From 79b68f137e8f7a63c951866d8a7da7a1f58871db Mon Sep 17 00:00:00 2001 From: Fabian Freund Date: Sun, 15 Mar 2026 18:11:09 +0100 Subject: [PATCH] update legal docs --- PRIVACY_POLICY.md | 1 - app/assets/legal/EULA.md | 228 ++++++++++++++++++++++ app/assets/legal/PRIVACY_POLICY.md | 292 +++++++++++++++++++++++++++++ 3 files changed, 520 insertions(+), 1 deletion(-) delete mode 100644 PRIVACY_POLICY.md create mode 100644 app/assets/legal/EULA.md create mode 100644 app/assets/legal/PRIVACY_POLICY.md diff --git a/PRIVACY_POLICY.md b/PRIVACY_POLICY.md deleted file mode 100644 index 32415eb5..00000000 --- a/PRIVACY_POLICY.md +++ /dev/null @@ -1 +0,0 @@ -[Privacy Policy](https://docs.weblibre.eu/Privacy-Policy) diff --git a/app/assets/legal/EULA.md b/app/assets/legal/EULA.md new file mode 100644 index 00000000..2c6daf4a --- /dev/null +++ b/app/assets/legal/EULA.md @@ -0,0 +1,228 @@ +# WebLibre End User License Agreement (EULA) + +**Version 1.2** +**Last Updated:** 2026-03-15 + +**Licensor:** +OnDevice UG (haftungsbeschränkt) +Romerstrasse 21 +D-71540 Murrhardt +Germany +info@ondevice.eu + +--- + +## 1. Scope and Acceptance + +This End User License Agreement ("Agreement") governs your use of the WebLibre application, related software, updates, branding, websites, and any related services that OnDevice UG may make available in connection with WebLibre (together, the "Software"). + +By downloading, installing, accessing, or using the Software, you agree to this Agreement. If you do not agree, do not use the Software. + +--- + +## 2. Open Source License + +The WebLibre source code is licensed under the GNU Affero General Public License v3.0 (AGPL-3.0). The AGPL-3.0 governs your rights to use, copy, modify, and redistribute the source code and any covered versions of the Software. The full license text is available at: https://www.gnu.org/licenses/agpl-3.0.html + +If this Agreement conflicts with the AGPL-3.0 regarding rights granted under that license, the AGPL-3.0 controls to the extent of that conflict. + +WebLibre incorporates third-party open source components, each subject to its own license terms. Key components include (non-exhaustive): + +- **GeckoView / Mozilla Android Components** — MPL-2.0 (Mozilla Public License 2.0) +- **Tor libraries** — various open source licenses +- **ClearURLs catalog** — LGPL-3.0 +- **Flutter framework** — BSD-3-Clause + +A complete list of components and their licenses is available in the source code repository and within the app's about/licenses screen. + +The WebLibre name, logo, and branding are not licensed under the AGPL-3.0 except to the limited extent required by applicable law. + +--- + +## 3. Availability and Fees + +The Software is currently made available without a license fee, unless otherwise stated by OnDevice UG or a distribution platform. OnDevice UG may change how the Software or related services are offered in the future, subject to applicable law and any mandatory consumer information obligations. + +--- + +## 4. Acceptable Use + +You agree to use the Software only in compliance with applicable law and not to: + +- use the Software for unlawful, harmful, fraudulent, or abusive purposes; +- interfere with, disrupt, or attempt unauthorized access to websites, services, networks, or devices; +- use the Software to violate the rights of others, including intellectual property, privacy, or publicity rights; +- misrepresent the origin of the Software or remove notices that must be preserved under applicable license terms. + +You are solely responsible for your use of the Software, the content you access or transmit, the services you connect to, and the configuration choices you make. + +--- + +## 5. Privacy and Security + +Our privacy practices are described in the Privacy Policy available at https://docs.weblibre.eu/Legal/Privacy-Policy. + +The Software may include privacy, security, filtering, backup, synchronization, routing, or other protective features. These features are provided on a best-effort basis only. They are not guarantees of anonymity, confidentiality, security, legality, availability, or fitness for any particular purpose. Their effectiveness depends on factors outside OnDevice UG's control, including device security, third-party services, network conditions, regional restrictions, user settings, and modified builds. + +If you need assured confidentiality, anonymity, uptime, compliance, retention, or incident response, you should not rely solely on the Software. + +--- + +## 6. Third-Party Content and Services + +The Software can access or interact with third-party websites, content, services, extensions, accounts, network providers, and infrastructure. OnDevice UG does not control and is not responsible for third-party content, terms, privacy