Privacy
Superkeys needs deep access to your Mac to do its job, so here is exactly what it can see, what it keeps, and what it sends. Short version: nothing about you leaves your Mac.
What it can see
- Your keyboard, only while ✦ or ☾ is held. Superkeys listens for key presses so it can tell when Caps Lock or right ⌘ is held. Every other key passes straight through untouched. Keys pressed while one is held are read to find the chord, then discarded. Nothing is logged or stored.
- Windows. Through Accessibility it reads the position and size of windows so it can snap, arrange and move them, and which app is in front so it knows which window to act on.
- Desktops. It reads the list of desktops on each display so ☾ can switch and move between them.
- Installed apps. The app picker lists the apps in your Applications folders so you can assign keys. The list stays in memory.
What it changes
- Key mapping. While it runs, Caps Lock and right ⌘ are remapped to F18 and F19 at the system level, merged with any remaps of your own. Quitting, pausing or uninstalling puts yours back, and if Superkeys ever crashes, a small helper restores them straight away.
- Desktop shortcuts. It turns on macOS's own "Switch to Desktop 1–9" shortcuts, which it uses to change desktops.
What it keeps
Your app keys and settings, in ~/.config/superkeys/config.toml (a plain text file you can read
and edit) and ~/Library/Preferences/space.superkeys.plist on your Mac. Nothing else.
What it sends
One request a day, to superkeys.space/appcast.xml, to check for a new version. It
sends nothing but the standard request details, including the app's version number: no identifiers, no system
profile, no usage data. Updates are signed and verified before they're installed. Turn the check off in
Settings → General → Install updates automatically. Opening What's New fetches that version's release notes
from the same place.
Suggest a Feature and Report a Problem in Settings open a form on GitHub in your browser. A problem report fills in the app's version, your macOS version, your Mac's model and a short diagnostics summary (whether the keys are on, how many app keys you have, which keyboards are connected), never which keys you use or anything you typed. Nothing is sent unless you submit the form, and you can edit or delete any of it first.
There are no analytics, no crash reporting services, and no accounts.
This website
superkeys.space has no cookies, no analytics and no trackers. It's hosted on Cloudflare, which, like any web host, processes the standard details of each request (such as IP address) to serve and protect the site.
Checking it yourself
Superkeys is open source under the GNU GPL v3, so every line on this page can be checked against what the app actually does. SECURITY.md walks through what the keyboard tap sees. macOS shows you the same facts: Superkeys appears only under Accessibility in Privacy & Security, and its network requests are visible in any network monitor.