Privacy policy

Updated September 29, 2026 · Applies to Secure Browser 1.0

Secure Browser is a local browser provided by Vector Nest. No app account is required. This policy describes the behavior implemented in this version.

1. Data handled by the app

The app saves page addresses, titles, visit times, tabs, bookmarks, downloads, and settings on your device. The browser requires your password before providing access to pages and browsing records. The developer has no server for receiving these records and has not integrated advertising, analytics, or cloud sync services.

App language is a separate local preference, available before unlocking. It contains no browsing content.

2. How protected space works

History, bookmarks, tabs, download records, and downloaded files in protected space are encrypted with AES-256-GCM. PBKDF2-HMAC-SHA256 derives a key from your password and a random salt to protect a randomly generated data key. Your password is not stored in plain text.

Website cookies, cache, and local website storage are kept in separate system WebView data containers. They rely on the operating system sandbox, device lock, and system file protection; they are not encrypted with your app password. This feature does not promise protection against system-level attacks on an unlocked device, jailbreaking, or root access.

Protected space on Android enables system screen-capture protection. iOS cannot reliably prevent screenshots. Copies created through screenshots, screen recordings, or explicit export are not protected by your password. Both platforms lock protected space when the app leaves the foreground and hide its app-switcher preview.

3. Websites and search engines

When you open a page or submit a search, your device connects to the website or search engine you choose. That service may receive your IP address and request information, and may set cookies under its own policies. Bing is the default search engine; Baidu and DuckDuckGo are available in settings. Secure Browser sends no search-suggestion requests. System WebView safety and network services are managed by the platform provider.

Protected space is not an anonymous network or VPN, and does not make you invisible to websites. Web permissions and safe-browsing mechanisms can differ between Android and iOS.

4. Permissions and sharing

Android declares internet access permission. This version does not request location, camera, microphone, contacts, or photo-library permissions. Website file uploads and camera access are not available. Link copying and system sharing happen only when you choose them. Exported protected files leave the app's protection; you and the receiving app manage those external copies.

5. Retention, deletion, and backups

Records stay on your device until you delete them, clear the space, or uninstall the app. History is limited to the most recent 1,000 entries. After unlocking, Settings lets you clear selected data in secure space. Clearing website data signs you out of websites and closes tabs. If you forget the password, you can only delete the entire protected space and create a new one. The developer cannot recover your password or data.

Android system backup and device-to-device data migration are disabled. On iOS, app records and identified website-data directories are marked as excluded from backups. System WebKit storage remains subject to platform behavior, so complete exclusion across all system versions is not guaranteed. Temporary plain-text export files are cleared on the next app launch. Resetting protected space clears its temporary export cache. Copies you save elsewhere are not deleted by these actions.

6. Contact

For support or privacy questions, contact mike.johnson2323535@gmail.com. Please do not send passwords, browsing records, or sensitive files. This address is also used by the developer's existing app support service.