Browser Privacy Policy | Brave

Brave Browser Privacy Policy

Our company does not collect or retain a user’s browsing history. Some features require us to process information like your IP address, in order to function. And sometimes, you may choose to provide us with personal data. Below we list the features that may process personal information related to you, who receives this information, and how long this information is retained.

Read this document to understand how the Brave Browser and Brave’s services use data.

Other Brave privacy notices

In this notice “we”, “us”, etc. refers to Brave Software Inc, while “Brave” refers to the browser.

Security & updates

Brave automatically checks for updates. This ensures that you always have access to the latest security fixes. We count the number and type of these requests when we receive them to produce aggregate statistics. No particular person’s information can be identified in the statistics we produce.

You can also update to the latest version here.

Brave Browser features

Safe Browsing

The Brave Browser automatically uses Google Safe Browsing to help protect you against websites, downloads and extensions that are known to be unsafe (such as sites that are fraudulent or that host malware). This service relies on storing URL hashes locally on your device. When a potentially unsafe site is visited, Google receives a partial URL hash of the site. This is necessary in order for Safe Browsing to work. The actual website address is never shared with the service provider.

On desktop, we proxy this service in order to prevent your IP address from being shared with Google.

On Android, we rely on the Safe Browsing functionality built into the operating system. Any requests to Google servers made by this component (by the Brave app or by another app) will expose your device IP address to Google.

On iOS, we use the Safe Browsing functionality provided by Safari. This functionality uses Google and Tencent Safe Browsing services depending on your region. Apple proxies requests to these services, exposing your device IP address to Apple.

Learn how to change your Safe Browsing settings.

Sync

If you enable Sync, your bookmarks, passwords and other data will be saved in an encrypted file on our cloud hosting provider (AWS). Only you have access to the decryption key, which is stored on your devices. This means it’s impossible for us to recover synced files if you lose access to your device or keys. Learn how to switch on Sync here.

Note: Unused Sync chains expire after 12 months and the associated server data may be permanently deleted after that time.

Location

If you use Brave to visit a website that tracks user location, you may be asked whether you want the website to know where you are located. If you grant permission, the website will be sent an approximation of where you are located based on your IP address and information your operating system may provide, for example, the names of nearby WiFi access points. The website may store your location. Your location is not sent to us in this process.

See data processing details.

Brave Translate

Brave browser includes a built-in translation feature for use in the desktop and Android browsers.

We use third party translation software (Lingvanex) hosted on our infrastructure to provide in-page translation. Brave does not collect the content of webpages being translated, and any text submitted to our translation server is deleted once it’s translated. We also remove IP address information associated with your requests. We do this to protect your privacy. More details on Brave Translate can be found here.

Brave News

Brave News is a private, content news reader integrated into the Brave browser.

The default content for Brave News is selected using Brave Search. You can at any time change the default content settings and choose what content you want appearing in your feed. You can also add feeds manually by subscribing directly to publishers’ content using publicly available RSS feeds.

Brave Email Aliases

Brave Email Aliases allows you to sign up for services without revealing your real email address, by generating unique addresses that forward to your primary email inbox.

Once you sign up for Email Aliases, we will store the primary email address associated with your Brave Account and any email aliases that you generate. Brave does not read the contents of these emails, except to perform standard spam and virus filtering. In case of temporary email delivery failures (e.g., if your primary mailbox is full), we will periodically try to resend the email for up to 24 hours, before deleting the message. We will never reveal emails or aliases associated with your Brave Account unless obligated to do so by a valid legal request.

Brave Rewards

If you enable Brave Rewards, we assign your Brave browser a “Rewards Payment ID”, which is used to account for Basic Attention Token (BAT) rewards you may earn for seeing Brave Private Ads. We will also ask you to select your country, which we will use to assign a country code to your Rewards Payment ID. The country code helps us ensure Ads are displayed to individuals depending on their country. We will also use the country code to help us prevent fraud. You can find your Rewards Payment ID by navigating to brave://rewards-internals.

