Privacy policy
Privacy policy
What stays on your Mac, what leaves it, and what we hold about you.
Who we are
Sherbet is a suite of small Mac tools. This policy covers Sherbet Clipboard, which is the only tool today, this website, and buying a licence. The seller is Sherbet Software, operated by Gal Salomon. Questions about any of it go to support@sherbetapps.com.
The short version: what you copy, type and fill stays on your Mac. We hold almost nothing about you, and this page lists the little we do.
What stays on your Mac
- Your clipboard history, text and images, plus your tags and folders.
- The values Sherbet learns for form fields: what you pasted into a field, and what you typed into an email, phone, name, address or company box. It never reads a password box.
- Text read out of copied images. That is done on your Mac, by Apple's Vision framework, and skips anything that looks like a secret.
- Your settings.
These are plain files in ~/Library/Application Support/Sherbet. Nothing in that
folder is uploaded, there is no account, and there is no analytics, crash reporter,
advertising or sync. Your licence key, an installation id and the dates of your trial are
kept in the macOS Keychain instead. So is, when an activation or the release of a slot it
took got no answer, a one-way fingerprint of the key (never the key itself), so Sherbet can
tell you that a slot it could not confirm is probably this Mac's own.
A copy marked as a secret by a password manager is never stored. Apple's Passwords app and Keychain Access mark nothing, so they start on the list of ignored apps, and you can add more. An ignored app is fully invisible to Sherbet: nothing captured, suggested or learned.
To suggest the right value, Sherbet asks macOS for Accessibility access, which lets it read which field you are in and what it is called. To remember a value per website it reads the site name of the browser's active tab, through Accessibility first and, only if you have allowed it, through AppleScript. Only the site name is read, and it stays on your Mac.
The two network connections
Sherbet makes two kinds of network connection. Neither carries anything you copy, type or fill.
-
Licence check. When you enter, release or re-check a licence key, and
about once a day while a key is active (and, if it could not reach the server, again within the hour), Sherbet sends that key and an installation id to
Lemon Squeezy, the company that sells the licence, to confirm it is valid. These are the
/activate,/validateand/deactivatecalls of its licence service atapi.lemonsqueezy.com. From the reply Sherbet reads only whether the key is valid for this product, and it never stores your name or email. The 7-day Pro trial runs on your Mac and makes no connection at all. -
Update check. Sherbet downloads one small file,
appcast.xml, fromsherbetapps.com, which names the newest version. That request carries your IP address, as any web request does, and a User-Agent with the app and its version, for exampleSherbet/1.0 Sparkle/2.10.0. Nothing else: no licence key, no identifier, no system profile, no cookies. Sherbet checks about once a day and, when it finds a new version, downloads it fromdownloads.sherbetapps.com, verifies it (an EdDSA signature and Apple's code signature) and installs it when you are not using Sherbet. Checking and installing are each a switch in Settings > General; with checking off, Sherbet contacts the server only when you press Check for Updates.
If Sherbet cannot reach the licence service it keeps working for up to 14 days since its last successful check, and the check is retried in the background.
This website
The site is served by Cloudflare, which sees each visitor's IP address and the page asked
for in its own logs, as any host does. The home page comes in three designs, and the site
counts how often each is shown and how often its download button is clicked, as totals
with nothing that identifies you. We set no cookies and load nothing from any other
company: even the fonts are served from this site. Downloads come from
downloads.sherbetapps.com, which is served the same way.
Buying a licence
Licences are sold by Lemon Squeezy, which acts as the merchant of record: it takes the payment, handles sales tax and VAT, and sends the receipt. It collects your name, email, billing details and payment details under its own privacy policy, and we never see your card. Lemon Squeezy tells us the order, your name and your email so we can issue the licence and help you with it.
Keeping and deleting your data
- The history on your Mac is forgotten after the number of days you choose in Settings (30 by default), or never if you choose Forever. Trashing the Sherbet folder forgets everything. There is no other copy.
- Releasing a Mac with Deactivate this Mac in Settings gives its licence slot back. The Keychain items can be removed in Keychain Access.
- Emails you send us are kept as long as needed to help you, and deleted when you ask.
- Order records stay with Lemon Squeezy for as long as its policy and the law require.
Your rights
You can ask us what we hold about you, to correct it, or to delete it, by writing to support@sherbetapps.com. For what Lemon Squeezy holds, ask Lemon Squeezy. If you live in the EU or UK you can also complain to your data protection authority. We do not sell your data and we do not share it, other than with Lemon Squeezy and Cloudflare as described here.
Contact
Last updated
10 October 2026. If this policy changes, the date changes with it.