Dazr Browser privacy notice

Last updated 5 October 2026 · For the Dazr Browser app and browser.dazr.eu.

If a translation of this page differs from the English version, the English version applies.

In short Your browsing stays on your device. The browser has no account and sends us no usage data. To work, it connects to a few services, such as our update server, encrypted DNS and blocklists; this notice lists each of them.

Who is responsible

Dazr, Viale Cesare Poggi 1, 15061 Arquata Scrivia (AL), Italy, VAT IT 02801250065, is the controller for the personal data described in this notice. For anything about your data, write to privacy@dazr.eu.

What stays on your device

Your history, bookmarks, cookies, settings, downloads and the blocklists the browser uses are stored on your computer only. We have no copy and cannot see them. You can clear them in the browser’s settings.

The browser sends no telemetry, usage statistics or crash reports, and it has no Dazr account.

Connections the browser makes

To work, the browser connects to the services below. Like any connection on the internet, each request shows your IP address to the service it goes to.

Updates. Every few hours the browser asks our server (dazr.eu) whether there is a new version. The request contains no identifier. By default a new version downloads in the background and installs when you quit the browser; you can turn this off in settings.
Encrypted DNS. To find websites, the browser looks up their addresses over DNS-over-HTTPS at dns0.eu, with Quad9 as a fallback. These services see the names of the websites you open, not what you do on them. We do not run them and do not receive their logs.
Blocklists. The browser downloads ad, tracker and phishing lists (from Ghostery’s ad-blocking project, EasyList, OpenPhish, PhishTank, URLhaus and lists published on GitHub) and checks pages against them on your device. The addresses you visit are not sent anywhere to be checked.
Your location, only when a website asks and you allow it. The browser sends the Wi-Fi networks it can see to beacondb, a European open-source location service, and passes the result to the website. If that gives no location, it asks ipapi.co for an approximate location based on your IP address.
Browser components. Like other Chromium-based browsers, the browser keeps some built-in parts up to date through Google’s update service, for example the module that plays protected video. Where your operating system has no spell checker, spell-check dictionaries are also downloaded from Google.
Search. What you type in the address bar goes straight to the search engine you chose in settings (Ecosia by default), under that search engine’s privacy policy. We do not see your searches.

Apart from update checks, these services are run by others, who are responsible for them. We have chosen them to keep these connections to a minimum.

Dazr Search (discontinued)

We used to run a search service at dazr.eu/s. It has been shut down. Older versions of the browser still send searches there, and we pass them on to Ecosia. Because the search terms are part of the address, they appear in our server logs like any other request and are deleted with those logs after 30 days. We do not use them for anything else. Updating the browser, or choosing a search engine in settings, sends searches straight to that search engine.

Visiting our websites

Server logs. Our hosting provider records each request: IP address, browser (user agent), the address requested, status and time. We use these logs to run our services and keep them secure, and keep them for up to 30 days. Legal basis: our legitimate interest in operating secure websites (Article 6(1)(f) GDPR).
Page statistics. We count page views with Vercel Web Analytics. It sets no cookies and does not store IP addresses; we only see totals, such as how often a page was viewed. Legal basis: our legitimate interest in knowing which pages people use (Article 6(1)(f) GDPR).
No advertising or tracking. Our websites show no advertising and contain no third-party trackers, pixels or social media widgets. Fonts and scripts come from our own servers.
Spam protection. Before a public form is sent, your browser solves a small calculation (proof of work). It runs on your device and sets no cookie.

When you contact us

If you use the contact form or write to one of our addresses, we receive your name, email address, company (optional), the topic, your message and the page you sent it from. The form emails your message to our inbox and a copy to you. We use it only to answer you and follow up on your request, and keep it for up to 24 months after our last contact. Legal basis: steps you ask for before a possible contract (Article 6(1)(b) GDPR) and our legitimate interest in answering questions (Article 6(1)(f) GDPR).

Cookies and storage on your device

Inside the browser, cookies are set by the websites you visit and stay on your device. Third-party cookies are blocked by default; you can clear cookies or block them per website in settings.

We use no advertising or analytics cookies, so there is no cookie banner. What we store is needed for the service or remembers a choice you made, so it needs no consent:

dazr_lang (local storage): the language you picked.
__Secure-dazr_id (cookie): keeps you signed in to Dazr Identity on the dazr.eu sites. It cannot be read by scripts and ends after 30 days, or when you sign out.
dazr_id_hint, dazr_id_ping (local storage): your name, email address and picture, so the page header can show who is signed in straight away, and a signal that keeps your open tabs in step when you sign in or out.

Service providers

These companies process personal data for us, only on our instructions and under written contracts that oblige them to protect it:

Vercel hosts browser.dazr.eu, our update server and the downloads, and counts page views.
Upstash stores the information about the latest version.
Resend sends the contact form messages and the copy to you.
GitHub stores the installers. Our server fetches them from there, so your browser does not contact GitHub to download an update.

Where your data is stored

We store personal data in the European Union. Vercel, Upstash and Resend are companies based in the United States. Where one of our providers can access personal data from outside the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses or by an adequacy decision of the European Commission.

How we protect your data

All traffic to our services is encrypted (HTTPS). The browser itself keeps your data on your device.

Your rights

You can ask us for access to your personal data, a copy in a portable format, correction, deletion or restriction, and you can object to processing based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time.

Because the browser keeps your data on your device, we usually hold nothing about you beyond server logs and any email you sent us.

Write to privacy@dazr.eu for anything you cannot do yourself. We reply within 30 days.

You can also complain to a data protection authority: in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority where you live or work.

Changes to this notice

If we change this notice, we update the date at the top. Earlier versions are available on request.

Contact

Privacy and data requests: privacy@dazr.eu
Security: security@dazr.eu
General: hello@dazr.eu
Post: Dazr, Viale Cesare Poggi 1, 15061 Arquata Scrivia (AL), Italy