practices, functionality, legality, availability, security, or changes. + +Your use of third-party offerings is solely between you and the relevant third party. Third-party offerings may fail, change, be removed, be blocked, or become unavailable at any time without notice. + +### 6.1 Browser Extensions + +WebLibre supports Firefox-compatible browser extensions (WebExtensions). Extensions may be obtained from Mozilla Add-ons (addons.mozilla.org), configured add-on collections, or installed locally from `.xpi` files. Third-party extensions are not developed, reviewed, or endorsed by OnDevice UG. Installing extensions may grant them access to your browsing data and other information as described in their respective permission dialogs. You are responsible for reviewing extension permissions before installation. + +### 6.2 Search Engines + +When you perform a search, your query is sent directly to your selected search engine provider (e.g., DuckDuckGo, Brave Search, Kagi, Qwant, or others you configure). WebLibre does not intermediate or log these queries. + +### 6.3 Mozilla Services + +WebLibre supports optional integration with Mozilla services, including Firefox Sync via Mozilla accounts. When enabled, data is synchronized with Mozilla's servers under Mozilla's privacy policy. WebLibre also supports custom server overrides, in which case synchronization data is transmitted to the operator of the server endpoints you configure. + +### 6.4 Safe Browsing + +When Google Safe Browsing or similar remote reputation features are active, URL-derived lookup data may be transmitted to Google LLC or the relevant provider to detect dangerous websites or downloads. + +### 6.5 DNS Services + +WebLibre supports DNS-over-HTTPS (DoH) and custom DNS resolvers. When enabled, DNS queries are sent to the selected provider instead of your default network resolver. + +### 6.6 Tor Network + +WebLibre integrates optional Tor routing for anonymous browsing. OnDevice UG is not affiliated with The Tor Project. Your use of the Tor network is governed by The Tor Project's policies (https://www.torproject.org/about/privacy/). You are responsible for ensuring that your use of Tor complies with applicable laws in your jurisdiction. + +### 6.7 URL Services + +WebLibre may use the `unshorten.me` service to expand shortened URLs and the ClearURLs catalog to strip tracking parameters from URLs. + +### 6.8 General + +OnDevice UG is not liable for damages caused by third-party content, services, or extensions, except to the extent that such liability arises from OnDevice UG's own intentional misconduct or gross negligence, or cannot be excluded under mandatory law. + +--- + +## 7. Intellectual Property and Feedback + +Except for rights granted under applicable open source licenses, OnDevice UG and its licensors retain all rights, title, and interest in the Software, including branding and other proprietary elements. + +You retain rights in your own content. If you voluntarily provide suggestions, ideas, or feedback, you grant OnDevice UG a non-exclusive, worldwide, royalty-free, perpetual, irrevocable license to use, reproduce, modify, publish, distribute, and otherwise exploit that feedback for any purpose without compensation or obligation. + +--- + +## 8. Your Data, Backups, and Local Storage + +The Software may store data locally on your device and may allow import, export, backup, restore, or synchronization features. You are solely responsible for maintaining backups, protecting exported files, safeguarding credentials and passwords, and verifying the integrity of imported or restored data. + +OnDevice UG is not responsible for loss of data, corruption, failed restores, forgotten passwords, incompatible backups, or unauthorized access to files stored on your device or in locations you choose. + +--- + +## 9. Updates, Changes, and Support + +OnDevice UG may release updates, patches, or new versions, but has no obligation to do so. OnDevice UG may add, modify, suspend, restrict, or remove any feature, service, integration, or compatibility at any time. Where reasonably practicable, OnDevice UG will provide notice of material changes through the source code repository or app update notes. As the Software is provided free of charge and is open-source, no compensation or continued availability of specific features is owed. + +The Software may include experimental, preview, beta, or unsupported features. Those features may contain errors, may be modified or removed without notice, and are not subject to the same level of testing or support as stable features. Use of experimental features is at your own risk, subject to the limitations of liability in Section 11. + +No support, maintenance, uptime, compatibility, or continued availability is promised. + +--- + +## 10. Disclaimer of Warranties + +**TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITH ALL FAULTS AND WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, QUIET ENJOYMENT, SECURITY, AVAILABILITY, OR RESULTS.