Shanghai Bairui Network Technology Co., Ltd. (“we” or “us”) respects and protects your personal data. This Privacy Policy explains how we collect, use, store, share and protect your personal data when you use the MouseTuner software (the “Software”), visit the website https://mousetuner.com (the “Website”) or buy a license, and the rights you have in relation to it.
The Software has no user accounts, collects no usage data and contains no analytics or advertising components. Every network request the Software makes is listed in the annex to this Policy, so you can check each one against a packet capture.
Please read this Policy carefully before using the Software or buying a license. By using the Software, visiting the Website or buying a license, you agree to the processing of your personal data as described in this Policy.
1. Controller
1.1The controller of the personal data described in this Policy is Shanghai Bairui Network Technology Co., Ltd. (上海柏锐网络科技有限公司), registered at Room ED1097, 1st Floor, Building 1, No. 1755 Hongmei South Road, Minhang District, Shanghai, China.
1.2For enquiries, requests and complaints concerning personal data, email support@mousetuner.com.
2. Personal data we collect
2.1When you use the Software, our activation service collects:
- (1)a SHA-256 hash of the machine fingerprint (derived from a macOS hardware identifier; the raw identifier never leaves your machine), used to register the trial, bind the license and run the daily verification;
- (2)the License Key or its SHA-256 hash, used for activation and verification;
- (3)the machine name you enter yourself at activation;
- (4)the source IP address and time of each request, recorded by the server when handling the requests above, used for security and rate limiting.
2.2When checking for updates, the Software requests the update feed from the Website; the request header contains the Software version and the macOS version. When downloading an update package, the Software connects to GitHub. Neither request contains other personal data.
2.3When you buy a license, we collect the email address you enter at checkout, the order number, the amount and currency paid, and the language of the checkout page. Your card number, billing address and tax details are collected and processed by Paddle, WeChat Pay or Alipay and never reach us; WeChat Pay and Alipay give us only the order number and amount.
2.4When you visit the Website, a cookie (NEXT_LOCALE) recording only your language preference is set after you switch language. The Website is hosted on Cloudflare, which processes connection data such as visitors' IP addresses to defend against attacks. The pricing page loads Paddle's checkout script, which may set Paddle's own cookies under Paddle's privacy policy.
2.5When you contact us by email, we collect your email address and the content of your message in order to handle your request.
2.6The Software's configuration sync uses your own Apple iCloud account and syncs your own scroll curve, button mappings and input source rules. It is off by default, is switched on by you, and its data does not pass through our servers.
2.7We do not collect: your name (unless you tell us in an email), data about how you use the Software, crash logs (the Software contains no crash reporter), your location, your contacts, or any other information unrelated to providing the service.
3. Purposes and legal bases
3.1We process your personal data for the following purposes:
- (1)performing the license agreement with you: registering the trial, issuing and delivering the License Key, activating and verifying the license, processing refunds;
- (2)keeping the service secure: detecting and blocking abuse of the activation service, limiting repeated binding of a single License Key, defending against network attacks;
- (3)complying with legal obligations: keeping transaction records as required for tax, accounting and dispute handling;
- (4)providing support and responding to your requests.
3.2Where the Personal Information Protection Law of the People's Republic of China applies, this processing is based respectively on necessity for concluding and performing a contract, necessity for complying with legal obligations, and your consent. Where the General Data Protection Regulation (GDPR) or UK data protection law applies, the legal bases are performance of a contract (Article 6(1)(b)), legal obligation (Article 6(1)(c)) and legitimate interests (Article 6(1)(f), namely keeping the service secure).
3.3We do not use your personal data for marketing, profiling or automated decision-making, and we do not send marketing emails.
4. Sharing and processors
4.1We do not sell your personal data. We do not disclose it to any third party except as set out in this clause.
4.2To provide the service we engage or share necessary personal data with the following service providers:
- (1)Paddle.com Market Ltd. (United Kingdom): processes card and PayPal transactions independently as Merchant of Record and provides us with your email address, order number and amount;
- (2)Tenpay Payment Technology Co., Ltd. (WeChat Pay) and Alipay (China) Network Technology Co., Ltd.: process transactions in Chinese yuan and provide us with the order number and amount;
- (3)Resend, Inc. (United States): sends the email containing your License Key on our behalf and receives your email address and the message content for that purpose;
- (4)Cloudflare, Inc. (United States): hosts the Website and the activation service; its global edge network handles all requests;
- (5)Neon, Inc. (United States): hosts our database, which stores the server-side data described in clause 2;
- (6)GitHub, Inc. (United States): distributes update packages and receives your IP address when you download an update.
