Key Spammer
Privacy Policy
Summary
Key Spammer does not collect, transmit or sell any personal data. It has no user accounts, no analytics, no advertising and no networking capability of any kind. Everything it does happens locally on your computer.
This website is a separate matter. It keeps short-lived server logs, and it can use Google Analytics to count visits — but only if you agree to that. You are asked on your first visit, and you can change the answer at any time from the foot of any page.
What the app does on your device
To do its job, Key Spammer reads and uses the following, entirely on your machine:
- The names of running processes, so it can list them for you to choose a target.
- The file path of each process' program file, so it can read that program's icon and show it beside the name in the list. Where Windows does not allow the app to read a path, the entry simply appears without an icon.
- The window belonging to the process you select, so it can bring that window to the front and send keystrokes or mouse clicks to it.
- The key, interval and options you choose, held in memory while the app runs.
None of this is written to disk, sent anywhere, or retained after you close the app. The app stores no settings or history between runs.
What the app does not do
- It does not record what you type. Key Spammer sends input, it does not observe it. It installs no keyboard hook and does not read keyboard state. Its global start and stop shortcut is registered with Windows so that the operating system notifies the app of that one key (F6) and nothing else. The app cannot see any other key you press, in any application.
- It does not use the network. The program contains no networking code and its package requests no network permissions. It cannot send data off your device even in principle.
- It does not read your files, clipboard, screen contents, camera, microphone or location.
- It has no accounts, no telemetry, no crash reporting and no advertising.
Optional diagnostic log
If you set the environment variable KS_DEBUG_LOG, the app writes a
troubleshooting log to ks_debug.log in your Windows temporary folder
(%TEMP%). This is off unless you deliberately turn it on.
The log contains only technical details of a run: the name of the target process, its process and window identifiers, which key was sent, and the reason a run stopped. Program file paths can include your Windows user name, so treat the file as you would any other diagnostic output before sharing it.
The file stays on your computer, is never transmitted, and you can delete it at any time. Deleting it has no effect on the app.
If you installed from the Microsoft Store
Microsoft provides Eiliko Oy with aggregated, anonymised statistics about installations of the app, for example how many people installed it, in which markets, and on which Windows versions. We cannot identify individual users from this information. Microsoft's own handling of your data is governed by the Microsoft Privacy Statement.
This website
Everything above describes the application. This website is separate from it, and unlike the app it does collect a small amount of information.
The site is served from Google Cloud's Finnish region (europe-north1). Like
any web server it writes a log line for each request, holding your IP address, the page
requested, the time, the referring page and your browser's user-agent string. These logs
exist so that we can see the site is up, diagnose errors and recognise abuse. They are
kept for 30 days and then deleted automatically. The lawful basis is our legitimate
interest in running the site securely; you are not asked to consent to them, because a
server cannot answer a request without receiving it.
The site itself sets no cookies, and it has no accounts, no contact form and no newsletter. We do not sell or share what it holds.
Google Analytics
With your agreement, this site uses Google Analytics 4 to count visits and to see which pages are read and in which languages. That tells us which parts of the site are worth improving. It measures pages rather than people: we cannot see who you are, and Google Analytics 4 does not store full IP addresses.
It runs only if you accept it. A banner asks on your first visit. Until
you press Accept nothing is requested from Google and no analytics cookie is set —
declining, or simply ignoring the banner, leaves the site exactly as it was before
analytics existed. If you do accept, Google Analytics stores cookies named
_ga and _ga_<id> in your browser. They last up to two
years and distinguish one browser from another, so that a returning visitor is not
counted twice.
You can change your mind at any time from the Cookie settings link at the foot of every page. Declining there also deletes the analytics cookies already in your browser. Clearing this site's storage in your browser does the same, and the banner will ask again. We also ask again at least once a year, and whenever what we use the measurement for changes, so that an answer given long ago is never treated as an answer about something else.
In this arrangement Eiliko Oy is the data controller and Google Ireland Limited is the processor, under Google's data processing terms. Google may transfer data to the United States; that transfer relies on the EU–US Data Privacy Framework. The tag is configured to refuse advertising storage and personalisation, so the measurement is used to understand the site, not to build advertising audiences or to target you with ads. Google's own handling is described in the Google Privacy Policy.
Your rights
The application holds nothing about you, so there is nothing in it for us to look up, correct, export or erase. For the website, the EU General Data Protection Regulation gives you the right to ask what we hold, to have it corrected or erased, to object to processing we base on legitimate interest, and to withdraw consent to analytics at any time. The last of those is the Cookie settings link at the foot of every page, and it takes effect immediately. Server log entries are keyed to an IP address rather than to a person, so finding yours may mean telling us the address and roughly when you visited. Write to us at the address above and we will respond. You also have the right to lodge a complaint with your national data protection authority; in Finland this is the Office of the Data Protection Ombudsman.
Children
Key Spammer is a general-purpose utility and is not directed at children. It does not knowingly collect information from anyone, of any age.
Changes to this policy
If the app or this site changes in a way that affects this policy, we will update this page and change the date at the top. Material changes will also be noted in the app's release notes.
A note on responsible use
This is not a privacy matter, but it belongs alongside it: automated input breaks the rules of many online games and services, and using Key Spammer with them can get your account suspended or permanently banned. Use it only where it is allowed. You do so at your own risk, and Eiliko Oy accepts no liability for the consequences.