Even with Brave Rewards enabled and a Rewards Payment ID assigned, we never collect your browsing history or similar information, and we can’t derive this information from your contributions to content creators or sites.

Connecting a custodial account

When you choose to connect a custodial account to Brave Rewards using one of our custodial partners such as Uphold, Gemini, bitFlyer (Japan only), or ZebPay (India only), three things become associated with your Rewards Payment ID: a custodian ID, deposit address(es), and a country code. All three are assigned by the custodial partner. The deposit address allows us to make deposits to your custodial account, while the country code helps us prevent fraud and limit service to users in countries where Brave Rewards is supported.

Connecting a self-custody account

When you choose to connect a self-custody account/address (such as a Solana address), your Rewards Payment ID will be associated with your self-custody address.

Cookies: As part of the process to connect your Solana address to your Rewards Payment ID, a temporary, security-related cookie will be set in your browser for one of our Rewards-related service domains. The purpose of this cookie is to protect you against cross-site forgery attacks during the connection process. The moment the cookie is done playing its role in the connection process, the cookie is immediately cleared from your browser.

Brave Ads

Like most websites, we show ads to support our mission of building an independent, user-first internet. Brave Ads work by matching relevant advertisements to you, inside the Brave Browser. In other words, your personal data never leaves your device.

When you view an ad (either via a popup notification, new tab ad, or as part of in-browser sponsored content via the offer wall), you may receive BAT as a reward, provided that you have the Brave Rewards feature enabled and a payout account connected. However, you may see Brave Ads even if you do not have Brave Rewards enabled.

If you interact with an ad on Brave Search, Brave Browser may temporarily store some data on your device to measure the performance of this specific ad. Learn more about Brave’s Search ads conversion reporting and how to disable it.

You can control which types of Brave Ads formats you see. For example, you can opt out of Brave Ads on the New Tab Page by visiting Settings > New Tab > Customize the background image and disabling them. Ads displayed within search results from Brave Search can be opted out of via enabling “Aggressively block trackers and ads” in Brave Shields.

Brave Ads privacy protections

Brave does not have access to your information, your browsing history, or any details that can be used to identify or profile you. This is by design.
We measure ad performance by receiving anonymized events for ads that you (and other users) have interacted with. In short, we cannot tell which specific Brave Ads you’ve seen or interacted with. No data that identifies you or that can be linked to you leaves your device.

Brave Wallet

The Brave Wallet is a secure crypto wallet built directly into the Brave browser. You can buy, send, store, and swap thousands of assets (and NFTs) seamlessly on 100+ blockchain networks including Ethereum, Solana, Filecoin, and more. You can learn more about ‘crypto wallets’ and the Brave Wallet here

Brave Wallet relies on third party service providers to help us read and write transactional data from various blockchains including Bitcoin, Ethereum, Solana, and others on a user’s behalf. To do this we typically need to pass wallet address(s) or transactional data to these service providers in order to help users interact with the blockchain. In certain circumstances, such as when a service is used by default, Brave proxies requests to prevent data from being connected to your IP address. By enabling Brave Wallet, you consent to relying on these services to interact with the Blockchain when necessary.

When you make a transaction using a third-party that redirects you to their services, such as an on-ramp partner, they will capture your IP address, wallet address, transaction and event data. With on-ramp services, you’ll be linked to a third-party site which may conduct identity verification checks in order to meet obligations they have under sanctions and anti-money laundering laws. You should review the privacy notices and terms of service of those third parties.

Sanctions compliance

Cryptocurrency addresses that are listed on the OFAC’s Specially Designated Nationals List (SDN list) are ineligible to participate in Brave services, including Brave Wallet. To meet our legal obligations, Brave compares cryptographic addresses to a copy of the SDN list built-in to the browser. Brave Wallet will not allow for transfers to any sanctioned addresses. We may also need to perform periodic lookbacks of past transactions to meet compliance obligations. We use a third-party provider (Inca.Digital) to perform this service on our behalf.

