Your data, simply.
Last updated: 2026-09-22
TL;DR
Browther is built with privacy in mind. The browser works without an account, doesn't sync anything to the cloud by default, and never sends page content (visited URLs, forms, searches) to dev&din.
We collect two things, and only if you opt in: (1) crash reports, to fix what breaks, and (2) a handful of anonymous events, to know whether Browther is being used. Both are revocable at any time.
Our principles
- No personal data in the statistics: no name, no email, no stored IP address, no visited URL. Only the optional dev&din account knows an email address (see “Referrals and support”).
- Anonymous local identifier: a UUID generated at first launch, never linked to your identity.
- EU hosting (Frankfurt, Germany) — GDPR-compatible.
- Opt-out anytime, from onboarding or settings.
- No reselling, no commercial sharing, no targeted ads.
The Browther app (Desktop, iOS, Android)
On first launch, Browther asks if you agree to send (a) crash reports via Sentry and (b) anonymous usage statistics via PostHog. Both toggles are independent and revocable at any time in the settings.
Sentry — Crash reports
When Browther crashes, a report is sent to Sentry (EU region, Frankfurt) so we can fix the bug.
- Report content: stack trace of the crash, Browther version, operating system, device model.
- No URL content, no page content, no user input.
- Disabled via the "Crash reports" toggle in onboarding or browther://settings/privacy.
PostHog — Anonymous product events
To understand whether Browther is being used and which features are running, we send a handful of anonymous events to PostHog (EU region, Frankfurt). No event contains a URL or page content.
| Event | When |
|---|---|
| app_launched | When the app launches. Properties: version, OS. |
| onboarding_completed | When you finish onboarding. |
| default_browser_set | When you set Browther as the default browser. |
| consent_changed | When you toggle Sentry or PostHog. Properties: toggle name, state (on/off). |
| feature_toggled | When you enable/disable a feature (Sawtunaa, Basarunaa). Properties: feature name, state. |
| page_viewed | View of an internal browser page (new tab, settings). Properties: page name (whitelist: ntp, settings). |
These are the only events sent. None for navigation, none for your tabs, none for your searches.
How to disable
Anytime from browther://settings/privacy: uncheck "Crash reports" (Sentry) or "Anonymous statistics" (PostHog). Effect is immediate — no further event is sent after the toggle.
Referrals and support
Referrals and the subscription need to know who earned what, without knowing who you are.
- An anonymous device identifier, stored in the device keychain, is sent to our referral service (referral.devndin.com, hosted in Europe); the service only keeps a fingerprint of it (a hash), never the identifier in the clear.
- The service keeps your referral code, the number of invitations in progress or confirmed, your months of additional features, and — if someone gave you their code — your days using Browther as the default browser. Never a name, a visited address, or who invited whom.
- A subscription bought on iPhone goes through Apple and RevenueCat, which manages purchase receipts under that same anonymous identifier — or, if you have connected a dev&din account, under that account's identifier; dev&din never sees your payment method.
- You can connect a dev&din account — it's optional, on a computer as on iPhone — to find your code, your invitations, the months you earned and your subscription on your other devices. The referral service then links them to that account's identifier (auth.devndin.com, hosted in Europe), which keeps your email address and, if you sign in with Google or Apple, the name they pass on. The account holds nothing else: never your history, your bookmarks or your tabs. You can delete it at any time from the app (My account › Delete my dev&din account): the account and the referral data attached to it are erased from our servers. A running subscription is cancelled with the store where it was taken out.
- A subscription paid on a computer goes through Polar, an official reseller (merchant of record) that collects the payment, issues the invoice and handles VAT: Polar receives your email address and your payment method; dev&din only sees the state of the subscription (active, renewal date).
The browther.devndin.com website
The marketing site uses the same tools (Sentry + PostHog), with the same principles: no PII, EU hosting, revocable.
Sentry — JavaScript errors
If a page on the site breaks, we capture the error. Sentry Replay is enabled only when an error occurs (never on normal navigation), and masks user input by default. Events are sent via /monitoring on the site's own domain (bypasses ad-blockers).
PostHog — Anonymous events
A few events are captured to understand how the site is used. None contains identifying information.
| Event | When |
|---|---|
| $pageview / $pageleave | On every page navigation. |
| section_viewed | When a section becomes 40% visible (scroll-depth proxy). |
| cta_clicked | Click on a call-to-action. Properties: name, location. |
| download_clicked | Click on a download button. Properties: detected OS. |
| demo_tab_clicked / demo_toggled | Interactions with the demo (tab click, ON/OFF toggle). |
| theme_toggled / language_switched | Theme switch (light/dark) or language switch (FR/EN/AR). |
| faq_opened | Opening a FAQ question. |
| outbound_link_clicked | Click on a tracked outbound link (dev&din logo in the footer). |
The site uses no advertising cookies and no third-party trackers. PostHog stores nothing in your browser (no cookie, no localStorage): its anonymous identifier disappears as soon as the page is closed or reloaded.
Third parties
- Sentry — Error monitoring platform. Region: Germany (Frankfurt). GDPR processor. https://sentry.io/privacy/
- PostHog — Product analytics platform. Region: EU (Frankfurt). GDPR processor. IP geolocation disabled. https://posthog.com/privacy
- Vercel / Dokploy — Site hosting on our OVH servers (Gravelines, France) orchestrated by Dokploy. Cloudflare sits in front (DNS + proxy) for DDoS protection. Standard server logs (IP, user-agent) retained <30 days for security purposes.
- RevenueCat — management of subscriptions bought in the App Store (receipts, renewals), under an anonymous identifier.
Your rights
Under GDPR, you have the following rights regarding your data, at any time:
- Right of access — know what is collected.
- Right to erasure — request deletion of your anonymous UUID and associated events.
- Right to object — disable collection (Sentry/PostHog toggles).
For any request, contact us at [email protected].
Changes
This page will be updated if data collection changes. The date at the top reflects the last revision.