Privacy policy
Last updated 19 October 2026
The short version
Tucko keeps your clipboard history on your Mac. We don’t run servers that receive it, we don’t have accounts, and the Mac app contains no analytics. This website uses optional PostHog analytics only if you allow it.
The Tucko app
- Clipboard history is stored in Tucko’s sandboxed container on your Mac, readable only by your user account. It is not uploaded to Tucko servers. The local database is not independently encrypted.
- Sensitive content. Items that password managers mark as private are always skipped. Unless you turn on “Store sensitive content”, Tucko also skips copies that look like passwords, private keys, access tokens and card numbers. You can exclude whole apps and skip text matching your own patterns. Filtering cannot reliably identify every sensitive copy.
- Link previews are off by default. When you turn them on, Tucko contacts the website a copied link points to, once and without cookies, to fetch its title and preview image, and may take a snapshot of the page. Addresses on your local network are never contacted. That website sees an ordinary request from your Mac. The same applies when you choose to show a link’s live page in a preview.
- AI actions use Apple Intelligence on your Mac. Tucko does not send your text to an AI service. These actions require macOS 26 or later on a supported Mac with Apple Intelligence enabled.
- Deleting data. Delete single items, clear a tab, or erase your history in Settings. Removing the app and its container removes the local clipboard database. Trial and activation records remain in macOS Keychain so reinstalling does not reset a trial.
Trial, licence activation and updates
The trial start time, expiry state and licence activation are stored in macOS Keychain. Tucko sends your licence key, activation identifier and an app-specific hash of your Mac’s device identifier to Polar when activating, deactivating and periodically verifying a licence. The hash binds the activation to this Mac; clipboard content is never included. Licence checks normally run daily, with up to seven days of offline access after a successful verification.
Tucko checks tucko.app for software updates daily using Sparkle. These requests disclose your IP address and normal connection metadata to the hosting provider. Sparkle system-profile reporting is not enabled. Updates are authenticated with digital signatures and installation requires your confirmation. Trial and licence information is not sent with update requests. Update checks and update downloads are included in the anonymous counts described under Download and update counts.
Who is responsible
Wolfgang Wachelhofer, trading as Terrapixel, Heiligenstädter Straße 80/3/3, 1190 Wien, Austria, is responsible for the personal data we handle for this website and Tucko support. Contact [email protected]. See our legal notice.
Buying Tucko
Polar is the merchant of record and authorised reseller. Its hosted checkout processes your name, email address, billing address, country, payment information and order details under Polar’s privacy policy. Polar handles payment, tax, purchase emails and access to purchased downloads and licence records. We can access the customer and order information needed to deliver the product, answer purchase questions and arrange refunds. We never receive your complete payment-card details.
Our website checks product and discount availability with Polar to display the current launch price. Starting checkout creates a Polar checkout session for Tucko. We do not send your clipboard history, website-demo contents or support messages in this request. The server credential is never sent to your browser.
We process purchase information as necessary to fulfil the contract (GDPR Article 6(1)(b)) and meet legal obligations, including accounting requirements (Article 6(1)(c)). Polar processes payment and billing data in its own role as described in its policy. Its services and payment partners may process information outside the EEA; its policy explains applicable safeguards.
This website
The product demonstrations use sample data or information you explicitly enter in the demo; they do not read your Mac’s clipboard history. The interactive shelf’s temporary contents are discarded when you leave the page. Demo inputs are not sent to analytics.
The website runs on a Contabo server, with Cloudflare providing DNS and connection protection. These providers receive ordinary connection information, such as your IP address, browser information and requested URL. Technical logs may be used to provide the site, diagnose errors and prevent abuse, based on our legitimate interest in reliable and secure operation (Article 6(1)(f)). We keep such data only as long as needed for those purposes, or to investigate a specific security incident. Polar’s separate checkout and customer portal have their own privacy and cookie information.
Download and update counts
Our server counts how often the trial installer and update archives are requested and how often Tucko checks for updates, per version and day. For each counted request it sends PostHog’s EU service an event containing only the event type, the requested version, the kind of client (browser, Tucko’s updater or other) and, for update requests, the installed Tucko version that Tucko’s updater reports. The event contains no IP address, browser identifier, cookie, user agent or other information that identifies you or your device, and it is not linked to website analytics, the app or your purchase. Nothing is stored on your device. Requests from known bots and repeat requests are not counted. To skip repeats, the server keeps a salted one-way hash of your IP address in memory for ten minutes; it is never written to disk or sent anywhere, and the salt changes whenever the server restarts. This is based on our legitimate interest in knowing how many people try and update Tucko (Article 6(1)(f)).
Optional website analytics
If you choose “Allow analytics”, this website sends page views, trial-download clicks, purchase clicks and checkout-form submissions to PostHog’s EU service. We use these events to understand which pages help visitors try or buy Tucko. A download click does not confirm that a download finished or that the app was installed; a checkout event does not confirm payment.
Events contain the page path, referring website domain, browser and device information, a random browser identifier, and, for relevant actions, the button’s section and installer version. PostHog receives your IP address as part of the connection. We remove URL query strings and fragments, do not identify you by name or email, and disable automatic click collection, session recordings, surveys and person profiles. Clipboard history, demo text, licence keys and payment details are not included.
Analytics is based on your consent (Article 6(1)(a)). Before you allow it, we do not initialise PostHog or send analytics requests. Your choice is saved in your browser’s local storage for up to 180 days; after consent, PostHog also uses local storage for its random identifier. We do not use analytics cookies. You can withdraw consent at any time using “Analytics settings” in the footer. This stops future collection; it does not undo processing that already took place. We also honour browser Do Not Track and Global Privacy Control signals.
Website events share our existing PostHog project with our other product, Pungo, and are labelled as Tucko website events. Analytics is not linked to the native app or your purchase identity. For information about PostHog and its processing, see PostHog’s privacy policy. Contact us using the details below with questions or requests concerning stored analytics data.
Support and retention
When you email [email protected] or use the contact form on the support page, we process your name, email address, message, any order number and any information you choose to include to answer your request. This is based on steps before or performance of a contract (Article 6(1)(b)), or our legitimate interest in answering other enquiries (Article 6(1)(f)). Our support mailbox is hosted by Spaceship’s Spacemail service, which processes messages on our behalf. Please do not send passwords, full licence keys, card information or private clipboard contents.
The contact form uses Cloudflare Turnstile to tell people from spam bots. Its script loads only once you start filling in the form. Cloudflare then processes technical information such as your IP address, browser and device characteristics and interaction signals to perform the check, under Cloudflare’s Turnstile privacy policy. Turnstile sets no tracking cookies and is not used for advertising. This is based on our legitimate interest in protecting the form and our mailbox from abuse (Article 6(1)(f)). Our server sends the message to our support mailbox and does not store it otherwise.
We retain support correspondence while needed to resolve your enquiry and related claims, then delete it unless a legal retention obligation applies. Where Austrian accounting rules require us to retain purchase or accounting records, the ordinary retention period is seven years, and may be longer for ongoing proceedings. Polar maintains its own records under its policy.
Your rights
Depending on the circumstances, you can request access, correction, deletion, restriction of processing, or a portable copy of personal data we hold. You can object to processing based on legitimate interests. If processing is based on consent, you can withdraw it for the future. We do not use your information for automated decisions producing legal or similarly significant effects.
Send privacy requests to [email protected]. We may need proportionate information to verify your identity. You can also complain to the Austrian Data Protection Authority or another competent supervisory authority. For Polar’s own payment records, you may contact Polar directly as described in its privacy policy.