Privacy.

What this website collects

The only thing the site stores is the email address you type into the mailing list form, together with the time you joined and the browser signature your browser sends with the request. It is kept in a database at Supabase, used only to send you Kestrel Browser updates and early access builds, and never sold, shared or used for advertising. To be removed, write to hello@kestrelbrowser.com from that address and it is deleted the same week.

The site sets no cookies of its own and runs no analytics or tracking scripts. It is served by Vercel, whose servers keep ordinary access logs for a short time to run the service.

What the desktop app does with your data

• Your keys are created on your device, encrypted with your password and stored only there. Kestrel Browser has no server that ever sees a key, a recovery phrase or a password.
• The app sends anonymous usage counts to kestrelbrowser.com: once a day and at the end of a session, one small document with a random install id, the app version, the operating system and its version, the language setting, and counters (tabs opened, pages loaded, Shield blocks, swaps, sends, which panels were opened, memory use, error kinds). Never a page address, a wallet address, a balance, a key or anything you typed. The switch is in the app under Report a Problem and in the menu (Send Anonymous Statistics), and the exact document about to be sent is shown there. Since v0.4 the app also keeps a record of its own incidents and sends it the same way, under the same switch: when the app freezes, when a run did not end cleanly, when a part of it panicked, when the browser engine's process failed or an update failed. Such a record carries the kind of incident and how long it lasted, the machine's state at that moment (display on or off, asleep or awake, on power or battery, whether the network answered, memory), the names of the app's own functions and of system libraries on its main thread, on Windows the file names of other programs' components loaded into the app (security software, overlays), and for a panic the file and line in our code. Never a page address, a wallet address, a balance, a key, anything you typed, or a memory dump. The app sends no crash dumps.
• To show prices, safety checks and to send your transactions, the app talks directly to public services: the Solana public RPC (api.mainnet-beta.solana.com), Jupiter (lite-api.jup.ag and api.jup.ag for prices and swaps, datapi.jup.ag for charts), Jito (mainnet.block-engine.jito.wtf), DexScreener, RugCheck, GeckoTerminal and pump.fun for market and safety data, Bubblemaps (v2.bubblemaps.io) only when you press the Bubblemap button on a Hover card or open a Desk's Holders page, where its own page opens like any other site, the CoinDesk, The Block and Decrypt news feeds in Simple mode, the public phishing blocklists of Scam Sniffer, MetaMask and Phantom on GitHub, and kestrelbrowser.com for the signed token registry. Each of those services sees your IP address and the addresses you look up, as any browser would show them. The random install id the app made for itself travels only to kestrelbrowser.com; until v0.4 it also went along with the requests to the services above, which we fixed on 2026-09-22.
• Your wallet address, your address book, tracked wallets, open tabs and the cached blocklists are files in your profile folder, readable only by your user account.

The token

Holding $KESTREL is never required for safety. Shield, transaction simulation, domain blocking and Hover checks work for everyone. Premium tiers are read from the balance of the wallet inside the app; no transaction, signature or registration is involved and nothing is sent to us.

Your rights

Ask for your email to be taken off the mailing list and deleted at any time. If you use the app, everything it stores is on your device: delete the profile folder and it is gone. Questions go to hello@kestrelbrowser.com and are answered in public whenever they concern everyone.

Changes

• 2026-09-22 (v0.4): the incident records the app keeps and sends under the statistics switch; Jupiter's second host api.jup.ag and its chart host datapi.jup.ag; Bubblemaps, opened only on your press; the install id that no longer travels to third party services.
• 2026-09-08: first version, written before the public release of the app.