Privacy
Last updated 17 August 2026
The short version. Your notes, your clipboard history and the files on your shelf are stored only on your Mac and are never sent anywhere. Peninsula has no analytics, no telemetry and no accounts. It makes exactly two kinds of network request: checking your licence and checking for updates.
What Peninsula stores on your Mac
Everything the app keeps lives in one folder:
~/Library/Application Support/Peninsula/
- Notes —
notes.json. Plain text, exactly as you typed it. - Clipboard history —
clipboard.json. The most recent 200 text items you have copied. - Shelf files —
Shelf/. Copies of the files you drag in.
This folder is marked as excluded from backups, so clipboard history is not swept into Time Machine or iCloud backups. Nothing in it is encrypted beyond your Mac's own FileVault disk encryption, and nothing in it is transmitted. Deleting the folder deletes everything Peninsula knows about you.
About clipboard history specifically
Peninsula watches the system pasteboard so it can offer you what you recently copied. Two things are worth stating plainly:
- Peninsula skips anything marked concealed or transient. Password managers such as 1Password mark their copies this way precisely so clipboard tools ignore them, and Peninsula honours that. Passwords copied from a compliant password manager are not recorded.
- Peninsula cannot tell whether text you copy from somewhere else is sensitive. If you copy a
password out of a plain text file, it will be recorded like any other text. You can clear the
history at any time, or delete
clipboard.json.
What leaves your Mac
| Request | Goes to | Contains | When |
|---|---|---|---|
| Licence activation and validation | api.lemonsqueezy.com | Your licence key, and a label for this Mac — its name plus eight characters derived from a one-way hash of its hardware ID (e.g. "Sid's MacBook Pro (0FA05AF0)"). The label exists so your two activations can be told apart, and so a reinstall on the same Mac can be recognised rather than quietly consuming a second slot. The hash cannot be reversed into a device identifier | When you activate, and once per launch |
| Update check | updates.getpeninsula.com | A standard web request. The server sees your IP address and the app version, as any web server does | Daily, and when you choose Check for Updates |
| Crash report (only if you agree) | Shown to you first | macOS's own crash log: the stack at the time of the crash and your macOS version. Never your notes, clipboard or files | Only after a crash, and only if you choose to send it |
That is the complete list. There is no analytics SDK, no usage tracking, no advertising identifier, and no account to create.
Payments
Purchases are handled entirely by Lemon Squeezy, who act as the merchant of record. Peninsula never sees or handles your card details — the checkout happens on their systems, and they hold your billing information under their privacy policy.
Permissions Peninsula does not ask for
Peninsula requests no camera, microphone, calendar, contacts, location, screen recording or accessibility access. If macOS ever prompts you for any of these on Peninsula's behalf, that is a bug — please report it.
Diagnostic logging
Diagnostic logging is off in the released app. If you are helping debug an
issue you can enable it for one launch, in which case a text log is written to
~/Library/Logs/Peninsula/ on your Mac and nowhere else. It records UI events like
window sizes and open/close timings — not your content.
Children
Peninsula is a utility for macOS and is not directed at children under 13.
Changes
If this policy changes in a way that affects what data leaves your Mac, the change will be called out in the release notes for the version it ships in, not quietly edited in here.
Contact
Questions about any of this: support@getpeninsula.com.