Privacy policy for the browser

Last updated 1 November 2026

This policy applies to the AdRaze browser for Windows, Mac and Linux. The extension for Chrome, Brave and Edge has its own policy. Here you'll find everything the browser sends from your computer, where it goes and what you can turn off yourself.

In short

We never sell data, show no ads and have no tracking or analytics in the browser. Most things stay on your computer. Whatever has to be sent for a feature to work is listed below, and most of it can be turned off.

What's sent automatically, even without an account

Your IP address is always visible to the service that receives a request. Beyond that, the following is sent:

• Real-time protection (on by default, turned off in Settings → Privacy & security): the domain name of every page you open in a normal tab, for example example.com, never the full address. It's sent to Säkerkoll (säkerkoll.se, our own service), which checks the site's certificate and age (via rdap.org) and replies whether it's dangerous. Nothing is stored. Not in incognito.
• Download protection: a checksum (SHA-256) of every file you download is sent to Säkerkoll and compared with known malicious files. Never the file itself, the address or the file name.
• Search suggestions: what you type in the address bar is sent, as you type, to the search engine you've chosen (Google by default) to show suggestions. Not in incognito.
• Start page: the domain names of your shortcuts are sent to DuckDuckGo to fetch their icons. Background images are fetched from Pexels, Bing or Picsum, depending on what you've chosen.
• Filter lists for ad blocking are downloaded every six hours from EasyList, GitHub, AdGuard and Peter Lowe. Nothing about you is sent along.
• Updates: the browser asks GitHub about every ten minutes whether there's a new version. A random ID for the installation is included. It's only used to roll out updates in batches and isn't linked to you. The version from the Microsoft Store is updated by the Microsoft Store instead.
• Widevine, which is needed for Netflix and other streaming services, is downloaded and updated from Google's servers.
• Encrypted DNS: if you choose Cloudflare, Quad9 or Google in Settings, all address lookups go there. By default, your computer's usual DNS is used.
• Spell check: dictionaries may be downloaded from Google. What you type is not sent.

What's stored only on your computer

The following never leaves your computer (unless you have sync turned on, see below):

• History, open tabs, settings and stats on what's been blocked.
• Saved passwords and payment cards (AdRaze Wallet), encrypted with AES-256-GCM and a key that's protected by your computer's keychain.
• Falk conversations, memories and projects.
• Your private chat key.

If you create an account

You don't need an account to browse. If you create one, we store the following on our server:

• Email address and, if you want, name and profile picture.
• Password, only as a salted hash. We can never see it.
• Google sign-in, if you choose it: your email address and an ID number from Google.
• Bookmarks (address, title and icon) if sync is on, so they're available on all your computers. They aren't stored encrypted. History is never synced.
• Support requests you send, including the address of a page you report as broken.

Emails with codes and notifications are sent through Brevo. You can delete your account at any time under Account. Everything above is then deleted.

Falk, the AI assistant (Pro)

Before anything is sent to the AI service for the first time, Falk asks for your consent. Without a yes, nothing is sent.

• When you send a message, the following is sent: what you write, the latest messages in the conversation, files you attach and what Falk has saved about you (memories and projects).
• If Review page is on, the address and text of the page you have open are also sent, along with anything entered in form fields. Passwords and card details are never sent.
• Everything goes to our server and on to the AI service DeepSeek via OpenRouter, which generates the reply.
• We don't store the conversations on our server. Conversations are only stored on your computer.
• Falk never reads or controls incognito tabs.

Under Settings → Falk you can turn off Review page and withdraw your consent. Every reply has a button for reporting it to us.

Friends & chat

The chat requires an account. For the chat, we store:

• Username, profile text, profile picture and your chat settings.
• Messages, pictures and stickers, encrypted on your computer before they're sent. We don't read them. We can see who sent something to whom and when.
• An encrypted copy of your chat key, so the chat works on all your computers.
• If you send a link, our server fetches a preview of the page.
• If you report a message, only that message is sent to us for review.

Also read the chat rules.

Family

If a parent adds a child account, we store the child's name, age and the parents' rules for which sites are allowed. On the child's computer, the following also applies:

• The address and title of every page the child opens in a normal tab are sent to us and shown to the parent. The latest 500 are kept.
• The parent can see when the child signed in and from which IP address.
• When the child signs in on a new computer, a code is emailed to the parent.

Pro and payment

Payments are handled by Stripe. Card details are entered directly in Stripe's fields and never reach our server. Stripe may collect information about the device to stop fraud. We only store your Stripe customer ID, your subscription and how long Pro is valid.

Extensions

If you install an extension, it's downloaded from Google's Chrome Web Store. Extensions follow their own terms and privacy policies, not ours.

Services we use

We only share what's needed for the feature to work, and we never sell anything:

• Stripe: payments.
• OpenRouter and DeepSeek: Falk's replies.
• Brevo: emails with codes and notifications.
• Google: search suggestions and searches (if Google is selected), sign-in with Google, Widevine, extensions and dictionaries.
• DuckDuckGo, Pexels, Bing and Picsum: icons and background images on the start page.
• GitHub: updates and filter lists.
• Cloudflare: protects and routes traffic to our servers.

Where the data is

Our server is in Sweden and is reached through Cloudflare. Our websites are hosted by Vercel. Some of the services above may process data outside the EU, under the EU's standard contractual clauses.

Who is responsible

The data controller is Ari Batak, who runs AdRaze. Send any questions about your data via support.adraze.app.

Your rights

You have the right to know what data we have about you, and to have it corrected, get a copy of it or have it deleted. You can do most of this yourself under Account. Otherwise, get in touch via support.adraze.app.

If you think we're handling your data wrongly, you can complain to the Swedish Authority for Privacy Protection (imy.se) or the data protection authority in your country.

Children

Children under 13 should use AdRaze through a child account that a parent has created under Family.

Changes

If this policy changes, the date at the top of this page will be updated. We'll tell you about bigger changes in the browser.