MouseCross Privacy Policy

Last updated: July 27, 2026

1. Data Controller

Responsible for MouseCross and its data processing:

Stefan Lohmaier
Weitlstr. 103
80935 München
Germany
Email: admin@slohmaier.com
Website: slohmaier.com

A data protection officer has not been appointed; there is no obligation to appoint one under Art. 37 GDPR or § 38 BDSG.

2. Summary

MouseCross’s core features run entirely offline. The crosshair overlay, theme settings, and hotkey functions never transmit mouse position, screen content, or accessibility data — none of this data ever leaves your device.

However, MouseCross is licensed software. License activation and periodic validation contact our licensing service at lic.slohmaier.com. This page explains exactly what is sent, what is stored, and on what legal basis.

3. License Activation & Validation

When you activate or revalidate a license, MouseCross contacts lic.slohmaier.com (the licensing service operated by Stefan Lohmaier) and sends:

DataPurpose
License key (UUID issued at purchase)Verify the key against LemonSqueezy’s records
Device hostname (your computer’s name)Label the activation in the license dashboard
Device identifier — a SHA-256 hash derived from hardware properties of your device (Windows: registry MachineGuid + system volume serial; macOS: IOPlatformUUID; Linux: /etc/machine-id or /var/lib/dbus/machine-id)Bind the license to your device and enforce the per-device activation limit

The device identifier is a one-way cryptographic hash. It cannot be reversed to identify your hardware, user account, or any personal information; it is used solely to count and verify device activations.

Validation requests are sent automatically in the background approximately every 14 days and contain only the license key, the product identifier, and the device identifier — not the hostname.

4. What Is Stored on Our Server

For each activation, the licensing service stores:

The licensing server is hosted by 1blu GmbH in Germany (data processing agreement per Art. 28 GDPR in place).

No separate consent is required for this processing.

6. Trial / Evaluation Period

The 7-day evaluation period is fully local and contacts no server. During the trial, MouseCross makes no licensing requests whatsoever. The licensing service only ever sees a paid activation — never an evaluation user.

7. Payments

Payments are processed entirely by LemonSqueezy, acting as Merchant of Record and as a separate, independent data controller. LemonSqueezy is US-based, so your payment data is processed in the United States. Stefan Lohmaier does not receive or store your payment details — only the license key, the customer email address, and the order metadata required to fulfil the license agreement. During activation, the device name you configured is also forwarded to Lemon Squeezy (USA) as the activation’s instance name. See LemonSqueezy’s privacy policy: https://www.lemonsqueezy.com/privacy

8. Automatic Update Checks

MouseCross checks for software updates once daily:

No hardware details, system profile, or personal information are sent with update checks. Downloaded updates are verified against an Ed25519 signature before installation.

9. Accessibility Permissions

macOS only: MouseCross requests Accessibility permission to track the mouse position for the crosshair overlay and to register global hotkeys. This permission is managed by macOS and can be revoked at any time in System Settings → Privacy & Security → Accessibility. No data from this permission is collected or transmitted.

Windows: No elevated permissions are required.

Linux: On Wayland, MouseCross tracks the cursor by reading local input devices (/dev/input; requires membership in the input group) and registers its global hotkey through the XDG GlobalShortcuts portal, where your desktop environment shows a one-time consent dialog. All of this happens locally on your device — no data from input devices is collected or transmitted. On X11, no special permissions are required.

10. Local Data Storage

MouseCross stores your preferences and license state locally on your device only:

11. Retention & Your Rights

Your activation data is retained only for as long as it is needed: IP addresses are removed after 90 days, activations that have not been validated for about 18 months are deleted automatically, and the customer email address is anonymized about 12 months after the license is disabled or expires. Deactivating a device in the app immediately deletes that device’s activation record from the server.

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object (Art. 21) to the processing of the data held about you on the licensing server. You can also view and reset your own activations at any time via the self-service portal at https://lic.slohmaier.com/portal.

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany (www.lda.bayern.de).

To exercise your rights, email support@slohmaier.com with the subject “Privacy Request — MouseCross”. Requests are handled within 30 days.

12. Changes to This Policy

Any material changes to this policy will be noted on the MouseCross product page at slohmaier.com/products/mousecross and in the release notes.

← Back to MouseCross