** + +OnDevice UG does not warrant that the Software will be uninterrupted, error-free, secure, compatible with your device or environment, free from harmful components, or that defects will be corrected. + +--- + +## 11. Limitation of Liability + +**TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ONDEVICE UG SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, USE, DATA, CONTENT, SAVINGS, OR OPPORTUNITY, ARISING OUT OF OR RELATING TO THE SOFTWARE OR THIS AGREEMENT, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.** + +To the maximum extent permitted by applicable law, OnDevice UG shall also not be liable for damages arising from or relating to: + +- third-party websites, services, extensions, infrastructure, or content; +- your device, network, operating system, firmware, ROM, security posture, or user configuration; +- censorship, filtering, blocking, outages, routing failures, DNS failures, certificate issues, or other internet or infrastructure problems; +- unauthorized access, malware, data loss, corruption, failed backups, failed restores, or loss of credentials; +- changes to or discontinuation of the Software or any third-party dependency. + +If liability cannot be excluded, it is limited to the minimum amount required by law. Nothing in this Agreement excludes or limits liability that cannot lawfully be excluded or limited, including liability for intent (Vorsatz), gross negligence (grobe Fahrlässigkeit) where required, or mandatory liability under applicable product liability law (Produkthaftungsgesetz). + +--- + +## 12. Force Majeure + +OnDevice UG shall not be liable for any failure or delay in performance resulting from causes beyond its reasonable control, including but not limited to natural disasters, war, government actions, pandemics, network or infrastructure failures, or third-party service disruptions. This does not affect liability under mandatory law, including Section 11 of this Agreement. + +--- + +## 13. Indemnification + +To the extent permitted by applicable law, you agree to defend, indemnify, and hold harmless OnDevice UG and its affiliates, officers, employees, and contractors from and against claims, losses, liabilities, damages, judgments, and expenses (including reasonable attorneys' fees) arising out of or related to: + +- your intentional misuse of the Software; +- content you intentionally create, distribute, or transmit using the Software; +- your intentional violation of this Agreement or applicable law; +- your intentional violation of any third-party rights. + +This section does not apply to the extent a claim results from OnDevice UG's own misconduct or negligence, or to the extent that it would be unenforceable under mandatory consumer protection law. + +--- + +## 14. Term and Termination + +This Agreement applies from first use of the Software until terminated. + +You may terminate this Agreement at any time by stopping use of the Software and deleting your copies, subject to any continuing rights you may have under the AGPL-3.0. + +OnDevice UG may suspend or terminate access to any related service, website, account feature, or distribution channel at any time. If you materially breach this Agreement, OnDevice UG may terminate your rights under this Agreement upon notice, to the extent permitted by law. Termination does not affect provisions that by their nature should survive, including Sections 7 through 17. + +--- + +## 15. Export, Sanctions, and Local Law + +The Software may include encryption, routing, or other regulated functionality. You are solely responsible for complying with applicable export controls, sanctions, import laws, and local laws relating to possession, download, use, or transmission of the Software and any connected service. + +OnDevice UG makes no representation that the Software is lawful, available, or appropriate in any jurisdiction. + +--- + +## 16. Governing Law and Venue + +This Agreement is governed by the laws of the Federal Republic of Germany, excluding conflict of law rules and the United Nations Convention on Contracts for the International Sale of Goods (CISG). + +If you are a merchant, legal entity under public law, or special fund under public law, the exclusive place of jurisdiction is Stuttgart, Germany. + +If you are a consumer, mandatory consumer protection laws and mandatory venue rules remain unaffected. In particular, if the law of the country of your habitual residence grants you protections that are more favorable than the non-mandatory provisions of German law, those protections