Local-first, by default.
Phluff is built so that, by default, nothing leaves your Mac.
No telemetry
Phluff collects no usage analytics, no crash beacons, no fingerprints. The core utility never makes a network request unless you explicitly ask it to (for example, checking for an update).
Local-first storage
Clipboard history, screenshots, tiling layouts, hotkeys, and automations live on your device. We do not have a copy.
Opt-in, end-to-end encrypted cloud
Pro sync and magic-link sharing are opt-in. When you use them, content is encrypted on your Mac before upload. For magic links, the decryption key lives only in the link's URL fragment (after the#) and is never transmitted to or stored by our servers — we only ever hold ciphertext.
Accounts
An account (passwordless email link) is only needed for paid features. We store your email, plan, license, and registered devices to operate the service. That's it.
Payments & the Merchant of Record
Purchases are processed by our Merchant of Record (MoR), who is the seller of record and acts as a data processor for billing. We do not see or store your full payment-card details. The MoR processes only the data needed to complete and support your transaction.
Your choices
You can use Phluff entirely offline on the free tier, delete local data at any time, revoke magic links, and close your account to remove server-side records associated with it.
This page is a scaffold and not legal advice. Final copy should be reviewed before launch.