Online Clipboard
Privacy policy
1. Controller
Aigner Software e. U., owner Matthias Manuel Aigner
Hauptplatz 23, 4190 Bad Leonfelden, Austria
Email: [email protected]
2. In short
Online Clipboard requires no registration, uses no analytics or advertising services, and processes no names, email addresses or payment details. What is processed is essentially the content you place in a board yourself — and that is deleted automatically after seven days.
3. What data is processed
3.1 Anonymous user identifier
When you first open the app, an anonymous sign-in is performed through Firebase Authentication. This creates a random identifier associated with your browser. No name, email address or password is collected. A record holding the creation time is stored for that identifier.
3.2 Country code
Once, a two-letter country code (such as “AT”) is derived from your IP address and stored with your identifier. It is used solely to determine where uploaded files are stored (see section 5). The IP address itself is not stored.
3.3 Board content
Text, images, videos and documents you place in a board are stored so that other devices can retrieve them. You alone decide what that content is. Board titles, creation time and the identifiers of participating devices are stored as well.
3.4 Error logs
If an error occurs, the error message, the affected function, the user identifier and the operating system are stored so the fault can be fixed.
3.5 Server logs
Technical log data arises at our providers when the site is accessed, including IP address, time and the address requested. We have no influence over this; it serves operation and abuse prevention.
4. Purposes and legal bases
Processing of the identifier and board content is necessary to provide the service (Art. 6(1)(b) GDPR). Error logs, server logs and the country code are processed on the basis of our legitimate interest in a secure, functioning and lawfully operated service (Art. 6(1)(f) GDPR).
5. Where data is stored
Text, board data and identifiers are held in a Google Cloud Firestore database in Frankfurt, Germany (europe-west3). The servers processing requests (Cloud Functions) run there too.
Uploaded files are stored with Cloudflare R2. Placement depends on where the uploader is: from the EU and the EEA into storage bound to the EU, from elsewhere into global storage. Delivery runs through Cloudflare's content delivery network, which may cache copies at locations worldwide to keep downloads fast.
6. Recipients and processors
Google Ireland Limited / Google LLC — Firebase Hosting, Cloud Firestore, Cloud Functions and Firebase Authentication.
Cloudflare, Inc. — content delivery network in front of the website and R2 object storage for uploaded files.
Data processing agreements are in place with both. Where data is transferred to third countries, this is based on the European Commission's standard contractual clauses and the EU-US Data Privacy Framework.
7. Retention
Board entries and their files are deleted automatically and completely seven days after being posted. Boards themselves and the anonymous identifier persist beyond that so you can keep opening your boards; you may request their deletion at any time. Error logs are deleted once no longer needed.
8. Access to boards
A board is reachable through a randomly generated address. Anyone who knows that address can open the board and add content, so treat it like a key. Board addresses are excluded from search engines. The service is not intended for particularly sensitive data.
9. No tracking, no advertising
No analytics, statistics or advertising services are used. There is no profiling and no automated decision-making. No cookies are set for analytics purposes.
10. Local browser storage
The application stores technically necessary information in your browser: the anonymous sign-in, the language and appearance you last chose, and the board you last opened. This information does not leave your device and is required for operation.
11. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Contact us informally at [email protected]. Because use is anonymous, we need the board address concerned in order to locate your data.
You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna.
12. Changes
This policy will be adapted if the service or the legal situation changes. The version published here applies.