MagicClick sees every mouse and keyboard event on your Mac, so we take security seriously.
- Accessibility permission. MagicClick uses it to change clicks and to read the one key you choose as the middle button. It does not store or record other keys.
- Touch positions from the Magic Mouse and trackpad, through Apple's private MultitouchSupport framework.
- No network. MagicClick never connects to the internet and collects no data.
- Settings are stored in the normal macOS user defaults (
io.github.codefi.MagicClick).
Only the latest release gets security fixes.
| Version | Supported |
|---|---|
| 1.2.x (latest) | ✅ |
| Older | ❌ |
Do not open a public issue for a security problem.
Report it privately with GitHub:
- Go to the Security tab of this repo.
- Click Report a vulnerability.
- Tell us what the problem is, how to make it happen, and what an attacker could do with it.
If you cannot use GitHub, email razvantanase@me.com with "MagicClick security" in the subject.
- We reply within 7 days to say that we got your report.
- We tell you if we agree that it is a problem, and how we plan to fix it.
- We fix it in a new release and credit you in the release notes, unless you want to stay anonymous.
- Please give us time to release a fix before you talk about the problem in public.
The DMG on the Releases page is signed ad hoc and is not notarized. If you do not want to trust a download, read the code and build it yourself.