Privacy Policy — Retrace
Last updated: October 28, 2026
This page explains how Retrace, a clipboard history app for Android published by Trolley Studio (Muhammad Ashraf) under the package name com.mashraf.clippy, handles your data.
In short
- What you copy stays on your device. Retrace has no servers, and your clips are never uploaded, shared or sold.
- Your clip history is left out of Android's Google backups. You can make a password-encrypted backup file yourself if you want one.
- No accounts or sign-up. We never ask for your name, email or phone number.
- Retrace uses Google Firebase for anonymous usage statistics and crash reports. These never include what you copy, and you can turn them off in Settings → Privacy.
Your clips
The text you copy is saved in a database on your device, together with when it was copied and whether you pinned it or put it in a collection. Retrace never sends it anywhere. You can delete single clips, clear your history, or have old clips deleted automatically after a number of days you choose. Uninstalling the app or clearing its storage erases everything.
Your history and settings are excluded from Android's automatic backup to your Google account, because clips can hold passwords and other private text. When you move to a new phone with Android's direct device-to-device transfer (cable or Wi-Fi), the system copies them to the new phone along with your other apps; they don't go through any cloud.
How Retrace notices that you copied something
Since Android 10, apps can't read the clipboard in the background. Retrace uses two permissions to work around this, and uses them only for saving your clipboard history:
- Accessibility service: Retrace listens for the short pop-up messages and spoken announcements that Android and apps show, such as "Copied to clipboard". It checks each one only for whether it is a copy confirmation, and then discards it; those messages are never stored or sent. Retrace ignores regular notifications (such as messages), can't read the content of other apps' screens, and doesn't record what you type or tap or act on other apps.
- Display over other apps: when a copy is detected, Retrace opens an invisible window for a fraction of a second, because only the app in front is allowed to read the clipboard. It reads the clip, saves it to your history on the device and closes the window.
You can pause saving at any time from the app, and turn the accessibility service off in Android's settings.
Sensitive clips
When an app such as a password manager marks copied text as sensitive, Retrace hides it behind dots in the app, the widget and the quick-paste panel until you reveal it. Sensitive clips only show up in search when you type them exactly, are never included in backup files, and are deleted automatically after a period you choose (one hour by default). With Retrace Pro you can also require your fingerprint, face or screen lock to open the app.
Backup files
Retrace Pro can export your clips and collections to a backup file, encrypted with AES-256 using a password you set. The file is saved wherever you choose, such as your phone's storage or a cloud folder you pick, and is then subject to that place's privacy terms. We never receive the file or its password, and can't recover a forgotten password. Sensitive clips are left out.
Actions you choose
When you tap an action on a clip, such as opening a link, calling a number, writing an email or sharing, Retrace hands that clip to the app you pick, and that app's privacy policy applies. Copying a clip back puts it on Android's clipboard, where the app you paste into can read it. The home-screen widget and quick-settings tile (both Pro) show your recent clips on your phone, with sensitive clips hidden.
Usage statistics and crash reports
To understand how Retrace is used and to fix bugs, the app includes two Google services. We only see their data as reports and totals in Google's consoles:
- Google Analytics for Firebase: which screens you open and which features you use (for example that a clip was saved, a search was started, a smart action or text tool was used, or a backup was made), how far you get through setup and which setup steps are done, whether saving a clip failed and the reason (such as a missing permission), and the steps of the Retrace Pro screen and purchase. Each event is a fixed label: it never contains your clips, what you search for, or anything about them. Events come with your phone's brand family and Android variant (for example Samsung, One UI), whether Retrace is set up and running, and whether you have Pro, plus Firebase's standard data: a random app-instance ID, device model, Android version, app version, language, and country or approximate region. Firebase also records its standard events such as first open, sessions, app updates and in-app purchases.
- Firebase Crashlytics: when the app crashes, or when reading the clipboard fails with an error, the technical error details, device model, Android and app version, the app's state at the time, the same brand, setup and Pro labels, and an installation identifier.
Neither ever includes the text you copy. Both are on by default and are turned off together with the Share usage data and crash reports switch in Settings → Privacy. Retrace has no ads and doesn't use your advertising ID.
Purchases
Retrace Pro is a one-time purchase through Google Play. Google handles the payment, and we never see your payment details. The app only asks Google Play whether you own Retrace Pro; Google Play's privacy policy covers the purchase itself.
Reporting a setup problem
If you tap "Steps don't match your phone? Report it" in setup, Retrace opens your email app with a message to us that includes your phone's make and model, Android version and build, the app version and which setup steps are done. Nothing is sent unless you send that email, and you can edit it first. We use it only to answer you and to improve the setup guides.
Why we use this data
- To provide the app's features, entirely on your device.
- To find and fix crashes, especially on particular phone models.
- To understand how the app is used and improve it.
- To answer support requests you send us.
In the EEA and the UK we rely on legitimate interests for aggregated statistics and crash reports, which you can switch off at any time, and on your request when you write to us.
Your choices
- Statistics and crash reports: turn them off in Settings → Privacy.
- Saving clips: pause it in the app, or turn off Retrace's accessibility service in Android's settings.
- Your clips: delete them in the app, set automatic deletion, or clear the app's storage or uninstall it to erase everything.
- Access or deletion requests: write to us at the address below and we will help as far as Google's services allow.
Children
Retrace is a general-audience utility. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will act on it.
Retention, transfers and security
Your clips are kept on your device until you or your retention settings delete them. We keep no personal data on our own systems, apart from emails you send us. Google keeps the statistics and crash reports it collects according to its policies and the retention settings of the app's Firebase project, and may process them on servers outside your country, including in the United States. That traffic is encrypted in transit.
Services used
| Service | Purpose | Policy |
|---|---|---|
| Google Analytics for Firebase | Usage statistics | firebase.google.com/support/privacy |
| Firebase Crashlytics | Crash reports | firebase.google.com/support/privacy |
| Google Play Billing | Retrace Pro purchase | policies.google.com/privacy |
How Google uses data from apps that use its services: policies.google.com/technologies/partner-sites
Changes
If we change what the app collects, we will update this page first and change the date at the top.
Contact
Trolley Studio (Muhammad Ashraf) — hello@trolleygames.com