Legal
Privacy Policy
CryFox Labs is built on one principle: your browsing is your business. This policy explains exactly what data we collect (spoiler: almost none) and how we handle what little we do touch.
Last updated: April 10, 2026
Data collection
What we collect — and what we don't.
We designed CryFox from the ground up to operate without sending your data anywhere. There is no telemetry pipeline, no usage analytics, and no crash reporting that phones home without your explicit action.
No telemetry
CryFox does not instrument browser events, page visits, tab activity, or feature usage. There is no background telemetry process and no opt-out required — it simply does not exist.
No analytics
We do not embed analytics SDKs, pixel trackers, or session recording tools in the browser. The CryFox website uses no third-party analytics scripts.
No crash reports sent silently
If the browser crashes, no report is sent automatically. Any future crash reporting will be strictly opt-in and will display the full report contents to you before submission.
Update checks
CryFox periodically contacts our update server to check for new releases. This request includes your current version number and operating system. No browsing data is attached. You can disable update checks in Settings.
DNS privacy
Your DNS queries stay private.
DNS is one of the most surveilled layers of internet activity. CryFox takes DNS privacy seriously and ships with encrypted, oblivious resolution by default.
Oblivious DNS (ODoH)
CryFox supports Oblivious DNS over HTTPS (ODoH), which separates the identity of the requester from the content of the query. The resolver never learns who you are, and the proxy never learns what you asked.
No query logging by us
CryFox Labs does not operate a DNS resolver and does not log, store, or process any DNS queries made by the browser. Queries route to your configured resolver only.
Encrypted by default
All DNS queries are encrypted using DNS over HTTPS (DoH) out of the box. Plaintext DNS is disabled unless you explicitly enable it in Settings → Privacy → DNS.
Bring your own resolver
You are free to configure any DoH or DoT resolver you trust. CryFox does not require you to use any specific DNS provider and does not receive any information from your chosen resolver.
Storage
Cookies and local storage are yours.
All cookies, site data, cached files, and local storage written by websites you visit are stored exclusively on your device. CryFox Labs has no access to this data and no mechanism to retrieve it.
- Cookies are never transmitted to CryFox Labs servers.
- Local storage and IndexedDB remain on your machine.
- Room isolation keeps site data separated between contexts.
- You can clear all storage per-room or globally at any time.
- Private browsing rooms write nothing to disk.
Browser settings sync
CryFox does not currently offer a cloud sync feature. All settings, bookmarks, passwords, and preferences are stored locally on your device. If you reinstall CryFox or switch machines, you will need to export and import your settings manually using the built-in backup tool.
Third-party services
None bundled. None required.
CryFox does not ship with bundled third-party services, advertising networks, or sponsored tiles. Every network connection the browser makes on your behalf is documented below.
No default search deal
CryFox ships with a neutral default search configuration. We do not accept revenue from search providers in exchange for default placement. You choose your search engine freely in Settings.
No sponsored new-tab content
The new-tab page contains no sponsored tiles, partner content, or ad placements. It shows only your own pinned sites and recent history — nothing we put there.
No bundled extensions
CryFox does not pre-install extensions from third parties. Any extensions you install come from you. We cannot access extension data or what extensions you have installed.
Font and icon CDNs
The CryFox marketing website (this site) loads fonts from Google Fonts and icons from Cloudflare CDN. These are standard web assets; no tracking data is sent by us in connection with these requests.
Website
About this website.
The CryFox website (cryfox.app) is a static site. We do not run server-side session tracking, advertising pixels, or behavioral profiling on this website.
Hosting logs
Our hosting provider may retain standard server access logs (IP address, request path, timestamp) for a short period for security and abuse prevention. We do not use these logs for marketing or behavioral analysis.
Contact forms
If you contact us via email or GitHub, we retain only what is necessary to respond to your inquiry. We do not share this information with third parties and delete it when no longer needed.
No marketing cookies
This website does not set tracking or marketing cookies. Theme preference (light/dark) is saved to localStorage in your browser and never sent to our servers.
Questions about this policy?
If anything here is unclear, incomplete, or you believe we have missed something important, please open an issue on GitHub. We read everything and will update this document promptly.