Clipboard manager privacy on Mac: check both histories

The direct answer: on current macOS, clipboard privacy is not one setting. Spotlight can keep its own searchable history, while a third-party manager can keep a separate database. Clearing one does not prove the other is empty. Open Spotlight with Command-Space, choose Clipboard or press Command-4, and inspect or clear that history. Then repeat the check inside your clipboard manager.

TeenyClip is my clipboard manager, so the bias is explicit. Its behavior below is checked against the current Swift source, not inferred from a feature list. Apply the same questions to any manager: what values are read, where they persist, what bypasses capture, what survives a clear, and how you can test each claim.

Separate the current Clipboard from two histories

What TeenyClip's source says it saves

TeenyClip polls NSPasteboard.general.changeCount every half second. When the value changes, its capture path looks for supported PNG or TIFF images, the first file URL, a web URL, rich text, and plain text, subject to user-added exclusions, the selected history limit, and successful capture. The stored clip model includes raw content, content type, a preview, optional thumbnail or RTF data, a timestamp, a pinned flag, and a SHA-256 content hash used to skip an immediate duplicate.

The practical boundary is wider than visible text. A screenshot can contain customer data. A file path can reveal a project name. A URL can contain a private document key or invite token. Rich text can preserve context that a plain-text preview hides. Image hover uses a thumbnail bounded to 320 pixels while validated original image bytes are retained for re-copy. Treat every captured type as retained content.

Clipboard contents and history are stored locally and are not uploaded. The App contains no analytics, telemetry, account sync, or clipboard-content upload. Polar receives license keys and activation identifiers when it activates, validates, or deactivates a license; Sparkle contacts teenyclip.com to check for and download updates. Website analytics are separate from the App.

What limits and clear commands actually remove

The default limit is 100 unpinned clips, with choices for 50, 100, 200, or 500. The source enforces that cap against unpinned items only. Pins are fetched and retained separately, so lowering the history limit does not expire a pinned secret.

Clear Unpinned History deletes current unpinned clips and keeps pins. The on-quit, daily, and weekly auto-clear paths clear the same unpinned history, so pins also survive scheduled clearing. Validated legacy and recovery histories are retained indefinitely and require the separate manual removal path shown in Settings. If your goal is a clean handoff or screen share, inspect pins and retained recovery data after the clear. Then replace the current Clipboard value with harmless text and clear Spotlight history separately.

For a focused pre-call routine, use the Mac clipboard history before screen sharing checklist. The network-level Mac meeting privacy checklist adds selected-share scope, system audio, and the meeting app's transmitted state.

Configure exclusions, then prove they work

TeenyClip starts with no exclusions. It stores the bundle IDs for apps you add and suppresses capture while one of those apps is frontmost. Its monitor also keeps a short grace window after the excluded app stops being frontmost. This covers the delay between a copy, the half-second pasteboard poll, and a quick app switch.

1. Add a password manager or another non-production test app to the excluded-app list.
2. In that app, copy a unique harmless marker such as EXCLUDED-TEST-0812, then switch away immediately.
3. Wait at least three seconds, open TeenyClip, and search for the marker. It should not be present.
4. Copy ALLOWED-TEST-0812 from a non-excluded app. It should appear after the next polling interval.
5. Delete the allowed marker and repeat after every material settings or app update.

Start the real exclusion list with password managers, Keychain Access, finance tools, authentication apps, support consoles, production terminals, and customer-record systems. If the negative test fails, stop using the manager for sensitive work rather than relying on the setting's label.

Choose retention from the cost of exposure

When a clipboard manager is the wrong choice

Skip one on a shared Mac unless every user understands the retained history. Do the same on a managed work Mac when policy forbids local retention of copied customer or production data, or when sensitive source apps cannot be excluded and tested reliably.

If you only need Apple's current paste or Spotlight's built-in history, another retained database may add risk without solving a distinct job. If you do need longer history, pins, files, images, and exclusions, keep the smallest useful limit and test cleanup before a real incident.

For a parallel permission boundary, read system audio recording permission on Mac. Clipboard retention and audio capture are different systems, but both require separating macOS authorization from what an app stores or transmits.

Sources checked

• TeenyClip claims were checked against the TeenyClip homepage, its privacy policy, and local Swift source for capture types, polling, stored fields, limits, pins, clear behavior, and exclusions.
• Apple Support: Search your Clipboard history in Spotlight on Mac.
• Apple Developer Documentation: NSPasteboard.
• Apple Developer Documentation: NSPasteboard changeCount.