remain unaffected. + +The European Commission provides an online dispute resolution platform at https://ec.europa.eu/odr/. OnDevice UG is not obligated and does not agree to participate in consumer arbitration proceedings unless required by law. + +--- + +## 17. General Terms + +If any provision of this Agreement is held invalid or unenforceable, the remaining provisions remain in effect, and the invalid provision shall be enforced to the maximum extent permitted by law. + +This Agreement, together with the Privacy Policy and applicable open source licenses, is the entire agreement between you and OnDevice UG regarding the Software, unless a separate written agreement expressly applies. + +No waiver is effective unless in writing. Failure to enforce any provision is not a waiver. + +--- + +## 18. Contact + +If you have questions about this Agreement, please contact: + +OnDevice UG (haftungsbeschränkt) +Romerstrasse 21 +D-71540 Murrhardt +Germany +Email: info@ondevice.eu diff --git a/app/assets/legal/PRIVACY_POLICY.md b/app/assets/legal/PRIVACY_POLICY.md new file mode 100644 index 00000000..e6e7d01d --- /dev/null +++ b/app/assets/legal/PRIVACY_POLICY.md @@ -0,0 +1,292 @@ +# WebLibre Privacy Policy + +**Version 1.2** +**Last Updated:** 2026-03-15 + +**Controller:** +OnDevice UG (haftungsbeschränkt) +Romerstrasse 21 +D-71540 Murrhardt +Germany +info@ondevice.eu + +--- + +## 1. Overview + +This Privacy Policy explains how OnDevice UG handles personal data in connection with WebLibre. + +WebLibre is designed so that browsing and app data are primarily processed on your device rather than sent to OnDevice UG. WebLibre may also connect you to third-party websites, services, networks, platform features, and content providers that process data under their own terms and privacy policies. + +Unless otherwise stated, references to "we," "us," or "our" mean OnDevice UG. + +--- + +## 2. Data Processed Locally on Your Device + +Depending on the features you use, WebLibre may store or process data locally on your device, such as browsing history, bookmarks, cookies and site data, cached content, downloads, tab state, search history, settings, extension data, account-related data, feed content, and backup or export files. + +Some files you create or export may be stored outside the app sandbox in locations you choose or that Android makes available for file access. + +Local storage on your device is generally under your control. You can manage or delete certain data through Android and in-app settings, but some data may remain until you remove it manually, clear app storage, or uninstall the app. + +--- + +## 3. Data That May Be Sent to Third Parties + +When you use the web or optional features, your device may communicate directly with third parties. All such features are either user-initiated or can be disabled. OnDevice UG does not control third-party processing and is not responsible for third-party privacy or security practices. + +### 3.1 Web Browsing + +When you visit a website, your device connects directly to that website's servers. The website receives your IP address, browser user agent string, HTTP headers, cookies, and any data you submit. This is inherent to how the web works and is not controlled by WebLibre. WebLibre provides tools to mitigate tracking (see Section 7). + +**Legal basis:** Contract performance (Art. 6(1)(b) GDPR) — fulfilling your request to access a website. + +### 3.2 Search Suggestions (Optional) + +When enabled, partial search queries are sent to the search suggestion provider you select (for example DuckDuckGo, Brave Search, Kagi, Qwant, or another provider you configure). Each provider's privacy policy governs their handling of this data. You can disable this feature entirely in settings. + +**Legal basis:** Consent (Art. 6(1)(a) GDPR) — you choose to enable this feature and select the provider. + +### 3.3 Search Engines + +When you perform a search, your full query is sent to your selected search engine (for example DuckDuckGo, Brave Search, Kagi, Qwant, or another provider you configure). This is a direct interaction between your device and the search engine provider. WebLibre does not intermediate or log these queries. + +**Legal basis:** Contract performance (Art. 6(1)(b) GDPR) — fulfilling your request to perform a search. + +### 3.4 Firefox Sync (Optional) + +If you sign in with a Mozilla account, WebLibre can synchronize data (bookmarks, browsing history, open tabs, device information) with Mozilla's Firefox Sync servers. This feature is entirely opt-in. WebLibre also supports custom server overrides, in which case synchronization data is transmitted to the operator of the server endpoints you configure instead of Mozilla's default infrastructure. + +**Data controller for