🔒

Privacy Policy

Last Updated: December 12, 2024

Effective Date: January 1, 2024

1. Introduction

QRypti ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we approach data handling in QRypti Browser (the "Software" or "Browser").

This is not a typical privacy policy. Most privacy policies explain how companies collect, use, and share your data. This policy explains why we don't do any of that.

2. What Data We DO NOT Collect

QRypti Browser is designed with privacy as its core architecture. We explicitly DO NOT collect:

Data Type	Status	Explanation
Browsing History	❌ NOT COLLECTED	We never see which websites you visit
Search Queries	❌ NOT COLLECTED	Your searches remain completely private
Bookmarks	❌ NOT COLLECTED	Stored locally or encrypted in cloud (your choice)
Passwords	❌ NOT COLLECTED	Encrypted locally with your master password
Form Data	❌ NOT COLLECTED	We never see what you type
Downloads	❌ NOT COLLECTED	Your download history stays on your device
IP Address	❌ NOT COLLECTED	We don't track your location or identity
Device Information	❌ NOT COLLECTED	No fingerprinting, no device tracking
Usage Statistics	❌ NOT COLLECTED	We don't track how you use the browser
Crash Reports	❌ NOT COLLECTED	No automatic error reporting
Telemetry Data	❌ NOT COLLECTED	Zero phone-home connections
Analytics	❌ NOT COLLECTED	No Google Analytics, no tracking pixels

3. What Data Stays on Your Device

Some data is necessary for the browser to function. This data is stored ONLY on your local device and is NEVER transmitted to our servers:

3.1 Local Storage

• Browsing History: Stored locally in encrypted database
• Bookmarks: Saved on your device only
• Passwords: Encrypted with AES-256 using your master password
• Settings & Preferences: Stored locally in configuration files
• Session Data: Tabs, cookies (if enabled), temporary files
• Download History: Records of your downloads (local only)
• Cache: Website data for faster loading (cleared regularly)

3.2 Optional Cloud Backup

QRypti offers an optional encrypted cloud backup feature:

4. Third-Party Services

QRypti Browser may interact with third-party services, but we do not share your data with them:

4.1 Search Engines

When you search using the address bar, your query goes directly to your chosen search engine (Google, DuckDuckGo, etc.). We do not intercept, log, or modify your searches.

4.2 Websites You Visit

When you visit websites, they may collect data according to their own privacy policies. QRypti protects you by:

• Blocking trackers and fingerprinting attempts
• Randomizing browser fingerprints
• Preventing WebRTC IP leaks
• Blocking malicious scripts

4.3 Extension/Add-on Privacy

If you install browser extensions, they operate according to their own privacy policies. We recommend reviewing extension permissions carefully.

4.4 Payment Processing

If you purchase QRypti Premium:

• Payments are processed by secure third-party processors (Stripe, PayPal)
• We receive only: transaction confirmation, license key generation data
• We do NOT store credit card information
• Payment processors have their own privacy policies

5. Cookies and Tracking Technologies

5.1 In the Browser

QRypti Browser itself does NOT use cookies or tracking technologies. The browser allows websites to set cookies (which you can block), but we don't set any ourselves.

5.2 On Our Website (qrypti.com)

Our website uses minimal, privacy-respecting technologies:

• Essential Cookies: Session cookies for login/checkout (if applicable)
• No Analytics: We use privacy-focused analytics (if any) that don't track individuals
• No Third-Party Tracking: No Google Analytics, Facebook Pixel, or similar
• No Advertising Cookies: We don't serve ads or use ad networks

See our separate Cookie Policy for details.

