Privacy Policy

What it does not do

• It sends no usage statistics, crash reports or analytics anywhere.
• It does not send your screen, text, files or passwords to the author or to any server of its own. There is none.
• It does not check for updates. A release is downloaded only when the version you run is not already on your PC.

What goes over the network

1. The release download from GitHub

The npx launcher downloads the release for its own version from GitHub the first time that version runs, and checks its SHA-256. After that it starts from the copy on your PC without going online. GitHub sees your IP address, as with any download. If GITHUB_TOKEN or GH_TOKEN is set in your environment, the launcher sends it to GitHub with the request, to avoid GitHub's rate limits. Fetching the package itself through npx is between you and npm.

2. Tool results go to your AI client

Screenshots, text read from windows, window titles, clipboard text, terminal output and web page content are returned to the MCP client you connected (Claude, Copilot, Codex and so on). The client sends them to the AI service it uses. What happens to them there is set by that service's own privacy policy, not this one.

3. Your browser, when the browser tools are used

The browser tools connect to your own Chrome, Edge or Brave on 127.0.0.1. When the assistant opens a page, it is your browser that loads it, as if you had.

What it keeps, and how to remove it

Most files are under ~/.desktop-touch-mcp (or DESKTOP_TOUCH_MCP_HOME if you set it). Deleting that folder removes them.

• Program files (releases/): the downloaded releases. The newest two are kept.
• Screenshot cache (screenshots/, Windows): screenshots the assistant took, as image files, with the window's process name. They are not encrypted. By default at most 200 files or 256 MB are kept, oldest removed first. The screenshot_gc tool deletes them on demand.
• Diagnostic log (logs/diagnostic.log): errors, slow calls, emergency stops and which window an action went to. Window titles are recorded as a short hash, not as text, unless you turn raw titles on. It rotates at 64 MB, keeping two old files. DESKTOP_TOUCH_DIAGNOSTIC_LOG_DISABLE=1 turns it off.
• Key locker (%LOCALAPPDATA%\desktop-touch-mcp\locker\, Windows): saved passwords are encrypted with Windows DPAPI for your user account. Passwords typed for a one-time fill are kept in memory only. Secrets in the locker are never returned to the assistant. key_locker forget deletes a saved one.
• Excel macros (%LOCALAPPDATA%\desktop-touch-mcp\trusted-vba\): each excel macro run saves a workbook with the macro code there. They stay until you delete them.
• Memory of what worked (memory/): only when DESKTOP_TOUCH_MEMORY_PERSIST=1 is set. It holds window titles and tool names, not screen contents.

If you start it with --http

The server listens on 127.0.0.1 only, so other machines cannot reach it. It has no password, so any program running on your PC can use it while it runs. Use stdio (the default) if that matters to you.

This site

This site is hosted on GitHub Pages (see the GitHub Privacy Statement). It sets no cookies and runs no analytics of its own. Pages load fonts from Google Fonts, and some load a diagram library from jsDelivr, so those services see your IP address.

Questions and changes

Ask through GitHub Issues or the contact address on the author's page. To report a security problem, see the security policy. If what the software does changes, this page is updated and its date changes.