Privacy Policy

1. Who we are

Startupsole LLC operates ctrlv.page. In this policy, “we” and “us” mean Startupsole LLC. This policy covers the ctrlv.page website and the installable version of the app.

The distinction between local app data and information involved in delivering the website matters. We do not receive your local inbox through the app. We can receive ordinary website request information and any message you choose to send us.

2. Saved items and preferences

When you paste or write an item, ctrlv.page stores it in IndexedDB inside the browser profile you are using. A saved record can include:

• the plain text you pasted or wrote;
• HTML supplied by the clipboard, when it is available;
• source formats, detected content type, and detected language;
• when the item was created or last updated, pasted, or copied;
• copy and paste counts;
• whether you pinned the item; and
• a randomly generated item ID and technical values used to classify and order it.

Workspace preferences are stored in the same browser database. These include theme, text size, onboarding progress, and whether you dismissed certain reminders.

Search, sorting, content detection, and editing happen in your browser. There is no ctrlv.page account and no automatic sync. Each browser, browser profile, and device has its own inbox. The current app does not send saved item contents or inbox searches to Startupsole LLC.

The possible-secret check uses deterministic rules in your browser on current item text and available clipboard HTML. Entropy checks run only on visible text. It uses no AI and makes no network call. A possible-secret result is derived from the current item content and is not stored as a separate field in the saved record. The check does not mask or change the item, and copy and edit controls continue to use the original plain text. If clipboard HTML alone causes a warning, the matched HTML may not appear in copy or edit controls; export review identifies that source.

3. Clipboard, export, and import

Clipboard access

ctrlv.page receives clipboard content when you paste on the page. If you choose Paste clipboard, the browser may ask for permission before sharing clipboard text. Copy controls write the text you choose back to the clipboard. The app does not monitor the clipboard in the background.

Export

Export creates a JSON file in your browser and downloads it to your device. The export review opens only when one or more items may contain secrets. It shows the full item list. Every item is included by default. A short plain-text preview helps identify each item, and the review identifies clipboard-HTML-only findings. If no item matches the possible-secret rules, the file downloads without that review.

Excluding an item affects only that downloaded file. It does not remove or change the item in your local inbox. A backup created through Download backup & clear must include every item before the inbox is cleared.

After the backup download starts, ctrlv.page keeps the inbox intact and asks you to confirm that the downloaded file is present before clearing. The app checks that the inbox has not changed before it clears the saved items.

The downloaded file contains the included saved item records, workspace preferences, and an export date. ctrlv.page does not upload that file. After download, the file is controlled by your browser, device, and chosen storage location.

Import

Import reads only the file you choose. After you confirm, its valid items replace the items in the current browser inbox. The file and its contents are not sent to Startupsole LLC. Workspace preferences in the export remain backup data. The current Import flow does not apply them, so your existing preferences stay unchanged.

4. Offline files

ctrlv.page uses Cache Storage for static site and app files that support offline use. A service worker manages those files and checks for a new app version when you are online. It is not configured to read or transmit your saved items.

5. Site requests and outside services

Website delivery

When you open ctrlv.page, your browser contacts the service that hosts the site. The hosting service receives information needed to return and protect the page. This can include an IP address, browser and device details, the requested path, a referring page, and a time stamp.

These requests do not include your saved items, clipboard content, or inbox searches. This technical processing is used to deliver the site, protect it from abuse, and diagnose faults. The ctrlv.page client does not add a visitor identifier to these requests or use them for product analytics.

Google Fonts

The site requests font files directly from Google Fonts when you are online. Google receives the IP address and other request information needed to return those files. Google explains this processing in its Google Fonts privacy FAQ.

Font requests do not contain your saved items, clipboard content, or inbox searches.

Messages you send us

If you email us, your email provider and ours process the message for delivery. We receive your email address, any name you use, the message, attachments, and other information you choose to include. We use it to answer you, resolve the request, and maintain records when needed for that purpose or to protect legal rights.

6. Cookies and tracking

The ctrlv.page application does not set cookies. It does not include analytics, advertising trackers, or product telemetry. Startupsole LLC does not sell personal information from ctrlv.page or share it for targeted advertising.

7. How long information remains

Saved items remain until you remove them, confirm a cleanup, replace the inbox through Import, choose Clear inbox, clear site data, remove the browser profile, or the browser or device deletes them. Workspace preferences remain until you clear site data, remove the browser profile, or the browser or device deletes them. Clear inbox does not remove preferences, cached app files, or backups already downloaded to your device.

Keep an export outside the browser if an item matters to you. Startupsole LLC cannot recover a local inbox through the service.

Retention for technical request records depends on the hosting configuration and Google Fonts policy. ctrlv.page does not create a separate visitor or analytics database. We keep messages you send only as long as needed to handle the request, maintain required business records, or protect legal rights.

8. Local security limits

Browser storage is not an encrypted vault. Someone with access to your device or browser profile may be able to read local items. Browser extensions, device software, and exported files are also outside our control.

The possible-secret pattern check can produce false positives and false negatives. A warning does not confirm that text is a secret, does not confirm that a secret has been exposed, and is not a security guarantee.

Use the right tool for sensitive data. Do not use ctrlv.page as a password manager or as the only copy of important information.

9. Your choices and rights

You can remove individual items, clear the inbox, or use your browser settings to delete all site data for ctrlv.page. You can also stop the browser from sharing clipboard text when it asks for permission.

Because Startupsole LLC does not receive your local inbox, we cannot view, export, correct, or delete it for you. Those controls remain in your browser.

Depending on where you live, you may have rights concerning other personal data we control. These can include access, correction, deletion, restriction, objection, or a copy. You may also contact the data protection authority where you live. Email us to make a request about information we actually hold.

10. Changes and contact

If ctrlv.page or its data handling changes, we will update this policy and the date at the top of the page. We will update this policy before introducing a change that alters how we collect or use personal data.