# Cloud data

When **Cloud Sync** is enabled, clips are **end-to-end encrypted on your device with a key you hold** before upload, so your storage provider, Octoclip, and third parties only ever receive ciphertext. The full security model and setup live on the [Cloud Sync](/features/cloud-sync) page.

> [!DANGER] Your key cannot be recovered if lost
> Octoclip cannot decrypt your cloud content for you. If you lose the encryption key, the clips already in your bucket are unrecoverable. Save it in a password manager before enabling Cloud Sync.

## What to do

- Use the **same storage path, credentials, and encryption key** on every device — see [Cloud Sync](/features/cloud-sync) and [WebDAV / S3 Configuration](/advanced/webdav-s3-config) for setup.
- To stop, disable Cloud Sync in settings and verify local history still works.

## Next

[Backup and restore](/features/data-security/backup), [Privacy and sensitive content](/features/data-security/privacy).