Privacy Policy

Our Commitment to Your Privacy

At SunX Browser, privacy isn't just a feature—it's our foundation. We built SunX from the ground up with a privacy-first philosophy, ensuring that your browsing activity, search queries, and personal data remain yours and yours alone.

This Privacy Policy explains in detail what data we collect (spoiler: very little), what we don't collect, how we protect your information, and your rights under global privacy regulations including GDPR and CCPA.

We believe in radical transparency. If you have questions about anything in this policy, please don't hesitate to contact us.

Core Privacy Principles

Definitions

For clarity, the following terms are used throughout this policy:

• "SunX Browser", "we", "us", or "our" refers to the SunX Browser application and service.
• "You" or "User" refers to the individual using SunX Browser.
• "Personal Data" means any information relating to an identified or identifiable individual.
• "Browser" or "Application" refers to the SunX Browser software installed on your device.
• "Sync Account" refers to the optional account you can create to synchronize your browser data across devices.
• "Website" refers to our website at https://sunxbrowser.com.

What Data We Collect

SunX Browser is designed to collect minimal data. Here's exactly what we collect and why:

1. Crash Reports and Error Diagnostics (Optional)

When SunX Browser crashes or encounters an error, we may collect technical diagnostic information to help us fix bugs and improve stability. This includes:

• Operating system version and type
• Browser version
• Error logs and stack traces
• Hardware specifications (CPU, RAM)
• Crash timestamp

Important: Crash reports are optional and you can disable them in Settings. These reports do not contain your browsing history, search queries, or personally identifiable information. They are stored securely and deleted after 90 days.

2. Sync Account Data (Optional)

If you choose to create a sync account to synchronize your data across devices, we collect:

• Email address (for account authentication)
• Encrypted sync data: bookmarks, settings, browsing history (encrypted end-to-end before leaving your device)
• Account creation date
• Last sync timestamp

Important: All sync data is encrypted end-to-end using a key derived from your password. We cannot access, read, or decrypt your sync data. Sync accounts are completely optional—SunX Browser works fully without one.

3. Update Check Information

To deliver security updates and new features, SunX Browser periodically checks for updates. During this check, we collect:

• Current browser version
• Operating system type and version
• Anonymous request timestamp

This data is not linked to your identity and is used solely to provide you with the correct update package.

What We DON'T Collect

How We Use Your Data

The limited data we collect is used exclusively for the following purposes:

• To provide and improve the browser: Crash reports help us identify and fix bugs to make SunX more stable and reliable.
• To sync your data (if enabled): Your encrypted sync data is stored to enable synchronization across your devices.
• To deliver updates: Version information helps us provide you with appropriate security updates and new features.
• To maintain security: Diagnostic data may be used to identify security vulnerabilities and protect users.
• To comply with legal obligations: We may use or disclose data if required by law (see "Legal Disclosure" section below).

We do not use your data for:

• Advertising or marketing
• Building user profiles
• Selling or renting to third parties
• Cross-site tracking
• Behavioral analysis

Optional Sync Accounts

SunX Browser offers an optional sync feature that allows you to synchronize your bookmarks, settings, and browsing history across multiple devices.

How Sync Works

When you enable sync and create a sync account:

• All sync data is encrypted end-to-end on your device before being sent to our servers
• The encryption key is derived from your password and never leaves your device
• We cannot access, read, or decrypt your sync data—even if compelled by law
• Your email address is used solely for account authentication and recovery
• You can delete your sync account and all associated data at any time

What Is Synced

If you enable sync, the following data is encrypted and synchronized:

• Bookmarks and favorites
• Browser settings and preferences
• Browsing history (optional, can be disabled in settings)
• Open tabs (optional, can be disabled in settings)
• Saved passwords (optional, encrypted with additional layer)

Sync Account Security

• We use industry-standard AES-256 encryption
• Zero-knowledge architecture: we never have access to your encryption keys
• Optional two-factor authentication (2FA) for additional security
• Sync data is stored on secure servers with strict access controls
• Automatic deletion after 90 days of account inactivity

Security & Encryption

Security is at the core of everything we build. Here's how we protect your data:

End-to-End Encryption

All search conversations in SunX Browser are end-to-end encrypted using modern cryptographic protocols. This means:

• Your searches are encrypted on your device before being sent
• Search providers cannot see your original queries
• We cannot decrypt or access your search activity
• Third parties cannot intercept or read your searches

Phishing and Malware Protection

SunX Browser includes built-in protection against phishing sites and malware:

