Caspian keeps your browsing on your device.

• Caspian has no accounts, and no server of ours sees the pages you visit.
• Your history, bookmarks, open tabs, downloads list, settings and blocking counters live on your device only, and you can clear or delete them at any time.
• The Android and iOS apps send no analytics or telemetry at all. The desktop app asks once whether it may send anonymous usage events; the default on stable releases is no.
• The app talks to the internet for what a browser must: the sites you open, search suggestions while you type (which you can turn off), and refreshes of the filter and verified-site lists.

Caspian stores these locally, in the app's own storage, and nowhere else:

• Browsing history — the addresses and titles of pages you visited, with their icons. Cleared from Settings or the History page, individually or entirely.
• Bookmarks and folders.
• Open tabs, so they come back when you reopen the app.
• Downloads — the files you saved and the list of them. On Android files go to your Downloads folder; on iOS to the app's Documents/Downloads folder, visible in the Files app.
• Settings — theme, search engine, toolbar position, blocking and HTTPS preferences.
• Blocking counters — how many requests the blocker stopped, per site and per tracker host, for the privacy report (Android and desktop). These are numbers, not the pages themselves; reset them from the report.
• Site data that websites themselves store — cookies, caches and local storage — handled by the web engine (WebKit on iOS, the Android System WebView on Android, Chromium on the desktop). Clear it from Settings.

None of this is synced or backed up by Caspian. (Your operating system's own device backup may include app data, under its rules, not ours.)

• The websites you visit receive what any browser sends them: the request for the page and its resources, cookies they set, and a user-agent string. Caspian's blocker stops requests to known ad and tracking hosts before they are made.
• Search suggestions. While you type in the address bar, the text so far is sent to the search engine you chose (DuckDuckGo by default) so it can suggest completions. Switch this off in Settings › Search engine; then only what you submit goes to the engine.
• Filter lists. Every few days the app fetches EasyList and EasyPrivacy from easylist.to. The request carries no data about you.
• Verified-site list. The app refreshes its signed list of verified sites from updater.getcaspian.app, and the desktop app checks that server for updates. These requests carry the app's version and nothing about your browsing.
• Site icons are fetched from the sites themselves, like any browser does.
• Weather on the new tab page. If you set a place, the page asks Open-Meteo for its forecast — the place's coordinates and nothing else; no account, no key. Leave the place unset, or switch the weather off, and nothing is asked.
• My feed on the new tab page. When the feed is on and you scroll to it, the page asks harbor.earlbalai.com (our release server) for headlines on the topics you picked. The request carries the topic names and nothing about you; our server gathers the headlines from the publishers' public feeds, so they see our server, not you. Pictures load from the publishers once a story is on screen, without a referrer. Switch the feed off with one tap (Customize on the page, or Settings › Appearance) and nothing is asked.
• Desktop telemetry, if you said yes. The desktop app asks once whether it may send anonymous usage events (app version, operating system and locale, a random per-session identifier, and the name of the event — such as “app started”). It never includes URLs, page titles, searches or anything typed. You can change your answer in Settings › Privacy. The mobile apps have no telemetry.

• Sell, share or rent any data about you. There is nothing to sell: we don't have it.
• Send your browsing history, bookmarks, searches or downloads anywhere.
• Show its own ads or build an advertising profile.
• Require an account, an email address or a phone number.

Android: internet and network-state access, to browse. Saving a file uses the system download manager into your Downloads folder, which needs no storage permission on the Android versions Caspian supports. Caspian asks to be your default browser only when you tap that option.

iOS: no special permissions. Downloads live in the app's own documents folder, which you can see in the Files app.

A website may ask for your camera, microphone or location; the web engine shows the system prompt and the decision is yours.

The one time we do ask for something is the iOS and Android beta on the download page: to send you an invite we need the email address TestFlight or Google Play knows you by, and that is the only thing the form takes. We keep it on our own server to send the invite and to see who is testing, share it with no one but Apple or Google when the invite is issued, and delete it when the beta ends or when you ask — write to help@getcaspian.app from that address.

Caspian is a general-purpose browser and is not directed at children. It collects no personal data from anyone, of any age.

If this policy changes, the date at the top changes with it and the new text appears here.

Questions about this policy: ebalaijr@gmail.com.