Your media keys stay on your own PC.

keyRDP runs as a normal program and needs no administrator rights. Because of that, Windows does not let it see keys typed into a program that runs as administrator, such as Task Manager, an admin PowerShell or command prompt, or an installer. While such a window has focus:

• media keys are not intercepted; they behave as if keyRDP weren't running,
• the see-through hotkey does nothing, and can't make such a window see-through,
• local window switching does nothing, and always skips those windows so it can't get stuck on one.

If you want keyRDP to cover those windows too, you can start it with "Run as administrator". Running as a normal user stays the default on purpose. In administrator mode:

• "Start with Windows" still starts keyRDP without administrator rights, so you start it by hand;
• starting keyRDP a second time normally opens Settings in the copy already running, but a normal start can't reach an administrator copy, and just closes.

keyRDP watches the keyboard with a standard Windows keyboard hook, and "Start with Windows" adds it to your personal startup list in the registry. Both are normal for a tool like this, but security software looks for exactly that combination. On a managed computer, Microsoft Defender or another endpoint protection product may flag keyRDP as "persistence" and quarantine it the moment "Start with Windows" is switched on.

• This is a detection of the behaviour, not of anything harmful in keyRDP.
• keyRDP is code-signed, which makes this much less likely, but can't rule it out: the decision is made by the security product and your organisation's policy.
• On a company computer, check with your IT department first, especially before enabling "Start with Windows". Only they can allow it there, for example by trusting the GuilderWorks publisher certificate.
• keyRDP works without "Start with Windows"; you then start it by hand after signing in.

keyRDP contacts guilderworks.com only to check for updates, and only if you allow it. It asks once, at first start, and you can change your answer in Settings.

• The check downloads a public list of versions and compares it on your computer. Nothing about you, your computer or your license key is sent. As with any web request, the server sees the IP address the request comes from.
• It runs at most once a day, and uses the proxy settings of Windows.
• keyRDP never downloads or installs anything by itself. When there is a newer version, it shows a notification and a tray menu item that opens the updates page.
• It tells apart a newer version your license covers, a security update, and a newer version that needs a renewed license.
• With the automatic check off, License > Check Now still checks when you ask.
• For a rollout, an administrator can answer the question in advance by setting the value UpdateCheck to on or off under HKCU\Software\GuilderWorks\keyrdp.

keyRDP runs as a full trial for 30 days. After that it still starts and sits in the tray, but stops intercepting keys until you enter a license key (tray menu > License...).

• The license key is checked on your computer. keyRDP never contacts a server for it, so it works on machines without internet access.
• A license does not expire. It covers every version released up to its "updates until" date, one year after purchase. Newer versions need a renewed license; older ones keep working.
• A license is issued to a named person or company for a number of seats, and that name is shown in About.
• For a rollout to all users of a computer, an administrator can place the key as license.key in C:\ProgramData\GuilderWorks\keyrdp\, or next to keyrdp.exe.
• The trial counts calendar days from first use, per computer and user, and uninstalling does not reset it. If the computer's clock was once set far into the future while keyRDP ran, the trial may show as ended early; support can help with that.

keyRDP contacts guilderworks.com only to check for updates, and only if you allow it. There is no account, no telemetry and no activation server. keyRDP does not record what you type: its log file notes only its own actions, such as a mute it carried out, and stays on your computer.

Details are in the privacy statement.