• We check URLs against a locally-stored database of known malicious sites
• Database updates are downloaded anonymously without revealing your browsing activity
• Warnings are displayed before you visit potentially dangerous sites
• No browsing data is sent to external servers for security checks

Secure Storage

• All local data (bookmarks, passwords, etc.) is encrypted at rest using platform-specific secure storage (Keychain on macOS, Windows Credential Manager, etc.)
• Passwords are never stored in plain text
• Browsing data is isolated from other applications on your device

No Third-Party Services

Unlike many browsers, SunX does not rely on third-party analytics, advertising networks, or tracking services. This means:

• Fewer points of potential data leakage
• No third-party cookies or trackers
• Complete control over our security infrastructure

Your Privacy Rights (GDPR & CCPA)

SunX Browser is fully compliant with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). You have the following rights:

Right to Access

You have the right to request a copy of all personal data we hold about you. Contact us at the email below to request your data export.

Right to Deletion

You can delete your sync account and all associated data at any time through the browser settings, or by contacting us. Upon deletion:

• All encrypted sync data is permanently deleted within 30 days
• Your email address is removed from our systems
• Crash reports associated with your installation are anonymized

Right to Rectification

You can update your email address and account information at any time through your sync account settings.

Right to Data Portability

You can export your bookmarks, browsing history, and other browser data at any time using the built-in export feature in Settings > Data Export.

Right to Object

You can opt out of crash reporting at any time in Settings > Privacy > Crash Reports. sync is opt-in by default.

Right to Withdraw Consent

You can withdraw consent for data collection at any time by disabling crash reports or deleting your sync account.

CCPA-Specific Rights (California Residents)

If you are a California resident, you have additional rights:

• Right to Know: We've disclosed above what categories of data we collect and how we use it.
• Right to Delete: You can request deletion of your personal information (see above).
• Right to Opt-Out of Sale: We do not sell personal information and never will.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Children's Privacy

SunX Browser does not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible.

If your jurisdiction requires parental consent for younger users (such as 16 in some EU countries), we will comply with those requirements.

International Data Transfers

SunX Browser is operated from Thailand. If you use SunX Browser from outside Thailand, please be aware that any information you provide may be transferred to and stored in Thailand.

For users in the European Economic Area (EEA) or United Kingdom, we ensure that appropriate safeguards are in place:

• All sync data is encrypted end-to-end before transfer
• We comply with GDPR requirements for international transfers
• Data is stored on secure servers with appropriate technical and organizational measures
• You maintain full control over your data regardless of location

By using SunX Browser, you consent to the transfer of data as described in this policy. You can withdraw consent at any time by discontinuing use and deleting your account.

Data Retention

We retain different types of data for different periods:

• Crash Reports: Deleted after 90 days
• Sync Account Data: Retained until you delete your account, or after 90 days of inactivity
• Update Check Information: Not stored; used only for immediate update delivery
• Deletion Requests: Processed within 30 days; data permanently deleted

We do not retain any data longer than necessary for the purposes outlined in this policy.

Legal Disclosure

We may disclose your information if required to do so by law or in response to valid legal requests from public authorities, such as:

• Court orders or subpoenas
• Law enforcement requests
• National security requirements
• Protection of our legal rights
• Prevention of fraud or illegal activities

Important: Due to our end-to-end encryption architecture for sync data, we cannot provide access to your encrypted browsing history, bookmarks, or search queries—even if legally compelled. We can only provide limited account metadata such as email address, account creation date, and last sync timestamp.

We will notify you of legal requests for your data unless prohibited by law or court order.

Links to Other Websites

SunX Browser allows you to browse the internet, which means you will encounter links to third-party websites. This Privacy Policy applies only to SunX Browser itself, not to websites you visit using the browser.

We have no control over and assume no responsibility for the privacy practices of third-party websites. We strongly encourage you to review the privacy policies of any website you visit.

SunX Browser's phishing protection may warn you about potentially malicious websites, but we are not responsible for the content or privacy practices of external sites.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make changes:

• We will update the "Last updated" date at the top of this policy
• For material changes, we will notify you via a prominent notice in the browser or by email (if you have a sync account)
• Changes become effective immediately upon posting unless otherwise stated

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

You can always find the latest version of this policy at: https://sunxbrowser.com/privacy

Contact Us

We're committed to transparency and are here to answer any questions about our privacy practices. If you have concerns, questions, or requests regarding this Privacy Policy or your personal data, please contact us:

For GDPR-related requests, please include "GDPR Request" in your email subject line. For CCPA-related requests, please include "CCPA Request" in your subject line. We will respond to all privacy requests within 30 days.