Privacy Policy

1. What we collect

Depending on how you use OFF, we may process:

• Account data — email address, password hash (we do not store your password in plain text), account identifiers, plan and subscription status, and related account metadata.
• Device and security signals — device or install identifiers / fingerprints used to limit abuse (for example, free-account limits), session tokens, approximate login IP and coarse geolocation derived from network headers, and timestamps of sign-in or security events.
• Product and support data — messages you send to support, and technical logs needed to operate or debug the service.
• Payment data — if you buy a plan, payment processors may collect card or crypto payment details. We receive payment status and related identifiers from processors; we do not store full card numbers on OFF servers.
• Website data — standard server or CDN logs (IP, user agent, pages requested) and cookies / similar technologies as described below.

Profile contents you create in the application (for example browser or phone profile data) may be stored encrypted under your account when cloud sync is enabled. We design cloud storage so that ciphertext is held in our infrastructure; you remain responsible for keys and local security as described in product documentation.

2. Cookies and similar technologies

We use first-party cookies (and related local storage) on the OFF website for purposes that websites commonly need, including:

• Authentication and session — to keep you signed in where appropriate and to reflect logged-in state in the UI (account tokens are handled via our auth flow; cookies support session continuity and preferences such as “remember me”).
• Device and security — a device identifier and a CSRF / anti-forgery token to help protect forms and accounts, limit abuse (including free-account device limits), and detect suspicious reuse of the site.
• Consent — to remember that you accepted cookies so we do not show the banner on every visit.
• Usage patterns — light first-party signals (for example visit counts and last path) to understand how pages are used and to improve the site. We do not sell this data.
• Preferences — optional settings that make the site work as you expect across pages.

When you visit, a cookie banner explains these uses and links to this Policy and the Terms of Use. By clicking “Accept” (or equivalent) or continuing to use the site after notice, you agree to our use of cookies as described here, subject to rights you may have under applicable law. Essential security and consent cookies may be set as needed to operate and protect the site.

3. Why we use data

• to create and authenticate accounts, and to provide the Software and cloud features;
• to enforce plan limits and prevent abuse (including multi-accounting controls);
• to send transactional email (verification, security alerts such as new-device sign-in, password reset);
• to process payments and subscriptions via processors;
• to respond to support requests and improve reliability and security;
• to comply with law and protect our rights.

Where required by applicable law, we rely on contract performance, legitimate interests (security, fraud prevention, service improvement), consent (where we ask for it), or legal obligation.

4. Sharing

We may share data with:

• infrastructure providers (hosting, email delivery, databases, object storage);
• payment and AML processors when you pay;
• professional advisers or authorities when required by law or to protect rights;
• a successor in a merger, acquisition, or asset sale, subject to appropriate safeguards.

We do not sell your personal data.

5. Retention

We keep account and security records for as long as your account is active and for a reasonable period afterward for security, dispute, and legal purposes. Logs may be retained on shorter rotating schedules. You may request account closure via support@offbrowser.com; residual copies may remain in backups for a limited time.

6. Security

We use technical and organizational measures appropriate to the risk (access controls, encrypted transport, hashed passwords, session controls). No method of transmission or storage is perfectly secure.

7. International transfers

Our providers may process data in multiple countries. Where required, we use appropriate transfer mechanisms offered by those providers or required by law.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, to object to certain processing, and to data portability. You may also complain to a supervisory authority. To exercise rights, email support@offbrowser.com.

9. Children

The Software is not directed to children. We do not knowingly collect personal data from children under the age required by applicable law for consent to online services.

10. Changes

We may update this Policy by posting a revised version with a new “Last updated” date. Continued use after changes means you acknowledge the updated Policy, except where consent is required by law.

11. Contact

Privacy questions: support@offbrowser.com.