Firefox Sync:** Mozilla Corporation for the default service, or the operator of the endpoints you configure if you override the defaults. Mozilla's privacy policy: https://www.mozilla.org/privacy/firefox/ + +**Legal basis:** Consent (Art. 6(1)(a) GDPR) — you actively sign in and choose to sync. + +### 3.5 DNS-over-HTTPS (Optional) + +If you enable DNS-over-HTTPS (DoH) or configure a custom DNS resolver, DNS queries are sent to the selected provider instead of your default network resolver. + +**Data sent:** DNS lookup requests and related network metadata necessary for name resolution. + +**Legal basis:** Consent (Art. 6(1)(a) GDPR) — you choose to enable DoH or configure the provider. + +### 3.6 Enhanced Tracking Protection and Safe Browsing + +WebLibre uses GeckoView's built-in tracking protection and security features to block known trackers, fingerprinters, and malicious sites. When Google Safe Browsing or similar remote reputation features are active, URL-derived lookup data or other security-related request data may be transmitted to Google LLC or the relevant provider to detect dangerous websites or downloads. + +**Data controller for Safe Browsing:** Google LLC. Google's privacy policy: https://policies.google.com/privacy + +**Legal basis:** Legitimate interest (Art. 6(1)(f) GDPR) — protecting users from malicious websites. + +### 3.7 Browser Extensions (User-Initiated) + +When you install a browser extension, WebLibre may contact Mozilla Add-ons (addons.mozilla.org), a configured add-on collection, or another source to retrieve extension metadata or downloads. WebLibre also supports installation from local `.xpi` files, which does not require contact with a remote source. + +**Data sent:** Extension identifiers and related request metadata required by the selected source. + +Installed extensions may independently communicate with their own servers according to their own privacy policies. + +**Legal basis:** Contract performance (Art. 6(1)(b) GDPR) — fulfilling your request to install an extension. + +### 3.8 URL Unshortening (Optional) + +When enabled, WebLibre can expand shortened URLs (e.g., bit.ly links) to reveal the actual destination before navigation. + +**Data sent:** The shortened URL. +**Server:** `unshorten.me`. The service may cache redirect results. Avoid using this feature for private or sensitive URLs unless you accept third-party handling. + +**Legal basis:** Consent (Art. 6(1)(a) GDPR) — you choose to enable this feature. + +### 3.9 Tor Network (Optional) + +When Tor mode is enabled, your web traffic is routed through the Tor network via multiple relays for anonymity. OnDevice UG is not affiliated with The Tor Project. + +**Data sent:** Encrypted traffic via the standard Tor protocol. + +**Pluggable transports:** Depending on your settings, WebLibre may use pluggable transports (such as Snowflake, obfs4, meek, or webtunnel) to connect to the Tor network. When using these transports, your device may additionally communicate with transport brokers, CDN front domains, and STUN/TURN servers operated by third parties. **These connections may expose your IP address to the respective transport operators.** + +Bridge configuration may be bundled with the app, manually entered by you, or fetched remotely (e.g., via the Tor Project's Moat API). + +The Tor network's operation is governed by the Tor Project's policies: https://www.torproject.org/about/privacy/ + +**Legal basis:** Consent (Art. 6(1)(a) GDPR) — you choose to enable Tor mode. + +### 3.10 RSS/Feed Fetching (User-Initiated) + +When you subscribe to an RSS or Atom feed, WebLibre periodically fetches content from the feed URL. In release builds, feeds are automatically refreshed approximately every 15 minutes using Android's background fetch mechanism, including when the app is not actively running and after device restarts. + +**Data sent:** HTTP requests to the feed URLs (your IP address is visible to the feed servers). + +**Legal basis:** Contract performance (Art. 6(1)(b) GDPR) — fulfilling your request to subscribe to a feed. + +### 3.11 URL Cleaner Catalog Updates (Optional) + +WebLibre includes a locally cached URL-cleaning catalog (ClearURLs) to strip tracking parameters from URLs. Depending on your settings, the app may also fetch updated catalog data and related hash/check files from remote sources at runtime. + +**Data sent:** Standard HTTP(S) requests to the configured catalog and hash URLs. URL cleaning itself is performed locally. + +**Legal basis:** Consent (Art. 6(1)(a) GDPR) — you choose to enable automatic catalog updates. + +### 3.12 Speech Recognition / Voice Input (Optional) + +If you use speech-to-text or voice-input features, WebLibre invokes Android's speech recognition facilities. + +**Data sent:** Audio, recognized