Privacy: everything runs locally — your clipboard never leaves your machine. Browsers don't let a web page read the clipboard while the tab is hidden — it only reads when the tab is focused & you've granted permission. Auto works on Chrome/Edge; Safari blocks it → use the Read clipboard button or paste with ⌘V/Ctrl V. Opening via file:// is blocked — run npm run dev and open http://localhost.