OrbitX for Mac – Privacy Policy
Last updated: 23 October 2026. Applies to OrbitX Browser for Mac. The iOS and Windows versions have their own privacy policies.
In short
OrbitX is a web browser for Mac. It has no accounts, no analytics, no crash reporting, no advertising and no third-party SDKs. Nothing is sent to the developer, and the developer runs no server that could receive your data. In App Store terms: Data Not Collected. Your history, bookmarks, settings and passwords stay on your Mac. OrbitX does make a few network requests on its own (filter lists, site icons, and optional features you switch on). They go directly from your Mac to the party named below and contain no account, device identifier or usage statistics. This page lists each one.
1. Who is responsible
Uğur Berk Bozoğlu, Worms, Germany (full address in the Impressum)
Email: ugurberkbozoglu@gmail.com
Because the developer receives no data from the app, there is no database of user data on the developer's side.
2. Requests OrbitX makes itself
All of these go straight from your Mac to the named party, over HTTPS, without cookies. The other party necessarily sees your IP address, as with any web request. OrbitX does not check for its own updates; app updates come through the Mac App Store.
| What | To whom | What is sent / when | How to stop it |
|---|---|---|---|
| Ad and tracker filter lists | The list publishers: easylist.to (EasyList, EasyPrivacy), ublockorigin.github.io (uBlock Origin lists), pgl.yoyo.org (Peter Lowe's list). Optional lists you turn on yourself, such as regional lists, come from their own public hosts. | An ordinary download of a public file. Only after you agree on first launch; if you choose to turn ad blocking off there, nothing is downloaded. Afterwards each list is checked about once a week while the app is open, and when you choose "Update now". No identifier. | Settings > Ad blocking: switch off the shield or individual lists. |
Shield scripts (resources.json): scripts that only the filter rules call and that are injected into web pages to remove ads |
GitHub (the developer's public repository, served by GitHub) | Same consent and schedule as the filter lists. GitHub may show a total download count, which identifies nobody. | Settings > Ad blocking. |
| Site icons (favicons) | The website you visited, or the icon address that website names | A request for that site's icon file when a page loads and the stored icon is older than 7 days. Fetched directly from the site, never through a third-party icon service, and without cookies. These requests do not pass through the shield. In private tabs the request is still made, but the icon is not saved to disk. | Settings > Privacy and security > "Clear browsing data". |
| Search suggestions | Your chosen search engine (DuckDuckGo, Brave or Google; Startpage has none) | Off by default. If you switch them on, the text you type in the address bar is sent to that search engine. No cookies. | Settings > Privacy and security: search suggestions off. |
| News card on the start page | Only the RSS/Atom feeds you add yourself | Off by default. No request at all until you turn news on and add a source. Feeds are checked at most every 30 minutes. Pictures are not loaded. | Settings > News: off. |
| Translate page | Google Translate (translate.google.com) | Only when you choose "Translate", after a one-time confirmation. The address of the page is sent to Google, which then loads and translates the page. | Do not use "Translate". The confirmation can be withdrawn under Settings > Privacy and security (Google Translate). |
3. Websites you visit
When you open a website or search, your browser exchanges data with that site or with your search engine (DuckDuckGo by default), as every browser does. OrbitX's shield blocks many ad and tracker requests. When you download a file, the request to the file's server carries the page's cookies, so that downloads behind a login work; this is ordinary browser behaviour. What a website does with your data is governed by that website's own policy.
4. Camera, microphone and location
OrbitX for Mac does not use the camera, microphone or your location, and the app does not hold the macOS permissions for them. If a website asks for one of them, the request is declined and macOS never shows a permission prompt for OrbitX.
5. What is stored on your Mac
History, bookmarks, shortcuts, open tabs, settings, per-site settings, the list of downloads, site icons, filter lists and saved passwords are stored on your Mac and are never uploaded by OrbitX. There is no sync. OrbitX runs in the macOS App Sandbox: its data lives in the app's own container, ~/Library/Containers/com.orbitx.browsermac, and the app's data folder is excluded from Time Machine backups. Cookies and other website data are kept by WebKit, the web engine of macOS, also within that container.
Files you download are saved to your Downloads folder. Bookmark export, password backup and import from another browser use the standard macOS open and save dialogs: OrbitX can read or write only the file you pick there.
Saved passwords
Saved passwords are encrypted with AES-256-GCM. The key is created on your Mac and kept in your macOS Keychain (the login keychain). Viewing or filling a password asks you to authenticate with Touch ID or your Mac password. Passwords are offered only on the exact website (origin) where they were saved. If you export a backup, the file is encrypted with a password you choose; where you keep that file is up to you. A copied password is removed from the clipboard after 30 seconds.
Private tabs
Private tabs do not save history, passwords or tabs. Cookies and site data from private tabs are kept in memory only, shared only between private tabs, and discarded when you close all private tabs or quit the app. Files you download stay on your Mac.
Deleting your data
Use Settings > Privacy and security > "Clear browsing data", or delete individual entries in History, Bookmarks, Downloads and the password vault. Moving the app to the Trash does not by itself remove its container; to remove all data, also delete the folder ~/Library/Containers/com.orbitx.browsermac.
6. Legal basis and your rights
The requests in section 2 are needed to provide the features you use (Art. 6(1)(b) GDPR); the optional ones are off until you switch them on. Since the developer holds no personal data about you, requests for access, correction or deletion would normally have nothing to act on. You may nevertheless contact the address above at any time. You have the right to lodge a complaint with a data protection authority, for example the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz.
7. Children
OrbitX is a general-purpose browser and is not directed to children. It does not knowingly collect data from anyone, including children.
8. Changes
If a feature changes what is requested or stored, this page will be updated before the change is released and the date at the top will change.
9. Contact
Uğur Berk Bozoğlu, ugurberkbozoglu@gmail.com