6. Data Security

Even though we don't collect your data, we secure what's stored locally:

6.1 Encryption

• Password Storage: AES-256 encryption with PBKDF2 key derivation
• Cloud Backup: End-to-end encrypted (E2EE) before transmission
• Local Database: Optionally encrypted on disk
• Network Traffic: HTTPS enforced where possible

6.2 Protection Features

• Screenshot protection (display affinity blocking)
• Memory protection against memory-dumping attacks
• Secure deletion of temporary files
• Process isolation for web content

7. Children's Privacy

QRypti Browser is not directed to children under 13 years of age. We do not knowingly collect information from children. If you are a parent and believe your child has used QRypti Browser, please contact us.

Note: Since we don't collect data, we wouldn't have any data to delete if a child did use the browser.

8. Your Rights

8.1 GDPR Rights (European Users)

Under the General Data Protection Regulation (GDPR), you have rights including:

• Right to Access: Request what data we have (Answer: None)
• Right to Deletion: Request data deletion (Answer: No data to delete)
• Right to Rectification: Correct inaccurate data (Answer: No data stored)
• Right to Data Portability: Export your data (Answer: It's on your device)
• Right to Object: Object to processing (Answer: No processing occurs)

8.2 CCPA Rights (California Users)

Under the California Consumer Privacy Act (CCPA):

• Right to Know: What data we collect (Answer: None)
• Right to Delete: Delete your data (Answer: No data to delete)
• Right to Opt-Out: Opt out of sale (Answer: We don't sell data)
• Right to Non-Discrimination: We won't discriminate (Answer: Correct)

8.3 Other Jurisdictions

Regardless of where you live, QRypti respects your privacy rights. Contact us with any questions about your data rights.

9. Data Breaches

In the unlikely event of a data breach:

10. International Data Transfers

Simple Answer: No data is transferred because we don't collect it.

QRypti is based in the United States. However, since we don't collect your data:

• No data crosses international borders
• No concerns about Privacy Shield or Standard Contractual Clauses
• Your data stays on your device, regardless of location

Optional Cloud Backup: If you use encrypted cloud backup, data is stored in secure data centers. It remains encrypted and we cannot access it.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes in laws or regulations
• New features that affect data handling
• Clarifications based on user feedback

When we make changes:

• We'll update the "Last Updated" date at the top
• Major changes will be announced in the browser (notification banner)
• You can review the updated policy on our website
• Continued use constitutes acceptance

We will NEVER change our core privacy commitment: No data collection, no tracking, no selling your information.

12. Law Enforcement and Legal Requests

We cannot provide what we don't have.

If law enforcement requests user data:

• We have no browsing history to provide
• We have no user activity logs to share
• We have no personal information to disclose
• We would provide a signed statement confirming we don't collect this data

13. Open Source and Audit

We believe privacy claims should be verifiable:

• Code Review: Our anti-tracking code is documented and reviewable
• Security Audits: We welcome third-party security audits
• Bug Bounty: We reward responsible disclosure of privacy issues
• Transparency: We publish our privacy practices and architecture

14. Comparison to Other Browsers

How QRypti compares to mainstream browsers:

Feature	QRypti	Chrome/Edge	Firefox	Brave
Collects browsing history	❌ No	✅ Yes	⚠️ Optional	❌ No
Sends telemetry	❌ Never	✅ Yes	⚠️ Optional	⚠️ Some
Sells user data	❌ Never	⚠️ Used for ads	❌ No	❌ No
Built-in ad blocker	✅ Yes	❌ No	❌ No	✅ Yes
Screenshot protection	✅ Yes	❌ No	❌ No	❌ No
Fingerprint protection	✅ Advanced	❌ No	⚠️ Basic	✅ Yes

15. Privacy by Design Principles

QRypti follows Privacy by Design principles:

1. Proactive not Reactive: Built with privacy from day one
2. Privacy as Default: Maximum privacy out of the box
3. Privacy Embedded: Core architecture, not add-on feature
4. Full Functionality: Privacy without compromising usability
5. End-to-End Security: Lifecycle protection of data
6. Visibility and Transparency: Open about our practices
7. Respect for User Privacy: User-centric design