Privacy Policy

Last updated: 2026-07-29. WinRemap is free software published by SUGANUMA Daiki under the MIT License.

Why a key remapper needs to say this

WinRemap works by installing a low-level keyboard hook, which means every key you press passes through it. That is the same mechanism a keylogger uses. The difference is entirely in what the program does with what it sees — so it is fair to ask, and the answer should be checkable rather than merely promised.

WinRemap looks at each key event, decides whether one of your rules applies, and either passes the event through or replaces it. Nothing is retained afterwards.

What WinRemap does not do

• No keystroke logging. What you type is never written to disk, never kept in memory beyond the moment it is handled, and never shown anywhere. The optional debug log records key names only (that Ctrl+H was remapped to Backspace), is off by default, and exists only in the log window and — with --debug — the terminal. It is never written to a file.
• No network access. WinRemap contains no networking code. It cannot phone home, check for updates, or send diagnostics, because there is nothing in it that can open a connection. Adding such code is prohibited by the project's own development rules.
• No accounts, no identifiers. Nothing to sign in to, and no device or user identifier is generated or read.
• No advertising, no third-party SDKs.

What is stored on your PC

One file, which you write and control:

• %APPDATA%\winremap\config.toml — your remapping rules. Installed from the Microsoft Store, this lives in the package's private folder under %LOCALAPPDATA%\Packages\ instead; the settings window always shows the actual location.

The file stays on your computer. It is not synced, uploaded or read by anything but WinRemap, and uninstalling removes the program without touching it (the Store version removes its private copy, as Windows requires).

How to verify this yourself

You do not have to take any of the above on trust.

• Read the source. All of it is at github.com/DaikiSuganuma/winremap. The rules that forbid keystroke logging and network code are written down in AGENTS.md and enforced in review.
• Check the binary is the source. Every GitHub release ships a build-provenance attestation, so you can prove the download was built from this repository — see Install and SECURITY.md.
• Watch it on the wire. Point a firewall or a network monitor at winremap.exe. It will never connect to anything.

Contact

Questions about privacy, or a suspected vulnerability: open an issue, or for security matters use private vulnerability reporting.

If this policy changes, the revision date above changes with it and the history is visible in the repository.