Privacy Policy: Clipboard Shield
Effective Date: January 30, 2026

1. Introduction
Clipboard Shield is a security tool designed to protect users from automated clipboard manipulation and "Pastejacking" attacks, specifically those utilized by modern malware campaigns such as ClickFix and FakeCaptcha. These threats often attempt to inject malicious commands into a user's clipboard via script-initiated actions.

2. Information Collection and Use
To provide defense against these threats, the extension intercepts script-initiated clipboard modifications.

Data Captured: When a script attempts to modify the clipboard, the extension captures the attempted text, the source URL, and a timestamp.

User Consent: No data is sent to external servers without explicit user confirmation via the on-screen prompt.

External API: If the user elects to "Send to API," the captured data is transmitted to a private, user-specified Go/PostgreSQL backend for the purpose of threat analysis and logging malicious script behavior.

3. Data Storage
Local Storage: Blocked attempts are stored locally on your device within the browser's storage to provide you with a history log. This data can be cleared at any time via the extension popup.

Remote Storage: Data sent to the external API is stored in a private database. This data is used solely for identifying patterns in cybersecurity threats.

4. Data Protection
We do not sell, trade, or otherwise transfer your information to outside parties. The telemetry is used exclusively for personal security monitoring and identifying malicious domains hosting ClickFix or FakeCaptcha scripts.

5. Transparency and Choice
Users can:

Decline the transmission of any clipboard event.

Whitelist specific domains to disable interception on trusted sites.

Clear all local history and site preferences through the extension settings.