Privacy Policy

1. The short version

The browser sends zero telemetry — no analytics, no crash reports, no tracking of what you browse. Because the code is open and auditable, you never have to take our word for it: anyone can verify exactly what data is handled.

2. What the browser keeps (on your device only)

• Bookmarks, settings, history and tabs live in a local database on your device.
• Website data (cookies, cache, storage) lives in memory and is wiped when Kastrava exits.
• Nothing you browse is sent anywhere unless the website itself sends it.

3. What our servers store (only with an account)

• Login data: your email, a scrypt password hash (never the password), and salts for login and sync.
• Sync blobs: encrypted bookmarks/settings only you can read — the server stores them but cannot decrypt them.
• License data: your keys, their expiry, device names/IDs and app versions on each key, and purchase records.
• Sessions and security log: active logins and a log of security events (logins, shares, approvals), visible on your dashboard.
• Account emails: verification codes, login codes and receipts are emailed to you; sending runs through our mail relay.

4. What the apps send home

• Update check (automatic, anonymous): on launch the app asks GitHub for a version file — version numbers only, no identifiers. Free tier and logged-out installs contact nothing else, ever.
• License refresh (Premium only): logged-in Premium installs re-validate the key on launch (device ID + key, once).
• Sync (logged in only): encrypted blobs upload on change and download on login. The server cannot read them.
• Everything else (store, dashboard, payments, search) only happens when you open or use it.
• That is the complete list. There is no analytics SDK, no advertiser ID collection, no browsing-history upload. Core browsing works fully offline.
• Fingerprint hardening: Network Information API (navigator.connection) is hidden, Battery API returns a frozen generic full-charge profile, userAgentData high-entropy values resolve empty, and the User-Agent is stock Chrome plus an honest Kastrava/<version> token (no Electron string) — the store install gate keys off that token so it never needs heuristics.

5. Payments

Payments are processed by Razorpay (India: UPI, cards, netbanking), PayPal (most countries), or YooKassa (Russia/CIS: MIR, SBP) depending on your location. Card numbers and bank credentials go to the processor, never to us — we only keep the order ID, amount, payment ID and the key or item it bought. Read each processor’s own privacy policy for their handling.

6. This website

These pages load no analytics trackers. The checkout loads Razorpay’s payment script, and pages use Google Fonts — that is all the third-party code here. The dashboard stores only your login token in the browser.

7. Retention & honesty

• Kept: login sessions (expire after 30 days), email codes (10 minutes), last 100 security events per account, purchase receipts (order ID, amount, key — refunds and tax records).
• Deleted on request: everything else — keys, sync blobs, sessions, store items, audit — purged when you delete your account.
• Transport: everything is HTTPS (TLS). No plaintext anywhere.
• No security audit (yet): one developer, no third-party audit. The code is GPLv3 and open, so anyone can verify every claim on this page.

8. Your rights

Export or delete everything any time from the account dashboard (Your data card). Deleting wipes the account, sessions, sync copy and security log, and cancels owned keys. Anything else: ask us.