Privacy Policy

Last updated October 26, 2026

Ferry is made by Studio Établi, Montréal, Québec, Canada ("we"). This policy explains what information Ferry handles and how. In short: your clipboard stays on your devices, and anything we store for sync is encrypted so that we cannot read it.

On your PC

Ferry saves what you copy (text and images) to a database on your computer, encrypted with your Windows account (Windows Data Protection). It is not sent anywhere unless you turn on sync. You can delete items, clear your history or pause capture at any time.

When you use sync

Sync is optional. When it is on, each item is encrypted on your device (AES-256-GCM) with a key that only your devices have, before it is sent to our server. We store:

• the encrypted items, which we cannot decrypt;
• for each item: a random-looking identifier, its size, whether it is pinned or deleted, and when it changed;
• an identifier for your group of devices, also derived from your secret key.

We do not have accounts, names or email addresses for sync. Pairing codes are single-use and expire after 10 minutes. Our server runs on Cloudflare, which processes network requests (including IP addresses) to deliver the service. We do not use your IP address to identify you and we do not keep access logs beyond Cloudflare's standard short-term operational logs.

Copies that password managers mark as private are not synced unless you allow it in Ferry › Sync.

Payments

Subscriptions are processed by Stripe and sold through Link, Stripe's checkout service. They collect your payment details, email address, name and billing address (needed to calculate sales tax) under Stripe's privacy policy; we never see your full card number. Our server receives from Stripe only your subscription's status, plan and renewal dates, linked to your sync group so your devices know whether sync is active. Your email stays in Stripe, where we can look it up to answer billing questions; it is used only for receipts and billing.

What we don't do

• No advertising, analytics or tracking in the app or on this website.
• We never sell or share your information, except with the service providers above to run Ferry, or when required by law.

How long we keep it

• Deleted synced items are removed; their deletion markers are purged after 30 days.
• If you delete your synced history from Ferry, it is removed from our server immediately.
• If a trial or subscription ends, the encrypted data is kept 30 days in case you resubscribe, then deleted.
• Billing records are kept as long as tax law requires.

Where it is stored

Synced data is stored by Cloudflare, and billing data by Stripe, on servers that may be outside Québec and Canada, including in the United States. Because synced content is end-to-end encrypted, it cannot be read where it is stored.

Your rights

You can ask to access, correct or delete the personal information we hold about you, or ask questions about this policy. Studio Établi's Privacy Officer is responsible for protecting personal information and can be reached at support@ferryclip.com. If you are in Québec, you may also contact the Commission d'accès à l'information.

Changes

If we change this policy in a way that matters, we will update the date above and say so in the app.