text, and related request metadata may be processed by your device vendor, OS provider, or configured speech-recognition service. + +**Legal basis:** Consent (Art. 6(1)(a) GDPR) — you choose to invoke the feature. + +### 3.13 QR Scanning and Camera-Based Pairing (Optional) + +If you use QR scanning features (such as pairing a Firefox Sync account from a desktop browser), the app uses the device camera locally to scan the code. + +QR image data is processed on-device. If you proceed with the action encoded in the QR code, related third-party communications may then occur as part of the chosen feature (e.g., Firefox Sync sign-in). + +**Legal basis:** Consent (Art. 6(1)(a) GDPR) — you choose to invoke the feature. + +--- + +## 4. Data We Receive + +WebLibre is not designed to send your browsing history, page content, search queries, or app usage analytics to OnDevice UG by default. To be explicit, in the ordinary operation of the app as provided by OnDevice UG, OnDevice UG does **not**: + +- operate telemetry, analytics, crash reporting, advertising, fingerprinting, or profiling services; +- intentionally collect browsing behavior, search queries, or app usage data; +- use advertising networks or ad identifiers; +- sell, rent, or share your personal data; +- intentionally operate servers that receive personal browsing data from WebLibre installations. + +However, OnDevice UG may receive limited personal data in situations outside or around the app itself, for example if you contact us, submit a legal request, access our websites or code hosting pages, use a service we operate, or interact with a platform or distribution channel that shares operational information with us. + +We may also process information where necessary to comply with law, protect rights and security, prevent abuse, or operate and improve our own services. + +--- + +## 5. Purposes and Legal Bases + +Where applicable under the GDPR, we process personal data on one or more of the following legal bases. The specific legal basis for each feature is stated in Section 3 alongside that feature's data flow description. + +**Summary of legal bases:** + +- **Consent** (Art. 6(1)(a) GDPR) — for optional features you choose to enable, such as search suggestions (3.2), Firefox Sync (3.4), DNS-over-HTTPS (3.5), URL unshortening (3.8), Tor routing (3.9), URL cleaner catalog updates (3.11), voice input (3.12), and QR scanning (3.13); +- **Contract performance** (Art. 6(1)(b) GDPR) — for features inherent to the service you requested, such as web browsing (3.1), search queries (3.3), extension installation (3.7), and feed fetching (3.10); +- **Legitimate interest** (Art. 6(1)(f) GDPR) — for security and protection features such as tracking protection and safe browsing (3.6); +- **Legal obligation** (Art. 6(1)(c) GDPR) — where required by applicable law; +- any other legal basis permitted under applicable law. + +For optional third-party features you choose to enable or configure, the relevant third party may act as an independent controller or processor under its own privacy terms. + +--- + +## 6. What We Do Not Intentionally Do Through the App + +WebLibre is not intended to operate as a telemetry, advertising, or profiling product for OnDevice UG. We do not intentionally design the app to send us browsing content, browsing history, search terms, or app usage analytics for tracking or advertising purposes. + +This section applies to the app's intended first-party behavior. It does not cover third-party services, modified builds, custom endpoints, user-configured services, platform-level processing, or data you provide to us separately. + +--- + +## 7. Privacy Features and User Controls + +WebLibre provides extensive privacy controls that you can configure through the app's privacy and security settings. Key controls include: + +- **Enhanced Tracking Protection (ETP)** — blocks known trackers, fingerprinters, cryptominers, and social tracking content +- **Bounce Tracking Protection** — mitigates cross-site tracking via redirect chains +- **Query Parameter Stripping** — removes known tracking parameters from URLs +- **Fingerprinting Resistance** — reduces browser fingerprinting surface +- **Global Privacy Control (GPC)** — sends a signal to websites requesting they do not sell or share your data +- **Multi-Account Containers** — isolate browsing contexts to prevent cross-site tracking, with optional clear-on-exit per container +- **HTTPS-Only Mode** — upgrades connections to HTTPS where possible +- **DNS-over-HTTPS** — encrypts DNS queries to configured providers +- **Site Isolation** — isolates website processes for security +- **Local Network Blocking** — prevents websites from accessing local network resources +- **Tor Integration** — routes traffic