Privacy Policy & Data Practices

Part I: Desktop Application Privacy

1. Local Data Processing & Zero Telemetry

The FlitKey desktop application for Windows and Linux runs entirely on your local machine. It contains zero telemetry trackers, analytics SDKs, or background network calls. All trigger detection, snippet expansions, and dynamic placeholder replacements execute locally in device memory.

2. Keystroke Buffer & Memory Handling

To detect typed trigger keywords (such as ;addr or /date), FlitKey monitors recent keystrokes in a temporary sliding RAM buffer. The buffer:

• Is stored exclusively in volatile system RAM and is never written to disk or logs.
• Holds only short key sequences up to the character length of your longest defined trigger.
• Is instantly cleared after a snippet trigger matches and expands.

3. Clipboard Data Security

When an expansion includes the clipboard placeholder ({{clipboard}}), FlitKey reads the current system clipboard buffer in read-only mode to insert the text. FlitKey does not record, log, or transmit clipboard history.

4. Local Configuration Storage

Snippet libraries, application settings, and custom expansion packs are saved as plain JSON files in standard operating system directories:

• Linux: ~/.config/flitkey/config.json
• Windows: %APPDATA%\flitkey\config.json

Part II: Website Analytics Policy (flitkey.xyz)

5. Privacy-Preserving Website Analytics

To understand website traffic and improve documentation, the marketing website (flitkey.xyz) uses Umami Cloud, an open-source, privacy-first web analytics platform. The implementation is designed with strict privacy boundaries:

• No Cookies or Tracking Identifiers: Umami does not set or read browser cookies, local storage trackers, or persistent device fingerprints.
• No IP Address Storage: Visitor IP addresses are processed in volatile memory with rotating daily salts to calculate aggregate visitor counts and are never saved to databases or logs.
• No Cross-Site Tracking: Activity on flitkey.xyz is not linked to external advertising networks, profiles, or third-party behavioral trackers.
• Aggregated Event Measurement: Collected metrics are strictly limited to anonymized page paths, referring domains, coarse browser/OS categories, and CTA button clicks (such as Windows or Linux installer downloads).
• Zero Content or Input Collection: Text entered into online tools (such as the ROI calculator or snippet converter) is processed entirely client-side in your browser and is never sent to analytics or servers.
• Do Not Track (DNT) / GPC Compliance: The website respects standard browser Do Not Track headers and Global Privacy Control signals.

6. Policy Updates & Contact

If we update our privacy practices, changes will be published here with an updated timestamp. For questions regarding privacy or data handling, contact us at privacy@flitkey.xyz or via our contact page.