No network access
The app contains no networking code and sends nothing anywhere.
Keys aren’t kept
Keystrokes are drawn on the pill and discarded — never saved or sent.
Tiny local file
Only mouse names and accent colours are saved, on your own PC.
No cookies or trackers
This website sets no cookies and runs no analytics.
Summary
Tagsor does not collect, transmit, sell or share personal information. The desktop app runs entirely on your computer and has no telemetry, no analytics, no advertising and no user accounts. This website is a static information site that sets no cookies and loads no tracking scripts.
The rest of this document gives the details, so you can verify the claims for yourself — Tagsor is open source under the MIT License, and you can read exactly what it does in the source code.
Scope
This policy covers two things, both published by Zaki Ul Hassan (“the developer”, “we”, “us”):
- The Tagsor desktop application for Windows 10 & 11 (“the app”), including the official
Tagsor.exerelease builds. - This website, including the in-browser playground.
It does not cover websites we link to, such as GitHub, which have their own privacy policies.
What the app processes
To do its job, Tagsor needs to observe some of your input. Everything below is processed locally, in the memory of the running app, and none of it leaves your computer.
Keystrokes
Tagsor uses Windows Raw Input to detect key presses so it can show them on your cursor pill (for exampleCtrl + Shift + P). Up to three recent keys are held in memory purely for display and are cleared roughly a second after you stop typing. Keystrokes are never written to disk, logged, or transmitted.
- Keys typed while a standard Windows password field has focus are ignored. Tagsor checks this through the Windows UI Automation
IsPasswordproperty. - Privacy Mode (
Ctrl + Alt + Hor the tray menu) stops keystrokes from being shown at all until you switch it off again.
Mouse input and device identifiers
Tagsor reads mouse movement and button state to position the tag and show click and drag feedback. To tell several physical mice apart it uses the Windows device path of each mouse as an identifier. This identifier is only used locally to look up the name and colour you chose for that mouse.
Screen overlays
The cursor tag, spotlight and screen marker are drawn as transparent windows on top of your desktop. Tagsor does not capture or record your screen. Strokes you draw with the marker exist only in memory and disappear when they fade, when you clear them, or when you exit draw mode.
System preferences
Tagsor reads your Windows light/dark theme setting from the registry so its interface can match it.
What is stored on your PC
Tagsor writes to exactly two places on your computer:
| Location | Contents | Purpose |
|---|---|---|
| %AppData%\Tagsor\saved_mice.json | For each mouse: its Windows device path, the display name you entered, and the accent colour you picked. | Remember your mouse profiles between sessions. |
| HKCU\Software\Microsoft\Windows\CurrentVersion\Run | A value named Tagsor pointing to the location of Tagsor.exe. | Start Tagsor quietly when you sign in to Windows. |
The mouse name is whatever you type, so avoid putting information in it that you would not want a screen recording to show — it is displayed on your cursor pill by design. The file is plain, human-readable JSON that you can open, edit or delete at any time.
What the app does not do
- It does not connect to the internet — no telemetry, crash reporting, update checks or licence checks.
- It does not require or create an account.
- It does not record, store or transmit keystrokes, mouse movement, screenshots or screen contents.
- It does not read or modify your clipboard.
- It does not contain advertising, and it does not sell or share data, because it has none to share.
Recordings & screen sharing
Tagsor exists to make your cursor and keystrokes visible to other people. Anything the overlay shows — including keys, your mouse name and your drawings — will be visible to everyone who can see your screen, and will appear in any recording or stream you make. Tagsor has no control over what other software does with that footage.
Password-field detection relies on Windows reporting a control as a password box. Some applications draw their own custom input fields and may not report this correctly, so before typing anything sensitive on a shared or recorded screen, turn on Privacy Mode with Ctrl + Alt + H.
This website
- No cookies or local storage. The site does not set cookies and does not store anything in your browser’s local or session storage.
- No analytics or tracking. There are no analytics, advertising, fingerprinting or social-media tracking scripts.
- Playground stays in your tab. The live playground runs entirely in your browser. What you type, draw or move inside it is never uploaded or recorded.
- Self-hosted fonts. Fonts are bundled with the site at build time, so your browser does not contact Google Fonts when you visit.
- No forms or accounts. The site has no sign-up, comment or contact forms.
Like any website, whichever company hosts it may automatically keep standard server logs (such as IP address, requested page, browser type and timestamp) for security and operational purposes. We do not have a way to use those logs to identify you, and we do not combine them with any other data.
Third parties
- GitHub. Downloads, source code and issue tracking are hosted on GitHub. When you follow a link there, GitHub’s own privacy statement applies, and GitHub may collect information such as your IP address.
- Open-source libraries. The app is built with .NET and the
RawInput.Sharplibrary for Windows Raw Input. They run locally inside the app. - Microsoft Windows. Windows itself provides the input, UI Automation and registry services Tagsor relies on; Tagsor does not send data to Microsoft.
Your choices & control
- Hide keystrokes at any moment with
Ctrl + Alt + Hor the tray menu. - Pause the tag from the tray menu to hide the cursor pill without quitting.
- Clear saved mice from the tray menu to erase all stored mouse profiles.
- Quit from the tray menu to stop Tagsor completely.
- Uninstall completely: quit Tagsor, delete
Tagsor.exe, remove the Tagsor entry under Windows Settings → Apps → Startup (or Task Manager → Startup apps), and delete the%AppData%\Tagsorfolder. (Older versions used%AppData%\DualCursorApp; Tagsor moves the file to the new folder automatically on first launch, but if you still have the old folder, delete it too.)
Your rights
Privacy laws such as the GDPR and CCPA give people rights to access, correct, delete and port their personal data, and to object to its sale or sharing. Because the developer does not receive or hold any personal data from the app or this website, there is no data on our side to access, correct or delete, and we never sell or share personal information. All data the app creates lives on your own PC, under your control, and you can inspect or delete it at any time as described above.
Children
Tagsor is a general-purpose utility and is not directed at children. Because we do not collect personal information from anyone, we do not knowingly collect it from children either.
Security
Because Tagsor never transmits your data, the main risk is running a tampered copy. Only download Tagsor from the official GitHub releases page, or build it yourself from the source. The release executable is currently unsigned, so Windows SmartScreen may show a warning the first time you run it.
Changes to this policy
If the app or this website changes in a way that affects your privacy — for example if a future version ever adds networking — this policy will be updated before that version is released, and the “Last updated” date at the top of this page will change. Previous versions are available in the repository’s history.
Contact
Questions or concerns about privacy? Please open an issue on the GitHub issue tracker, or reach the developer through the profile at github.com/zakiuhh. Please don’t post sensitive personal information in public issues.
Prefer to see it in action? Try the playground — it runs entirely inside your browser tab.