Privacy Policy
Short version, in plain language — English first, Türkçe özet altında. Last updated: 2026-09-25.
1. No data collection — no telemetry
FoxAI Browser collects nothing: no telemetry, no crash reports, no analytics SDKs, no experiment pings. Referrer, beacon, ping, prefetch and studies/phone-home endpoints are disabled in the build (config/user.js, foxai.cfg). The project website is static: no cookies, no trackers, no third-party scripts (only Google Fonts CSS).
Türkçe: FoxAI Browser hiçbir veri toplamaz: telemetri, çökme raporu, analiz SDK'sı yok. Site statiktir: çerez yok, izleyici yok.
2. AI is opt-in, on-device first
AI is off by default. The default mode runs on-device (KoboldCpp + Qwen) — nothing leaves your computer. If you choose an external provider (ChatGPT, Claude, Gemini, Ollama), only that action's data is sent, only after you explicitly click "Allow page access" — one action at a time, revocable. API keys are stored locally on your device.
Türkçe: Yapay zekâ varsayılan kapalıdır; varsayılan mod cihaz-içidir (KoboldCpp + Qwen) — veri cihazdan çıkmaz. Harici sağlayıcı seçersen yalnızca o işlemin verisi, "İzin Ver"e basmanla gönderilir; anahtarlar yerelde saklanır.
3. Location, camera, microphone
Weather is opt-in (no location by default). Camera, microphone, geolocation and autoplay are default-deny — the browser asks only when you allow. WebRTC is disabled, so no IP leaks; HTTPS-only is on.
Türkçe: Konum (hava durumu) isteğe bağlıdır; kamera, mikrofon, konum varsayılan kapalıdır. WebRTC kapalı — IP sızıntısı yok.
4. Tor mode (opt-in)
Optional Tor routing sends all traffic + DNS via local SOCKS5 (127.0.0.1:9050) with WebRTC dead. Off by default; normal and Tor profiles are separate.
Türkçe: Tor modu isteğe bağlıdır; tüm trafik + DNS yerel SOCKS5 üzerinden gider. Varsayılan kapalıdır.
5. What never happens
- No account, no sign-in — nothing to link to you
- No cookies or storage on the project website
- Only sites you visit are ever contacted
- Fingerprint: deterministic 100/100 similarity, per-session canvas noise
6. Vulnerability disclosure
Found a privacy or security issue? Please report it privately per our security policy (SECURITY.md): acknowledgement within 48 hours, assessment within 7 days, 90-day coordinated disclosure.
Türkçe: Güvenlik açığı bulursan SECURITY.md'deki süreçle gizli bildir: 48 saatte dönüş, 7 günde değerlendirme, 90 gün koordineli açıklama.