Brave Wallet privacy protections

Brave does not track actions that you make in your wallet.
Brave proxies and strips the IP address associated with access to the Brave Wallet.
Brave does not log transaction data.
We use anonymized and aggregated statistics collected from on-ramp partners which include regional volumes of transactions, the daily number of transactions by token/chain, daily currency volumes of transactions by token/chain, and monthly unique transactions by token/chain. We use this statistical data to understand at a high level which cryptocurrency assets are being used and on which platforms.

Brave premium services

Brave Talk

Brave Talk is a private video and/or audio conference tool. What you say or type in the service is not logged or saved. Who you talk to, when, and how, is private to you. See data processing details.

Brave Firewall + VPN

You can subscribe to Brave Firewall + VPN in two ways: via account.brave.com, or via the applicable app store for your mobile device (iOS App Store or Google Play Store). Brave Firewall + VPN is powered by Guardian, and Guardian also provides technical support for Brave’s Firewall + VPN service. To learn more about what information we use for subscriptions—and why—see our data processing details.

Brave Leo

Brave Leo AI is our privacy-first AI-powered assistant integrated into the browser. Leo offers multiple capabilities including chat, webpage summaries, tab management, writing assistance, and more. Leo is free to use with limited access. If you sign up for Leo Premium, you will have access to more models, higher usage limits, and early access to new features.

What information does Brave Leo process?

When you use Leo, Brave shares with Leo’s backend server the following information in order to complete your request:

For general chat queries: your prompt and conversation context. In some cases, Leo will send queries derived from your input to Brave Search and use the search results to better answer your question.
For web page summaries and suggested questions: the prompt and content of the page or pages you’re viewing, including any text you have highlighted on the page.
For tab management & history modes: For tab management, the titles and URLs of your open non-Private/non-Tor tabs. Tab history mode also includes the titles, URLs and text passages for matching results in your tab history.
Feedback: If you submit feedback on Leo’s responses, our servers will receive some information. See Brave Leo feedback for more details.
Privacy-preserving query analytics: To better understand the types of queries Leo AI is used for, we use STAR and Nebula to learn aggregated insights without leaking individual behavior. In addition, we only extract non-identifying metadata, such as the broad category of a user query, the language the query is written in, and the AI model used. For example, Brave may learn that a certain percentage of users engage Leo AI for creative writing, but not which users or even what they wrote.
Brave Leo Local Storage: If you have enabled chat history, your conversations with Leo AI will be encrypted and stored locally on your device. We do not save these conversations, nor do we use conversations for model training. You can disable conversation storage or clear saved chats by going to brave://settings/leo-ai. If you clear your browsing history, any associated page content in your chats will also be removed. Chat history is not available in Private Windows or Private Windows with Tor.
AI browsing (experimental): AI browsing gives your browser autonomous capabilities where it can perform tasks on your behalf. AI browsing operates in an isolated browser profile, uses alignment checking to verify intended actions and maintains Brave’s commitment to not logging or retaining your data. Learn more here.

Brave Leo privacy protections

Brave Leo includes multiple privacy protections:

We do not collect identifiers that can be linked to you (such as IP address).
We don’t store or retain prompts, responses, context, or personal data on our servers. We may cache large prompts to improve performance but these are deleted within minutes. We do not use your conversations for model training.
Conversation history is stored locally on your device.
Users do not need to create a Brave Premium account to use the free version of Leo.
If you sign up for Leo Premium, you’re issued unlinkable tokens that validate your subscription when using Premium services. Brave has no way of connecting your purchase details with your usage of Leo Premium.

Brave Search Premium

Brave Search Premium is a paid version of the core Brave Search experience. It gives users a chance to support Brave’s mission of offering independent, unbiased search. Brave Search is designed to be private by default. We don’t collect personal information about you, your device, or your searches. We also don’t transmit information to the web that could be used to profile you or track you or learn anything about you.

For more information, see the Brave Search Privacy Notice.

