Privacy Policy – XBrowser SHIELD for Android
Last updated: 18 October 2026 · applies to XBrowser SHIELD from version 1.4.0 (Google Play and GitHub). The German version is authoritative: https://xbrowser.xanonymeki.net/datenschutz/
1. Controller
Kevin März
74740 Adelsheim, Germany
Email: apple20255@proton.me
2. Summary
- XBrowser SHIELD has no account, no advertising, no analytics or tracking services and sends no crash reports to us.
- We as the developer receive no data about the websites you visit.
- Data stored by XBrowser (bookmarks, settings, optional history, downloads) stays on your device. It is excluded from Android cloud backups and device transfer.
3. Data on your device
| Data | When | Deletion |
|---|---|---|
| Settings, bookmarks | when you create them | in the app or by uninstalling |
| History | only if you turn it on (default: off); never in Tor mode | Menu → History → delete; turning it off deletes it completely |
| Cookies, site data | private tabs only | automatically when all tabs are closed or the app is quit |
| Downloads | when you confirm a download | in the folder Downloads/XBrowser (Android 8/9: where you choose) |
| Add-ons | when you install an add-on | add-on manager or uninstalling |
4. Connections to the internet
Websites you visit. Your device connects to the websites you open or search. They receive technically necessary data (e.g. IP address, browser identifier, requested address); their operators are responsible for that processing. XBrowser enforces encrypted HTTPS connections and sends the Global Privacy Control signal.
Search engine. Input that is not a web address is sent to the search engine you chose (default: DuckDuckGo; available: Brave Search, Startpage, Mojeek, Google).
Protection lists of the browser engine. The engine (Mozilla GeckoView) downloads tracker protection lists and security data (e.g. certificate revocation lists) from Mozilla Corporation servers and lists of malware and phishing sites via Google Safe Browsing. No visited addresses are transmitted. Only if an address resembles a list entry does the engine send a shortened, non-reversible hash of that address to Google to check the match.
Updates. - Installed from Google Play: updates come only through Google Play; Google's privacy terms apply. - Installed from GitHub: XBrowser regularly (at most every six hours) downloads a digitally signed update file from GitHub (raw.githubusercontent.com, GitHub Inc.). GitHub receives technical connection data such as the IP address; no device identifiers or usage data are sent. In Tor mode this request uses Tor.
Encrypted DNS (optional). If you turn on DNS.SB, name lookups of visited websites are sent encrypted to DNS.SB (xTom GmbH) instead of your network provider.
Tor (optional, experimental). If you turn on Tor, the browser engine's connections go through the Tor
network. To confirm the Tor exit, XBrowser opens check.torproject.org over Tor. "New Tor identity" asks Tor
for new connections and checks the exit again. Onion services (.onion) open only in Tor mode. Links that open
other apps (email, phone, maps, downloaded files) do not use Tor; XBrowser warns before opening them.
Add-ons (optional). If you install an add-on (e.g. uBlock Origin), it is downloaded from addons.mozilla.org (Mozilla Corporation). Installed add-ons can read and change website content; their developers are responsible for their data processing.
Support (optional). The support link opens Telegram or your default browser outside XBrowser.
In-app displays. The tracker counter, site info and certificate details are evaluated on your device only and are not transmitted.
5. Permissions
| Permission | Purpose |
|---|---|
| Internet, network state | loading websites, Tor and updates |
| Notifications (Android 13+, only with your consent) | security update notices |
| Technical permissions without prompt (background task, boot, wake lock, audio) | scheduled update check; sound of website media |
XBrowser does not request location, camera, microphone, contacts or storage access. Websites do not get these permissions. You choose files for uploads yourself in the Android file picker; only the chosen files are passed to the website.
6. Legal basis
Where personal data such as your IP address is processed in the connections described above, this is done to provide the features you use (Art. 6(1)(b) GDPR) and for the security of the app, e.g. signed update checks (legitimate interest, Art. 6(1)(f) GDPR).
7. Children
XBrowser SHIELD is not directed at children under 16.
8. Your rights
As we receive no personal data about you, we generally cannot provide information about stored data. All app data is on your device and can be deleted there. Under the GDPR you have the right of access, rectification, erasure, restriction, objection and data portability, and the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg. Contact: apple20255@proton.me
9. Changes
We update this policy when app features change. The current version is available at https://xbrowser.xanonymeki.net/privacy/.