Moontra apps are kept in one Moontra licence service on a server in Hetzner's Finland data centre. When an app added to the Moontra Bundle later is given to existing bundle owners, no new data is collected; only a rights row is added to the licence record.

How long we keep it

• Licence record and email: while the licence is valid, then for the legal retention period.
• Active device record: while active; a removed device's record for 12 months (abuse prevention/support), then deleted.
• Sign-in link (hash): deleted 24 hours after use or expiry. Session: 7 days; ends immediately at sign-out.
• Payment/invoice and licence transaction records: for the retention periods set by the applicable tax and commercial legislation (Tax Procedure Law art. 253, Turkish Commercial Code art. 82 — 10 years).
• Waitlist data: 12 months after launch or until you withdraw your consent, whichever comes first.

Your rights and other

Under KVKK (Türkiye) and, if you are in the EU, GDPR you can ask for access, correction, deletion, objection, data portability, and withdraw your consent. Write to info@moontrasoftware.com. We answer within 30 days; you may also complain to the supervisory authority.

The service is not aimed at children. We may update this note; the current version is always on this site.