README · ARCHITECTURE · DEVELOPMENT · PRIVACY · SECURITY

SaneClip includes several security features:

• Optional biometric authentication to access clipboard history
• 30-second grace period after authentication
• Falls back gracefully when Touch ID unavailable

• Detects quick-clear patterns (items copied then cleared within 3 seconds)
• Automatically removes likely password manager entries from history
• Configurable via Settings

• All clipboard data stored locally in ~/Library/Application Support/SaneClip/
• On-device by default, with optional iCloud sync between your own devices
• Limited network use for updates and a few simple anonymous app counts

• App is signed with hardened runtime
• Notarized by Apple
• No code injection vulnerabilities

If you discover a security vulnerability, please:

1. Do NOT open a public GitHub issue
2. Email security concerns to: hi@saneapps.com
3. Include:
   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Suggested fix (if any)

• Acknowledgment: Within 48 hours
• Initial assessment: Within 1 week
• Fix timeline: Depends on severity, typically 1-4 weeks

• We will coordinate with you on disclosure timing
• Credit will be given unless you prefer anonymity
• We aim to fix critical issues before public disclosure

1. Enable Touch ID if you handle sensitive data
2. Review excluded apps to ensure password managers are blocked
3. Clear history before sharing your screen
4. Keep updated — enable automatic updates in Settings

SaneClip is designed for individual users on personal Macs. It is NOT designed for:

• Enterprise/multi-user environments (no access controls)
• Highly sensitive data (consider dedicated password managers)
• Air-gapped or compliance-regulated systems

SaneClip uses these third-party dependencies:

All dependencies are pinned to specific versions.