4.3These providers process personal data only on our instructions or as necessary to provide the service to you, and are bound by their respective contracts and privacy policies.
4.4We may disclose personal data where required by law, on a lawful request from a competent authority, or where necessary to protect our rights or those of others.
5. International transfers
5.1Our activation service, database and email service are hosted by providers located outside the People's Republic of China (mainly in the United States and on Cloudflare's global network). Personal data you provide when using the Software or buying a license is therefore transferred to, stored and processed abroad.
5.2If you are in mainland China: this Policy informs you of the overseas recipients, the purposes and methods of processing, the categories of personal data, and how to exercise your rights against those recipients. By using the Software or buying a license you acknowledge and separately consent to these transfers; you may withdraw that consent at any time under clause 8, without affecting processing carried out before withdrawal.
5.3If you are in the European Union, the European Economic Area or the United Kingdom: transfers to countries without an adequacy decision, such as China and the United States, are made under the Standard Contractual Clauses approved by the European Commission or on the basis that the transfer is necessary for the performance of the contract, with supplementary measures to protect your data.
6. Retention
6.1Detailed server request logs (fingerprint hash, IP address, timestamp) are deleted automatically after 90 days. Aggregate counts that do not identify a person (for example how many machines a License Key has been bound to, and its first and last active date) are kept indefinitely to enforce the rebinding limit.
6.2Trial registration records (fingerprint hash and first-launch time) are kept indefinitely to prevent the trial being reset by reinstalling.
6.3Order and license records (email address, order number, amount, License Key and its bindings) are kept for the life of the license and thereafter for as long as tax, accounting and dispute-handling law requires. You may ask for your email address to be deleted under clause 8.
6.4Support emails are kept for no longer than 2 years after the matter is closed.
6.5When a retention period ends, we delete or anonymise the personal data concerned.
7. Security
7.1We apply security measures appropriate to the sensitivity of the data: all network traffic is encrypted with TLS; machine fingerprints and License Keys are stored and transmitted as hashes rather than in clear; license credentials are digitally signed to prevent forgery; database access is limited to authorised personnel; and the administration login uses human verification.
7.2No transmission or storage is completely secure. If a security incident such as a personal data breach occurs, we will notify you and the competent authorities as required by law.
8. Your rights
8.1To the extent provided by applicable law, you have the following rights in relation to your personal data:
- (1)to access and obtain a copy of the personal data we hold about you;
- (2)to have inaccurate or incomplete personal data corrected;
- (3)to have personal data deleted;
- (4)to restrict or object to our processing;
- (5)to withdraw consent you have given (including consent to international transfers);
- (6)to receive the personal data you provided in a structured, commonly used format (portability);
- (7)to lodge a complaint with the data protection authority in your jurisdiction.
8.2To exercise these rights, email support@mousetuner.com and provide the email address you used at checkout or your License Key so that we can verify your identity. We respond within 30 days of receiving the request, or sooner where the law requires.
8.3Please note that deleting an order record also revokes the corresponding License Key, because we can no longer verify who bought it; once a trial registration is deleted, the same machine will not receive another trial.
8.4The Software has no account: stopping using it stops all data collection. Uninstalling the Software does not delete records already held on our servers; to have them deleted, make a request under this clause.
9. Minors
9.1The Software and the Website are intended for adults. We do not knowingly collect personal data from minors under 14 (or the higher age set by the law of your jurisdiction). If you are the guardian of a minor and find that we have collected a minor's personal data without your consent, contact us and we will delete it promptly.
10. Cookies and similar technologies
10.1The Website sets a single functional cookie named NEXT_LOCALE only when you switch language manually; it remembers your chosen language and is not used for tracking. You can delete it at any time in your browser.
10.2The Website uses no analytics, advertising or cross-site tracking cookies. The checkout component provided by Paddle on the pricing page may set Paddle's own cookies; their purpose and management are governed by Paddle's privacy policy (https://www.paddle.com/legal/privacy).
11. Changes to this Policy
11.1We may revise this Policy because of changes in law, changes to the service or for other reasons. The revised Policy is published on this page of the Website with a new effective date. Material changes — a new network request, or a change to the purposes, methods or categories of processing — will be notified by reasonable means such as the release notes of the Software update or an announcement on the Website.
11.2This Policy is made in Chinese; versions in other languages are provided for convenience only. In the event of any inconsistency, the Chinese version prevails.
12. Contact
12.1Shanghai Bairui Network Technology Co., Ltd., Room ED1097, 1st Floor, Building 1, No. 1755 Hongmei South Road, Minhang District, Shanghai, China. Email: support@mousetuner.com.
12.2If you are not satisfied with our response, you have the right to complain to the data protection authority in your jurisdiction.