Privacy Policy

Last updated: 19 October 2026

AutoKeyClicker (“we”) makes the AutoKeyClicker app and runs this website. This page explains what we collect, why, who else handles it, and how to have it deleted. Questions go to support@autokeyclicker.app.

The short version

• The app keeps your macros, profiles, settings and themes on your own computer. We never see them.
• The app has no analytics, tracking or ads, and this website sets no tracking cookies. We don't track you across other sites, so a browser “Do Not Track” signal changes nothing here.
• To run Pro we store your email address, your license key and a hashed fingerprint of your computer. That's it.
• We never sell your data or share it for advertising.

What the app sends

• License check (Pro). When you activate Pro, and from time to time after, the app sends your license key, a hardware fingerprint and which app is asking (Pro or the Beta) to our server. The fingerprint is a one-way SHA-256 hash of your computer's hardware IDs (on Windows, the motherboard ID and system disk serial number; on a Mac, the hardware UUID and serial number; on Linux, the system's machine ID and system disk serial number); the original IDs never leave your computer and can't be recovered from the hash. We use it to tie a license to one computer at a time.
• Update check. The app downloads a small file from autokeyclicker.app to see whether a new version exists. It sends nothing about you; like any web request, our host sees your IP address.

Nothing else leaves your computer. Recorded macros, keystrokes and mouse movements stay in the app's local data folder.

On Linux. Hotkeys and macro recording read your keyboard and mouse directly, and the app sends its clicks and key presses through a virtual input device. This needs a one-time setup that lets the person signed in at the computer use those devices. To know where the pointer is and which window is under it, the app asks your desktop:

• on GNOME, through a small helper extension it installs if you choose to;
• on KDE and Hyprland, through their own built-in scripting;
• elsewhere, through the screen-sharing permission your desktop asks you about once.

With screen sharing, the app reads only the pointer's position. It never looks at, keeps or sends a picture of your screen. None of this leaves your computer.

What we store

• Purchase and license: your email address, license key, plan (monthly, lifetime or beta tester), subscription status, Stripe customer and subscription IDs, the hashed computer fingerprint, and when the license was activated or moved. Kept for as long as the license exists, because we need it to honor the license and handle refunds and disputes.
• Gallery account (optional, Pro only): your email address, the display name you choose, and your uploads, likes and reports. Kept until you delete them or your account. See Terms.
• Discord (optional): if you use /verify in our Discord server, we store your Discord user ID linked to your license key so the bot can give you the Pro role. Support tickets you open there are logged in a staff-only channel.
• Abuse protection: to stop spam and brute-force attempts we count requests per IP address. Where we store these counts, the IP is one-way hashed first, and the counts expire within hours to days. Download counters work the same way.
• Server logs: our server's logs can contain your email address and license key when something goes wrong. They're used only to fix problems, capped in size and overwritten as new entries come in.

Who else handles your data

We use a small number of services to run AutoKeyClicker. Each gets only what it needs:

• Stripe runs checkout and billing (and acts as the reseller for tax purposes). Stripe collects your payment details directly; we never see or store your card. Stripe's own privacy policy covers what it collects.
• Resend sends our emails (your license key, sign-in codes).
• Zoho Mail hosts our support inbox, so emails you send to support@autokeyclicker.app are stored there.
• DigitalOcean hosts our license server, and Neon hosts its database, both in the United States.
• Cloudflare hosts this website and provides Turnstile, the bot check on gallery sign-in and uploads.
• Google, only if you choose “Continue with Google” to sign in to the gallery. Google tells us your verified email address and nothing else.
• Discord, only if you join our Discord server.

We may also disclose information if the law requires it, or to protect against fraud.

Why we use it

To deliver and honor what you bought (sending your key, checking your license, handling refunds), to keep the service secure and free of abuse, and to answer you when you contact us. For visitors in the EU and UK, the legal bases are performance of our contract with you (licenses, accounts) and our legitimate interest in preventing fraud and abuse (rate limits, logs).

Your choices and rights

Email support@autokeyclicker.app from the address you bought with to:

• See what we hold about you, or get a copy.
• Correct it, for example a mistyped email address.
• Delete it. Deleting your purchase record also deactivates your license key, so we'll confirm before doing it. Stripe keeps its own payment records as tax law requires.
• Unlink Discord or delete your gallery account. You can also delete your gallery account yourself from the account page.

We answer within 30 days. If you're in the EU or UK and aren't happy with our answer, you can complain to your local data protection authority. Residents of California and other US states with privacy laws have the same rights to know and delete; we don't sell or share personal information as those laws define it.

Where your data lives

Our servers are in the United States. If you're outside the US, your data is transferred there to provide the service.

Children

AutoKeyClicker isn't directed at children under 13, and we don't knowingly collect their data. If you think a child has given us their information, email us and we'll delete it.

Security

Connections to our server are encrypted (HTTPS), license tokens are cryptographically signed, and access to the server and database is limited to us. We keep backups of our database and server (DigitalOcean, United States): nightly database backups for 14 days and weekly server snapshots for 4 weeks, so anything we delete at your request is gone from all backups within 6 weeks. No system is perfectly secure, but we keep what we store to the minimum above.

Changes

If we change this policy we'll update the date at the top. For significant changes we'll also post in our Discord server.