How we improve Brave

Diagnostic reports

When Brave crashes or freezes, it creates a report that can be sent to us to help us diagnose and fix whatever caused the problem. This report contains technical information about your computer system and the event causing the problem. The data can’t be used to identify you.

Privacy Preserving Product Analytics

The Browser sends us anonymous reports to alert us to product problems and necessary improvements. None of the information it reports can be used to identify you. The report only describes general use of the Browser or other Brave products, such as a general range of how many extensions are installed, a general range of how many tabs are open, and whether features like Shields, Rewards, and Ads are switched on.

Web Discovery Project

The Web Discovery Project is intended to make Brave Search more relevant and useful for everyone. If you opt in, you’ll contribute some anonymous data about searches and web page visits made within the Brave Browser (including pages arrived at via some, but not all, other search engines). This data helps build the Brave Search independent index, and ensure we show relevant results to your search queries and support more relevant experiences with Brave products and services.

Your feedback

We collect feedback solely for the purpose of improving our products and services, enhancing your browsing experience, answering your questions, and resolving compatibility issues. Depending on the context, this may include personal information you provide to us directly, such as your name, email address, contact information, or contents of the feedback. For more information on how we handle your personal data related to feedback and communications (including the Community Forums), please see our Brave Websites, Forums, and Email Privacy Notice.

Web compatibility reports

If you submit a Web compatibility report, you’ll have the option to include certain details to help us analyze and address compatibility issues. Providing this information is voluntary, and any data you submit will be deleted from Brave’s servers after 30 days.

Brave Leo feedback

You can voluntarily submit feedback on Leo’s responses (Brave’s privacy-first, AI-powered assistant) by clicking the thumbs-up or thumbs-down icons. This sends the rating, full text of the current conversation, language, selected AI model, version, and Premium subscription status (if any). You also have the option to include additional details and the current website to assist us in improving Leo’s responses. All submitted data will be deleted from Brave’s servers after 1 year.

Nightly, dev, and beta browser versions

Nightly, Dev, and Beta versions of the Brave Browser are experimental previews of new Brave Browser versions. They allow us to test new features so that we can find and fix errors before releasing a new version of the Brave Browser. These test versions of the Browser may automatically send crash reports to Brave so that we can identify and fix problems. A crash report can contain personal information.

Help with privacy settings in Brave

You can find guides on how to change privacy settings in Brave in the Help Center.

Contacting Brave about your personal data and privacy rights

To contact our data protection officer and privacy team with privacy related enquiries, or to exercise your data protection and privacy rights, email privacy@brave.com.

It’s Brave’s policy to not collect personal data unless it’s necessary to provide services to our users, or to meet certain legal obligations. We do not buy, sell, or share personal data about consumers.

Where we process personal data about you (subject to laws such as the EU General Data Protection Regulation (GDPR), or California privacy laws such as the CCPA or CPRA), you have the following rights:

Right to be informed: You have the right to know what personal data we process about you and why, together with information about your rights. We explain this via our product privacy policies and/or contextual privacy notices.
Right of access: Where we process personal data about you, you have the right to request a copy of it.
Right to erasure / right to be forgotten: In some cases, you have the right to ask us to erase data we have about you, or to de-list search results that contain information about you. This is commonly known as the ‘right to be forgotten’ (RTBF).
Right to rectification: You can ask us to correct inaccurate personal data and/or to update incomplete data.
Right to restriction: In certain circumstances, you can request that we refrain from processing your personal data.
Right to object: In certain circumstances, you can object to the processing of your personal data.
Right to data portability: In certain circumstances you have the right to request and receive personal data in a structured, commonly used, machine readable format.
Right to lodge a complaint with a regulatory authority: Brave is based in the USA. If you’re in the EU you can contact our nominated representative under GDPR.

We’ll update this policy whenever we make material changes to our practices, and we’ll announce it to let you know. We hope you’ll find any changes agreeable, but if you’re not comfortable with changes to the info we collect or how we use it, we understand your choice to stop using Brave.