Privacy & Trust

Lastbrowser Privacy Policy

Lastbrowser is built upon a fundamental commitment to a Local-First architecture. Your browsing history, open tabs, saved passwords, and personal files belong exclusively to you and never leave your machine without explicit consent.

Effective Date: September 22, 2026 · Microsoft Store & GDPR Compliant

1. Our Core Commitment: Local-First Zero-Cloud-Tracking

Modern mainstream browsers commonly sync every visited URL, search keystroke, and tab snapshot to central cloud servers. Lastbrowser intentionally rejects this paradigm:

  • Local-Only Storage on Your PC: All browser data—including history, session snapshots, bookmarks, cookies, web storage, SQLite databases, and workspace layouts—is stored exclusively on your local computer in your user profile under %APPDATA%\Lastbrowser.
  • No Telemetry or Tracking: Lastbrowser contains zero hidden analytics scripts, keystroke loggers, advertising identifiers, or tracking beacons.
  • No Account Mandatory: You can operate the full range of browser features without ever creating an online account.

2. Artificial Intelligence & LLM Providers Bring-Your-Own-Key (BYOK)

Lastbrowser integrates an autonomous AI assistant (Nova / Sidekick Copilot) for in-depth research, code inspection, and tab synthesis. We guarantee complete transparency:

  • No Automated Content Uploads: Webpage text or DOM contents are never transmitted automatically to any third party or cloud service. Data is processed exclusively when you explicitly initiate an action (e.g., submitting a prompt, clicking "Summarize", or executing an agentic workflow).
  • Your Own Keys & Local Authentication: You retain complete control over which AI provider is used. Lastbrowser connects using your personal API keys (Google Gemini API, Anthropic Claude, OpenAI) or via the local Google Gemini CLI with your authorized local Google accounts. Keys are stored locally and encrypted.
  • Zero Training on User Data: Neither Lastbrowser nor our infrastructure ever uses your queries or webpage snippets to train machine learning models.
  • Prompt-Injection & Guardrail Protection: Lastbrowser implements strict filters that neutralize prompt-injection attempts, invisible control characters, and malicious payload scripts hidden inside untrusted third-party websites.

3. Data Erasure & User Control (Store Policy 10.2)

In full compliance with Microsoft Store Policy 10.2 and Article 17 of the GDPR (Right to Erasure), you maintain total sovereignty over your browsing data at all times:

  • Clear Browsing Data: Through the Settings panel (or the History & Security dialog), you can selectively or completely delete HTTP cache, cookies, local storage, indexedDB, and browsing history with a single click.
  • Private / Incognito Mode: Browsing in Private Mode (Ctrl+Shift+N) utilizes an isolated, transient in-memory session. No cache, cookies, or history are written to persistent storage, and all temporary traces are purged upon closing the tab.
  • Complete Clean Uninstall: When uninstalling Lastbrowser via Windows Settings or Control Panel, the uninstaller provides an explicit prompt to cleanly remove all application data, profiles, and cached files from %APPDATA%\Lastbrowser.

4. WebExtensions & Add-ons (Manifest V3)

Lastbrowser supports Chrome WebExtensions via the modern Manifest V3 specification:

  • Extensions run locally in sandboxed environments within guest webviews.
  • Requested permissions are transparently listed in the extension management panel.
  • Extensions are disabled in Incognito mode by default to prevent incidental tracking, but can be selectively enabled by user choice.

5. Network Requests & Automatic Updates

When you navigate to any website, standard direct HTTP/HTTPS connections are established with the remote server hosting that domain, subject to that third party's privacy policy.

To ensure security and stability, Lastbrowser periodically queries GitHub's official release metadata for signed application updates. No identifying information is transmitted during these checks.