through the Tor network for anonymity +- **URL Cleaning** — strips tracking parameters from URLs using locally cached catalogs + +For a complete list of available controls and their current state, see the app's privacy and security settings. + +--- + +## 8. Permissions and Device Features + +WebLibre may request or use device permissions and platform features depending on the functionality you use, such as internet access, storage or media access, notifications, camera, microphone, location, biometric or local authentication, credential services, and interaction with other apps. + +These permissions are used to provide requested functionality. Data obtained through those permissions may be processed locally on your device or sent to relevant third parties depending on the feature you use and your device or platform configuration. + +--- + +## 9. Children + +WebLibre is not directed to children, and we do not knowingly collect personal data from children through the app. Parents and guardians are responsible for supervising a child's use of the internet, apps, and connected services. + +--- + +## 10. Retention + +Data stored locally by the app generally remains on your device until you delete it, overwrite it, clear app storage, uninstall the app, or remove external files. Certain categories of local data may also be deleted earlier through in-app deletion features, clear-on-exit settings, or Android storage management. + +If OnDevice UG receives personal data directly (for example through support requests or legal inquiries), we retain it only for as long as reasonably necessary for the purpose for which it was collected, including legal, operational, security, documentation, and dispute-resolution purposes, and no longer than required by applicable law. + +--- + +## 11. Security + +We use reasonable measures for personal data we control. Local app data is protected by Android's application sandboxing. WebLibre supports encrypted backups for profile data. The app's local-only storage model means that most user data never leaves your device unless you choose to use features that transmit data (as described in Section 3). + +However, no software, device, network, or transmission method is completely secure. You are responsible for the security of your device, backups, exported files, credentials, accounts, and any third-party services or custom configurations you choose to use. + +--- + +## 12. International Transfers + +When you access websites or use optional features, third parties may process data in countries outside your own, including outside the European Economic Area. Those transfers are governed by the relevant third party's terms and privacy practices. + +If OnDevice UG transfers personal data internationally, we will do so in accordance with applicable law. + +--- + +## 13. Your Rights + +Subject to applicable law, you may have rights including access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent where processing is based on consent. + +Because WebLibre is designed to store most data locally on your device, OnDevice UG may not be able to identify you from app use alone or respond to requests regarding data that we do not possess or control. + +You also have the right to lodge a complaint with a competent data protection authority, in particular in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement, subject to applicable law. + +To exercise your rights regarding data controlled by OnDevice UG, contact: info@ondevice.eu + +Supervisory authority: +Der Landesbeauftragte fur den Datenschutz und die Informationsfreiheit Baden-Wurttemberg (LfDI BW), https://www.baden-wuerttemberg.datenschutz.de/ + +--- + +## 14. Third-Party Services and Open Source + +WebLibre includes or interoperates with third-party and open source components. Those components, services, and endpoints may change over time and may be governed by separate privacy notices, licenses, or terms. + +WebLibre is open source. Its source code is publicly available to support transparency and independent review: + +Source code: https://github.com/FaFre/WebLibre + +--- + +## 15. Changes to This Privacy Policy + +We may update this Privacy Policy from time to time. We will publish the updated version and revise the version number and last updated date. Material changes may also be communicated through app release notes, repositories, websites, or other appropriate channels. + +--- + +## 16. Contact + +If you have questions about this Privacy Policy, please contact: + +OnDevice UG (haftungsbeschränkt) +Romerstrasse 21 +D-71540 Murrhardt +Germany +Email: info@ondevice.eu + +--- + +## 17. Governing Law + +This Privacy Policy is governed by the laws of the Federal Republic of Germany, except where mandatory law requires otherwise.