Privacy Policy

Last updated: 16 September 2026

The short version

The desktop app makes one small, anonymous request a day (described below) and nothing else. We never see your card details. We collect the minimum needed to deliver and re-issue your licence. We don't sell anything to anyone.

What the desktop software collects

Nothing about you leaves your PC. The app stores, locally:

  • A Machine ID (a salted hash of Windows' MachineGuid), shown to you so you can enter it at checkout.
  • Your recorded click sequence and idle timeout (%APPDATA%\Mousekeeper\config.json).
  • Trial state (a file and a registry entry).
  • Your imported licence file, after activation.
  • The signed list of revoked licences it last downloaded (a file and a registry entry).

At start-up and once a day, the app downloads our public list of revoked licences from this website, so that refunded or moved licences stop working. That request contains no identifiers — not your Machine ID, licence or email — although, like any web request, it reveals your IP address to our server, where it appears in standard server logs. If the request fails, the app simply carries on. The app runs no analytics SDK and reports no usage to us. The "Get a licence" and "My account" buttons simply open this website in your browser.

What this website collects

  • When you buy: your name, email, the Machine ID you enter, your IP address, and Stripe's references for the payment (session, payment-intent and customer IDs). We need these to generate your licence, deliver it, and re-issue it later.
  • When you create an account: your name, email address, and a salted hash of your password (we never store the password itself).
  • When you sign in, confirm your email or reset your password: your IP address and one-time email tokens (stored hashed, expiring within hours).
  • When you move a licence: the new Machine ID and the time of the change.
  • When you contact us: the message contents, your email, your IP address.
  • Standard web server logs: IP, user agent, request URL — rotated regularly.

The only cookie this site sets is a session cookie (for security and to keep you signed in to your account). We do not use advertising or tracking cookies.

What we don't have

We have no access to your card number or your bank. Stripe handles payment and shares only the payment status and references with us. We don't use Google Analytics, Facebook Pixel, or any third-party tracking.

Who we share data with

  • Stripe — to process payments (Stripe's privacy policy).
  • Our email provider — to send your licence, sign-in links, and support replies.
  • Our hosting provider — standard server logs.

We do not sell, rent, or trade your personal data.

How long we keep data

We keep your order and licence record for as long as our business operates, so we can re-issue your licence whenever you need it. Sign-in tokens are deleted or expire within an hour. You can ask us to delete your data at any time — doing so means you lose the ability to recover your licence.

Your rights

You can ask to see, correct, or delete any personal data we hold about you. Email support@mousekeeper.org.