Privacy Policy

1. Controller

BrowserWorks Ltd (registered office: 4th Floor Fitzrovia House, 153-157 Cleveland Street, London, W1T 6QW, United Kingdom; hereafter "BrowserWorks", "we", "our") acts according to the United Kingdom General Data Protection Regulation (UK GDPR) as well as further valid data protection regulations as a controller. You can reach us at the following correspondence address:

BrowserWorks
Suite 140, 372 Old Street, London, EC1V 9AU
United Kingdom

Email: privacy@browser.works

2. Data we process and why

We don’t keep logs of your search terms or results. Our service providers process technical information needed to operate and secure their services.

When you sign in, Clerk processes your IP address, device details, activity times, and approximate location for authentication and security. These records are separate from the search usage information described below.

2.1 Cookies and browser preferences

Authentication cookies keep you signed in securely. First-party cookies also remember your language and web search provider. These preferences support the choices you request, not a record of your searches.

• Your search provider preference contains your choice, not your search terms or account ID
• Language and search provider cookies expire after one year unless renewed
• Your browser remembers your theme and link-opening preferences until you change or clear them

You can clear cookies and saved preferences through your browser settings. Blocking sign-in cookies can prevent account features from working. We use this information to provide the service and remember your choices, and for our legitimate interest in security (Article 6(1)(b) or (f) GDPR).

2.2 Correspondence and support

When you contact us, we process your email address and message to answer your request. This includes privacy requests, even if you have no account. Avoid sending search queries or sensitive information unless your request requires them.

Contract performance or our legitimate interest in answering enquiries supports this processing (Article 6(1)(b) or (f) GDPR). Legal obligations can require us to retain particular records (Article 6(1)(c) GDPR). Section 6 explains the retention criteria.

2.3 Search queries and suggestions

Serper or Staan supplies web results according to your choice. Serper supplies image, video, and news results. We send the selected provider your search terms and relevant settings:

• Result type, country, and results page
• Date range and spelling correction preferences
• Websites you’ve blocked from your results

We use your selected country or an approximate country supplied by Cloudflare. We don’t send search providers your account details or IP address. Your search terms may contain personal information you enter.

Google supplies suggestions on our website, and Microsoft Bing supplies suggestions through our browser address-bar suggestion service. Your browser connects to our server, which requests suggestions from the relevant provider on your behalf. That provider receives your typed search terms and our server’s IP address. We do not send either provider your IP address, account details, cookies, referrer, or browser user-agent. Your typed terms may contain personal information you enter. You can turn off address-bar suggestions in your browser settings.

Your browser history may contain search terms and settings from search page addresses. We save your blocked websites and when you last changed them with your account. We fetch result images and website icons without sending your account ID or search terms to their hosts. We process this information to provide the results and suggestions you request (Article 6(1)(b) GDPR).

2.4 Accounts, sessions, and payments

Clerk manages your account profile, sign-in records, subscription, and related account information. Stripe processes your payment information. We don’t store full payment card details on our servers.

We process these records to administer your subscription (Article 6(1)(b) GDPR). Our legitimate interests in account security and resolving disputes also support processing (Article 6(1)(f) GDPR). Accounting and other legal obligations can require further processing (Article 6(1)(c) GDPR).

2.5 Search usage

We record how often and when your account uses search to monitor usage and help detect abuse. These usage records don’t include your search terms or results. We retain them for three months.

Our legitimate interest in protecting the service is the legal basis for this processing (Article 6(1)(f) GDPR).

3. Service providers and recipients

The following providers process data for the purposes described above:

• Cloudflare: hosting, security, saved blocked websites, search usage monitoring, and result images
• Clerk: account information, sign-in security, and subscription management
• Stripe: payments and related transaction administration
• Serper and Staan: search results; Google Suggest: website suggestions; Microsoft Bing: browser suggestions
• Email and support providers: correspondence and privacy requests

Contract performance, the stated legitimate interests, or applicable legal obligations support these disclosures (Article 6(1)(b), (f), or (c) GDPR). Providers can have their own processing responsibilities, particularly for payments and direct browser requests. Contact us for information about recipients relevant to your data.

4. International transfers

Providers may process data outside the United Kingdom and, where relevant, the European Economic Area. Processing locations and transfer safeguards depend on the provider and service contract. Contact us for details of applicable safeguards and how to obtain a copy.

Restricted transfers require a lawful transfer mechanism. This can include an applicable adequacy decision or appropriate contractual safeguards, with additional measures where needed. Relevant contractual safeguards include UK transfer agreements or addenda and European Union standard contractual clauses.

5. Providing personal data

You choose whether to use the service or contact us. Account, authentication, and payment information is necessary for subscription access. Without it, we can’t supply those features. Avoid entering unnecessary personal information in searches.

6. Retention periods and criteria

The table below explains how long we keep your data. Legal obligations or disputes may require longer retention of some records, such as billing information.

You can ask us to delete other personal data. We assess your request under applicable law and explain any records we must keep. If we rely on your consent, you can withdraw it without affecting earlier lawful processing.

7. Your data protection rights

The UK General Data Protection Regulation (UK GDPR) and, where applicable, the European Union GDPR give you these rights. Their legal conditions and exceptions apply:

• Access to your personal data and information about processing
• Rectification of inaccurate personal data
• Erasure and restriction of processing
• Objection to processing based on legitimate interests
• Data portability where applicable
• Withdrawal of consent without affecting earlier lawful processing

You can download your account data in Settings → Security. You must sign in and may need to verify your identity again. The download includes available records of:

• Your profile, account information, sign-in activity, and subscription
• Your blocked websites
• Your search usage
• Your payment methods and billing information
• Preferences saved in the browser you use for the download

For security, the download excludes passwords and sign-in secrets. It also excludes other people’s data. The file explains any missing or incomplete information. Your usage records may not include every search.

The download does not replace your right to request access to all your personal data. Other records, such as correspondence or records held by providers, may need a separate review. Contact us to request these records, information about their processing, or to exercise another right.

We may ask for information to confirm your identity if necessary to protect your data. We don’t routinely require a copy of your identity document. We respond without undue delay and within one calendar month, subject to applicable legal rules. If the law allows an extension, we explain why within the original deadline.

You can make a privacy request even if you no longer have an account. We review records we can reasonably identify as yours, including correspondence and billing records.

8. Complaints to a supervisory authority

You can contact us about privacy concerns or complain directly to a competent supervisory authority. You do not need to complain to us first. In the UK, you can contact the Information Commissioner’s Office (ICO).

Where the European Union GDPR applies, you can complain to an EU supervisory authority. This includes the authority in your country of habitual residence, work, or the alleged infringement.

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

9. Changes to this privacy policy

We may update this Privacy Policy from time to time. The latest version is available on our website.

10. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@browser.works