The short version
- Your profile names, notes, cookies, browser storage and proxy details stay on your computer, unless you turn on workspace sync, which uploads them encrypted.
- The browser engine never connects to us.
- The app talks to us to sign you in, check your plan, download the engine and updates, and, if you leave them on, send crash reports.
- This website runs no analytics. The only cookie keeps you signed in.
- We don’t sell your data or use it for advertising.
Who is responsible
Data controller: BLACKBIRD SECURE BROWSING LTD · Company number 13404707 · Registered address: 41 Devonshire Street, Ground Floor, London, United Kingdom, W1G 7AJ. We are registered with the UK Information Commissioner’s Office (registration number ZC230288).
Privacy and data-rights requests: support@ant0.link. Account support: support@ant0.link. Security reports: security@ant0.link.
For team workspaces, the workspace owner decides whom to invite, and we process team members’ data for them under our Data processing terms.
What the app and website send, and why
| What | Data | Why (legal basis) | Can you turn it off? |
|---|---|---|---|
Engine download and update checks (releases.ant0.link) | Normal web request details, including your IP address, the file or version, your platform and the time. | To provide the Service (contract) | Update checks: Settings → Privacy. The engine download is needed to run profiles. |
Preview engine downloads (api.ant0.link) | Version, platform, and your computer and workspace IDs. | Contract | Only for preview builds. |
Sign-in and sessions (api.ant0.link) | Email, password (we store only a hash), your platform, app version, your computer’s name, a computer ID and its public keys. Each session records its IP address and browser details. | Contract | Needed to use an account. |
| Two-factor authentication | Your authenticator secret, stored encrypted. | Contract | Optional. |
Sign-up security check (verify.ant0.link, Cloudflare Turnstile) | Normal request and challenge data seen by Cloudflare. The result is used once and not stored. | Preventing abuse (legitimate interest) | Needed to create an account on the web. |
Profiles linked to your account (api.ant0.link) | Profile ID, identity key and browser and platform hints; we store the identity we issue. | Contract | Needed for account profiles. |
Hourly plan check (api.ant0.link) | How many profiles are running, app and engine versions, integrity checks, computer and workspace IDs, your IP address and its country. | Contract and preventing misuse (legitimate interest) | Runs while you are signed in. |
Workspace sync (api.ant0.link) | Profile contents, encrypted on your computer first; we can’t read them. We can see workspace, profile and folder names, member emails and roles, invitations, transfers, sizes and version numbers. | Contract | Optional, per profile. |
| Team workspaces | Members’ and invitees’ emails, roles and folder access. | Contract | Only if you use Team. |
| Billing | Invoices: plan, amount, dates, payment provider, payment status, and your choice at checkout about the 14-day cancellation right. | Contract and legal obligation | Only for paid plans. |
| Your account activity page | Your sign-ins (with IP address and platform), security changes and API keys. | Security (legitimate interest) | Shown only to you. |
| API keys | Key names, access level, expiry and when they were last used. | Contract | Only if you create keys. |
| Security flags | When an automatic check flags an account, for example more computers than its seats allow or a failed integrity check: what triggered it and when. | Preventing misuse (legitimate interest) | Runs while you are signed in. |
Proxy checks (ip.ant0.link; api.ipify.org and ip-api.com only if ours is unreachable) | The check goes through your proxy, so it shows the proxy’s IP address. ip.ant0.link keeps no logs. | Contract | Runs only when you add or check a proxy. |
Proxy location database (releases.ant0.link) | A normal download request, not through your proxy. | Contract | Refreshed only when needed. |
Crash reports (errors.ant0.link) | The error and where it happened, app version, operating system and computer details, the screen you were on, your theme, and errors from the background service. Error notices you see are reported the same way. We remove tokens, proxy passwords, file paths and email addresses from reported errors, but some identifiers or text you typed may remain. | Fixing faults (legitimate interest) | Settings → Privacy. On by default and shown at first run. |
Account page errors (errors.ant0.link, through ant0.link) | When the account pages hit an unexpected error: the error type and message, the page and your language. We remove email addresses, tokens and query strings, and never send your IP address, cookies or what you typed. | Fixing faults (legitimate interest) | Sent only when something breaks. |
We use this data only to run, secure and improve the Service. We don’t build profiles of you or share your data with anyone for their own purposes.
Website storage
This website runs no analytics or tracking. When you sign in, we set one cookie that keeps you signed in for up to 30 days. It is needed for sign-in, can’t be read by the page, and is removed when you sign out. We set no other cookies. The banner at the top of the site remembers when you close it, the home page remembers which of its illustrations you saw last, and the language switch remembers your choice (local storage). All of these are strictly necessary for what you asked for.
Who else processes data
| Provider | What for | Data it sees |
|---|---|---|
| Cloudflare | Carries traffic to our websites and account service, the sign-up security check, and our incoming email | Requests to our sites (including IP addresses) and emails sent to our addresses |
| Resend | Sends our emails (codes, sign-in alerts, billing, team invitations) | Recipient address and message content |
| NOWPayments | Crypto payments, if you choose it | Invoice reference and amount, and what you enter on its page |
Our servers, our Bitcoin payment page (pay.ant0.link), crash reports, file storage and backups are
run by us. Data is stored in: United Kingdom and United States. Where a provider handles data outside the UK, we use
the UK’s approved transfer safeguards (the International Data Transfer Agreement or the UK Addendum
to the EU Standard Contractual Clauses).
How long we keep it
| Data | How long |
|---|---|
| Profile data on your computer | Until you delete it. |
| Your account | While you use it, or 24 months after your last sign-in for a Free account (we email you 30 days before). |
| Data for a paid workspace whose plan lapsed (issued identities, synced profiles, sync keys) | 12 months after the plan lapses, then deleted. We email you 30, 7 and 1 days before. |
| Sessions and plan-check records | 12 months. |
| Activity and security records, security flags | 24 months. |
| Billing records | 6 years (UK tax law). |
| Crash reports and account page errors | 90 days. |
| Backups of the account database | Nightly backups are kept for up to 14 days, then deleted automatically. The five most recent backups taken just before a service update are also kept until newer ones replace them. Backups exist only to restore the service after a failure. |
Your rights
You can ask us to access, correct, export or delete your personal data, and to object to or restrict how we use it. Email support@ant0.link. We may need to confirm it’s your account, and we reply within one month.
Sign-in and security records, including the IP addresses in them, are kept for their normal 24 months to protect accounts and prevent abuse, then deleted.
You can also complain to the UK Information Commissioner’s Office at ico.org.uk.
Data breaches
If a breach puts your data at high risk, we tell you without undue delay, and we report it to the ICO where the law requires.
Age
The Service is not for anyone under 18.
Changes
We announce material changes by email and on this page at least 30 days before they apply. The “Updated” date above shows the last change.