TL;DR (Quick Summary)
If you only have 30 seconds, here is the essence of our privacy policy. Look for the Verification Markers (e.g., P1) in the full text below to confirm these points.
- P1 No Telemetry: We collect zero data on your browsing habits, hardware, or location. Verify →
- P2 Local Storage: Your history, cookies, and passwords stay on your machine: always. Verify →
- P3 No Cloud Sync: We don't have servers to sync your data to. It can't be leaked if it's not there. Verify →
- P4 Chromium Engine: Some signals go to Google (like Safe Browsing), but Leef strips as much as possible. Verify →
Introduction
At Leef, we believe privacy is the default state of a healthy internet. Our privacy policy is simple: We don't want your data, we don't collect it, and we wouldn't know what to do with it if we had it.
Leef Browser is designed to be a "Zero-Knowledge" tool. This document explains exactly what that means and clarifies the boundaries between the Leef interface and the underlying open-source components we use.
Data Collection
Zero Telemetry P1
Leef Browser does not include any telemetry, usage tracking, or crash reporting services that send data to the Leef team. Unlike most modern browsers, we do not track:
- Which sites you visit
- How long you use the browser
- Which features you click on
- Your hardware specifications
- Your location or IP address
Global Privacy Control (GPC)
We actively recognize and honor Global Privacy Control (GPC) signals. Because we do not track our users, set third-party marketing cookies, or sell/share any personal information, GPC preferences are respected by default across this entire website. If your browser or extension transmits the Sec-GPC: 1 header, we accept it as a request to opt-out of data sales/sharing. You can also verify our declaration of compliance at /.well-known/gpc.json.
Local Storage P2
Everything you do in Leef stays on your machine. This includes:
- ✓ Browsing History: Stored locally only.
- ✓ Cookies & Site Data: Managed by the Chromium engine, stored on your disk.
- ✓ Bookmarks & Settings: Saved in your local AppData folder.
- ✓ Passwords: Handled by the native Chromium credential manager, encrypted by your OS.
P3 Leef provides no "cloud sync" functionality by design. We do not have servers to sync your data to, which means your data can never be leaked from our systems - because it isn't there.
Chromium Engine Transparency
Leef is built on the open-source Chromium engine. While we make every effort to strip out Google-specific telemetry, certain "baseline" signals are hard-coded into the engine's core functionality.
Important Note P4
Certain features like Safe Browsing (which protects you from phishing) or Widevine DRM (which allows Netflix/Spotify to play) may occasionally communicate with external servers (like Google or Component Update servers) to download security definitions or verification tokens.
We do not have control over these specific external signals, but we ensure that no identifying data from the Leef team is ever attached to them.
Third-Party Services & Network Boundaries
While the browser itself is private, certain default features, updates, or optional services connect directly to third-party endpoints:
- GitHub: We host our code and releases on GitHub. The browser queries GitHub for updates and critical announcements. GitHub's privacy policy applies when you download Leef or visit our repository.
- Yahoo News RSS Feed (Start Page): By default, the browser's home tab fetches the public Yahoo News RSS feed to display headlines. This feed does not fetch any data until onboarding is completed, and you can opt to disable it during onboarding to ensure it never makes a connection. You can also disable this widget completely at any time in the settings. This connection is direct to Yahoo's public RSS endpoint, and Yahoo's privacy policy applies.
- Ad-Blocker Filter Lists: When ad-blocking is active, the browser downloads filter lists from easyList.to and uBlockOrigin's GitHub assets to compile your local blocking engine.
- Search Autocomplete (Opt-In Only): If you manually enable the "Live Search Autocomplete" setting, keystrokes typed into the address bar are sent to Google Suggest Queries to fetch predictions. No personal identifiers or account details are attached to these requests.
- Bug & Diagnostic Reports (Manual Only): If you experience issues, you can generate a local system diagnostic log. This log is stored on your device and is never sent automatically. It is only shared if you manually choose to submit it through our Google Form bug reporter.
- ProtonMail: Our support email is hosted by Proton. When you email us, your communication is protected by Proton's encryption.
- Website Hosting: This landing page is hosted on GitHub Pages. Basic web server logs (IP addresses) may be collected by GitHub for security and maintenance.
Contact Us
If you have questions about our privacy practices, or if you find a way we can make Leef even more private, please reach out. We are always looking for ways to further strip back the "bloat" of the modern web.
contact.qtech@proton.me