Privacy and keeping secrets out

On your Mac, in Tucket’s own storage. There is no account, no sync, no telemetry and no server that ever receives what you copy.

I would rather be precise than sound impressive here, because anyone running Little Snitch can check. The three connections above are the whole list. Link previews are the only one that has anything to do with your clips, and one switch turns them off.

No. Before a clip is stored at all, Tucket checks it for private keys (PEM, RSA, EC, OpenSSH, PGP), vendor API keys and tokens matched on their distinctive prefixes, JWTs, .env-style secret assignments, and credit card numbers.

That list includes around 220 vendor rules, from Stripe and GitHub to npm, Hugging Face and Anthropic. Obvious placeholders like ${API_KEY} or keys ending in EXAMPLE are left alone, so a code sample is not mistaken for a real secret.

With blocking on, which is the default, those clips are never saved. Turn blocking off and they are saved but blurred behind a lock, revealed only when you ask.

The detection is deterministic and runs on-device at copy time. No AI, no network, no usually.

They are never saved. 1Password and other password managers label what they copy as confidential, and Tucket skips anything labelled that way before reading a single character of it. Text expanders get the same treatment for the brief copies they make behind the scenes.

This matters because a bare password cannot be spotted by looking at it. Something like Xy7$kP!q on its own looks exactly like a short code, so no pattern could catch it. The label is the only reliable signal, and it is the same one every major clipboard manager respects.

Detection only reads text, so a screenshot of a bank statement, an ID or an address will never be caught on its own. Mark it yourself. This works on images as well as text.

1. Right-click the clip, in the popup or in All Clips.
2. Choose Mark as Sensitive.
3. It blurs behind the lock, loses its link preview, and is taken out of Spotlight.
4. Choose Unmark Sensitive to undo it, including when Tucket flagged something that was never a secret.

For a password manager, a terminal, or your banking app.

1. Open Settings, then Privacy, then Ignored Apps.
2. Add the app.
3. Tucket now captures nothing at all while that app is frontmost.

1. Settings, then Privacy, then Pause clipboard capture.
2. The menu bar icon dims so you can see at a glance that it is paused.
3. Switch it back off when you want capture again.

Tucket fetches the Open Graph data for a copied link (title, description, preview image, favicon) so links show as rich cards instead of bare URLs. That request goes to the site the link points at, and nowhere else.

Previews are on by default, because a link without its title and picture is just a URL. If you would rather Tucket made no requests for your clips at all, switch off Settings, then General, then Fetch link previews. Links flagged as sensitive are never fetched either way, so a URL with a token in it is never sent anywhere.

A little, which is why it is off unless you turn it on. Find clips from Spotlight copies your clip text into the macOS search index, which is still on your Mac, but where it can show up in Spotlight results, including on a shared screen.

Anything flagged or marked sensitive is never added. Switch it off and Tucket removes everything it put there, rather than just stopping adding more. See Finding something again for how to use it.