Privacy Policy

Product: Cursor Lock Keys for Windows (Stream Deck plugin for Windows) · Provider: GRAMSHIFT (Tokyo, Japan) · Last updated: 2026-10-05

Summary

The plugin limits where your mouse pointer can go, on your PC, when you press its keys. It does not collect or send any data about you or your PC. It has no account, no online service, no analytics and no telemetry, and it makes no network requests of its own. It does not record mouse movement, clicks or what you type.

What the plugin does on your PC

It reads the list of your screens from Windows: their device names (for example \\.\DISPLAY1), their own names (for example the model name of a monitor), their positions and sizes. They are shown on the keys and in the settings.
When you press Lock to Window, it reads which window is in front, the position and size of its inside, its title and its window class name. The title is shown on the key and in the settings page while the lock is on. While that lock is on, it checks ten times a second whether that window still exists, is minimized and is in front.
While a lock is on, it reads ten times a second the rectangle Windows confines the pointer to, and, if you chose a "hold to leave" key, whether that one key (Ctrl, Alt, Shift) is held at that moment. It does not read any other key and does not record anything.
It reads the position of the mouse pointer when you press a key (to find the screen it is on), and sets it when you press Cursor to Monitor or lock to another screen.
It limits and frees the pointer with the Windows function ClipCursor. It changes no Windows setting, installs nothing and does not open, read or modify any other program.
Once one of its lock keys has been shown, a small helper process (part of the plugin, file bin/watchdog.cjs) runs next to the plugin until the plugin exits. Its only job is to free the pointer if the plugin process ends unexpectedly while a lock is on.
It talks only to the Stream Deck app on the same PC, through a local connection (127.0.0.1) that the Stream Deck app provides to every plugin.

Where data goes

Data	Where it is processed	Stored by the plugin?
Names, positions and sizes of your screens	Read from Windows on your PC	No. Kept in memory to draw the keys and the settings page; not written to disk or sent anywhere.
Title, class name, position and size of the window you lock the pointer into	Read from Windows on your PC	No. Kept in memory while the lock is on; not written to disk or sent anywhere.
Pointer position; whether the "hold to leave" key is held	Read from Windows on your PC at that moment	No. Not recorded.
What your apps contain or show (documents, web pages, other window titles), what you type, where you click	Never accessed	No.
Key settings (the screen you chose, the "hold to leave" key)	Saved by the Stream Deck app on your PC, like the settings of any other key	Only in your Stream Deck profile on your PC.
Technical log	The Stream Deck plugin framework writes a small log file (mainly connection errors) in the plugin's folder on your PC. The plugin does not write window titles or screen names into it.	On your PC only. It is not sent anywhere.
Anything sent to GRAMSHIFT servers	—	Nothing. The plugin has no server of its own and makes no network requests of its own.

Purchases

The plugin is sold on the Elgato Marketplace. Purchases, payments and licenses are handled by Elgato (Corsair) and its payment provider under Elgato's own terms and privacy policy. GRAMSHIFT never receives card details. If Elgato provides us with sales records (for example the date, country and amount of a sale), we use them only for accounting and tax.

Support requests

If you contact us, we receive what you choose to send (for example your email address, your message and any screenshots; a screenshot of a key can show the title of a window or the name of a screen). We use it only to answer you. Email to contact@gramshift.com is forwarded by our email forwarding provider (ImprovMX) to a mailbox hosted by Google (Gmail), so those providers process support emails on our behalf.

Our role and legal basis

The plugin works only as a tool on your own computer: GRAMSHIFT does not receive or process anything from it. For sales records and support emails, GRAMSHIFT is the controller. We rely on our legitimate interest in answering requests and on legal obligations (for example tax records). GRAMSHIFT is based in Japan, so this information is processed in Japan and by the providers named above.

Your rights

You can ask us to access, correct or delete personal information we hold about you, or object to its use, by emailing contact@gramshift.com. If you are in the EEA or the UK, you can also complain to your local data protection authority.

Retention and deletion

The plugin keeps nothing of its own except its key settings and log file, on your PC. Uninstalling it from the Stream Deck app removes them; nothing else on your PC was changed by it. Support emails are kept only as long as needed to handle the request and meet legal obligations; you can ask us to delete them. Sales records are kept for up to 7 years for accounting and tax.

Changes

If the plugin ever starts to send or store other data, this policy will be updated before that change is released, and the date above will change.

Contact

GRAMSHIFT · contact@gramshift.com · 1-10-8 Dogenzaka, Shibuya Dogenzaka Tokyu Bldg 2F-C, Shibuya-ku, Tokyo 150-0043, Japan