document.body.addEventListener("paste", function(e){ console.log("paste event fired") })
http://jsbin.com/odupog/1/edit
Either way, should alleviate some of the privacy concerns, as you can only get ClipboardData from elements where "paste" has a visible effect.