Legal

Privacy Policy

Effective November 14, 2026 · Updated November 14, 2026 (dashboard accounts)

The short version:

Your macros, keystrokes, screen and files never leave your PC.
To check your license, Reflex sends your license key and a scrambled hardware ID to our server. We store only scrambled (hashed) versions of both.
If you make a dashboard account, we keep your email, a securely hashed password and, if you add it, your license key in encrypted form so you can view it.
No ads, no analytics and no tracking cookies, in the app or on this website. The only cookie keeps you logged in to the dashboard.
We don't sell your data.

1. Who we are

Reflex is made by Reflex Macros ("we", "us"). This policy explains what information we collect when you buy Reflex, use the Reflex app, visit reflexmacros.com or contact us, and what we do with it.

2. The Reflex app

Stays on your PC

Your macros, scripts, keybinds and settings are saved only on your computer, in %APPDATA%\Reflex. Reflex does not record or upload your keystrokes, mouse movements, screen, files or the apps you use. Recording a macro happens entirely on your PC.

License checks

When you activate Reflex, and each time you start it, the app contacts our license server. It sends:

Your license key. Our server stores only a one-way hash of it (a scrambled version that can't be turned back into the key), plus its last 4 characters so we can find your key when you ask for help.
A hardware ID. This is a one-way hash made from your Windows installation ID and your system drive's serial number. It lets us link a key to one PC. It can't be turned back into those values and doesn't contain your name, files or anything else about you.

For each license key, our server keeps:

What	Why
Key hash and last 4 characters	To check your key and find it when you need support
Hardware ID hash	To keep each key on one PC
When the key was created, activated and last checked in (updated at most every 12 hours)	To spot shared keys and help with support
Whether the key is active, revoked or expired, and how many HWID resets it has had	To manage licenses and prevent abuse
A short note we add, such as your name or order reference	To match your key to your purchase

Your IP address is used to deliver the request but isn't stored in our license database. The app also saves your license key, when it was last checked and which EULA version you accepted on your PC, so it can keep working offline for up to 7 days.

Update checks

When Reflex starts, it downloads a small file from GitHub to see if a new version is available, and downloads updates from GitHub when you install them. Nothing about you or your license is sent. GitHub sees your IP address, as with any download.

3. Buying Reflex

Purchases are processed by Stripe. Stripe handles your payment; we never see your full card details. Stripe shares order details with us, such as your email address and the amount, so we can deliver your license. Stripe's own privacy policy also applies.

4. Dashboard accounts

You can make an account at reflexmacros.com/dashboard to view your key, reset your PC and download Reflex. If you do, we store:

Your email address, to log you in and to send you verification codes. We only email you codes and messages about your account, never marketing.
Your password, stored only as a salted, slow hash (PBKDF2). We can't see or recover it.
Your license key, if you add it to your account. It's stored encrypted so the dashboard can show it to you, and your key record notes which account it belongs to.
Login sessions: a random session ID in a cookie, which keeps you logged in for up to 30 days. It's only used for logging in, not for tracking.
Short-lived security data: the 6-digit codes we email you (stored hashed and deleted after use or within 10 minutes) and counters that limit how often codes and logins can be tried, which can include your IP address for up to an hour.

Verification emails are sent through Resend, which receives your email address and the message to deliver it.

Signing in from the app

If you click Sign in with your Reflex account in Reflex, the app sends our website your hashed hardware ID (and, if Reflex is already activated, your license key) and gets a short code. When you approve that code in your dashboard, the app receives your license key, or your key is linked to your account. These sign-in requests expire after 10 minutes and are deleted.

Reviews

If you send a review from the dashboard, we store your rating, your review text, the name you choose to show and which account sent it. The rating, text and name (or "Reflex user" if you leave it empty) are posted publicly in our Discord server. Your email is never posted.

5. Support and Discord

We deliver keys and give support through tickets in our Discord server. We see your Discord username and what you write in your ticket, and we use them only to help you. Discord stores these messages under its own privacy policy.

6. This website

reflexmacros.com has no ads, no analytics and no tracking cookies. The only cookie is the dashboard login cookie described above. It's hosted by Cloudflare, which processes basic request information such as your IP address and browser type to deliver the site and protect it from attacks. Links to Discord and GitHub take you to their sites, where their privacy policies apply.

7. How we use information

To deliver and check your license, and to keep each key on one PC
To run your dashboard account and send you verification codes
To share the reviews you choose to send in our Discord
To give you support and HWID resets
To prevent fraud, key sharing and abuse
To deliver updates
To follow the law

We don't sell your information, use it for advertising or build profiles about you.

We only share information with the services we use to run Reflex, each for its own part of the job:

Cloudflare hosts our license server, the dashboard and its database, and this website.
Resend sends verification code emails.
GitHub hosts update downloads.
Stripe handles payments.
Discord hosts our support tickets and community, and receives the reviews you send.

We may also share information if the law requires it, or to protect our rights or other people's safety. These services may process data in the United States and other countries.

9. How long we keep it

We keep license records for as long as the license exists, because Reflex needs them to work. If you ask us to delete your license record, we will, but your key will then stop working. Dashboard accounts are kept until you delete them. You can delete your account yourself in the dashboard, which removes your email, password and stored key (the key itself keeps working). We delete support tickets when they're no longer needed, unless we need them to resolve a dispute or follow the law.

10. Security

License keys and hardware IDs are stored only as hashes, except a key you add to your dashboard account, which is stored encrypted. Passwords are stored only as salted hashes. All connections use HTTPS, and only we can access the license database. No system is perfectly secure, but we keep what we store to a minimum.

11. Your choices and rights

You can ask us to show you, correct or delete the information we hold about you. Depending on where you live (for example, in the EU, the UK or California), you may have other rights too, such as objecting to how we use your information or complaining to your local data protection authority. To make a request, contact us as described below. We'll answer within 30 days.

You can delete your dashboard account at any time from the Account section of the dashboard. You can remove your license from your PC at any time from the menu in Reflex ("Remove license from this PC"). To remove the app's local data, delete the %APPDATA%\Reflex folder.

12. Children

Reflex isn't meant for children under 13, and we don't knowingly collect information from them. If you think a child under 13 has given us information, contact us and we'll delete it.

13. Changes to this policy

We may update this policy. We'll change the date at the top when we do, and for important changes we'll announce it in our Discord.

14. Contact

For privacy questions or requests, open a ticket in our Discord server.