OrbitX for iOS – Privacy Policy
Last updated: 17 October 2026. Applies to OrbitX Browser for iPhone (App Store version). The Windows version has its own privacy policy.
In short
OrbitX has no accounts, no analytics, no crash reporting, no advertising and no third-party SDKs. Nothing is sent to the developer, and the developer runs no server that could receive your data. In App Store terms: Data Not Collected. Your history, bookmarks, settings and passwords stay on your iPhone. OrbitX does make a few network requests on its own (filter lists, site icons, and optional features you switch on). They go directly from your iPhone to the party named below and contain no account, device identifier or usage statistics. This page lists each one.
1. Who is responsible
Ugur Berk Bozoglu, Worms, Germany (full address in the Impressum)
Email: ugurberkbozoglu@gmail.com
Because the developer receives no data from the app, there is no database of user data on the developer's side.
2. Requests OrbitX makes itself
All of these go straight from your iPhone to the named party, over HTTPS, without cookies. The other party necessarily sees your IP address, as with any web request. OrbitX does not check for its own updates; app updates come through the App Store.
| What | To whom | What is sent / when | How to stop it |
|---|---|---|---|
| Ad and tracker filter lists | The list publishers: easylist.to (EasyList, EasyPrivacy), ublockorigin.github.io (uBlock Origin lists), pgl.yoyo.org (Peter Lowe's list). Optional lists you turn on yourself, such as regional lists, come from their own public hosts. | An ordinary download of a public file. Only after you agree on first launch; if you choose to turn ad blocking off there, nothing is downloaded. Afterwards each list is checked about once a week while the app is open, and when you tap "Update now". No identifier. | Settings > Ad blocking: switch off the shield or individual lists. |
Shield scripts (resources.json): scripts that only the filter rules call and that are injected into web pages to remove ads |
GitHub (the developer's public repository, served by GitHub) | Same consent and schedule as the filter lists. GitHub may show a total download count, which identifies nobody. | Settings > Ad blocking. |
| Site icons (favicons) | The website you visited, or the icon address that website names | A request for that site's icon file when a page loads and the stored icon is older than 7 days. Fetched directly from the site, never through a third-party icon service, and without cookies. Icons seen in private tabs are shown but never saved. | Settings > Privacy and security > "Clear browsing data". |
| Search suggestions | Your chosen search engine (DuckDuckGo, Brave or Google; Startpage has none) | Off by default. If you switch them on, the text you type in the address bar is sent to that search engine. No cookies. Never in private tabs. | Settings > Privacy and security: search suggestions off. |
| News card on the start page | Only the RSS/Atom feeds you add yourself | Off by default. No request at all until you turn news on and add a source. Feeds are checked at most every 30 minutes while the start page is shown. Pictures are not loaded. Never in private tabs. | Settings > News: off. |
| Translate page | Google Translate (translate.google.com) | Only when you choose "Translate" in the menu, after a one-time confirmation. The address of the page is sent to Google, which then loads and translates the page. | Do not use "Translate". The confirmation can be withdrawn under Settings > Privacy and security (Google Translate). |
3. Websites you visit
When you open a website or search, your browser exchanges data with that site or with your search engine (DuckDuckGo by default), as every browser does. OrbitX's shield blocks many ad and tracker requests. When you download a file, the request to the file's server carries the page's cookies, so that downloads behind a login work; this is ordinary browser behaviour. What a website does with your data is governed by that website's own policy.
4. Camera, microphone and location
OrbitX only uses the camera, microphone or location when a website asks for them. You are asked for each website, and you can change your choice in the site settings. The iOS permission is requested only after you allow a website. OrbitX itself does not record, store or send this data; it goes only to the website you allowed.
5. What is stored on your iPhone
History, bookmarks, shortcuts, open tabs, settings, per-site settings, the list of downloads, site icons, filter lists and saved passwords are stored on your iPhone and are never uploaded by OrbitX. There is no sync. The app's data folder (history, passwords, downloads list, site icons, news cache, filter lists) is excluded from iCloud and device backups.
Saved passwords
Saved passwords are encrypted with AES-256-GCM. The key is created on your iPhone and kept in the iOS Keychain, available only while the device is unlocked and never leaving this device. Viewing or filling a password requires Face ID, Touch ID or your device passcode. Passwords are offered only on the exact website (origin) where they were saved. If you export a backup, the file is encrypted with a password you choose; where you keep that file is up to you. A copied password is removed from the clipboard after 30 seconds and is not shared with your other devices.
Private tabs
Private tabs do not save history, search suggestions, passwords, site icons or tabs. Cookies and site data from private tabs are kept in memory only, shared only between private tabs of the same session, and discarded when you close the last private tab. When you switch away from the app during a private session, the screen is covered so that the app switcher snapshot does not show the page. Files you download stay on your iPhone.
Deleting your data
Use Settings > Privacy and security > "Clear browsing data", or delete individual entries in History, Bookmarks, Downloads and the password vault. Deleting the app removes all of its data.
6. Legal basis and your rights
The requests in section 2 are needed to provide the features you use (Art. 6(1)(b) GDPR); the optional ones are off until you switch them on. Since the developer holds no personal data about you, requests for access, correction or deletion would normally have nothing to act on. You may nevertheless contact the address above at any time. You have the right to lodge a complaint with a data protection authority, for example the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz.
7. Children
OrbitX is a general-purpose browser and is not directed to children. It does not knowingly collect data from anyone, including children.
8. Changes
If a feature changes what is requested or stored, this page will be updated before the change is released and the date at the top will change.