Privacy Policy

Last updated 8 October 2026

Saya Browser is a web browser that runs on your own computer. This page explains, in plain language, what it keeps on your device, what it sends over the internet, and what we (the maker, RIOT REVENGER) can and cannot see.

The short version

We do not run any servers that receive your browsing data. Saya Browser has no account, no sign-in and no sync.
Saya Browser contains no analytics, no telemetry and no crash reporting that sends data to us.
Your history, bookmarks, downloads list and settings stay on your computer.
Like any browser, it has to talk to other services to work: DNS, your search engine and the sites you open. Those are listed below.
We do not sell, rent or share personal data, because we do not have any.

1. Who is responsible

RIOT REVENGER is the developer of Saya Browser. Because the app collects nothing about you, there is no database of user data on our side. For any privacy question, open an issue at GitHub.

2. What Saya Browser stores on your computer

These files live in the app's data folder inside your Windows user profile. They never leave your computer on their own.

Browsing history: addresses and titles of pages, capped at 5,000 entries. The oldest entries are removed automatically.
Bookmarks and the list of recent downloads (names, addresses and file locations; the files themselves are in your Downloads folder).
Open tabs, window size and position, so your session can be restored next time.
Site permissions you granted or blocked (microphone, camera, location, clipboard), remembered per site.
Settings, plus your own ad-blocker rules and the sites where you paused the blocker.
Web data that websites save through the Chromium engine: cookies, local storage, IndexedDB and cache.

Saya Browser does not store passwords itself. Because this data is not encrypted by the app, anyone who can open your Windows user account can read it. Use a Windows password and disk encryption if others can access your computer.

3. What leaves your computer

Everything below happens directly between your computer and the service named. It does not pass through us.

Domain names you visit (DNS)
Goes to: Cloudflare, Google or Quad9 by default (DNS-over-HTTPS), or your system DNS
Why: To find the address of a website. Without it, nothing loads.
Your control: Settings → DNS: pick Secure, Automatic or Off, and use any DNS provider you trust.
What you type in the address bar
Goes to: Your selected search engine (DuckDuckGo by default), only while you are typing a search
Why: To show search suggestions. Things that look like web addresses are never sent.
Your control: Turn suggestions off or make them local-only in config.json (suggestions.enabled / suggestions.remote).
Your searches and the pages you open
Goes to: The search engine or website itself
Why: That is how browsing works. Those sites handle your data under their own policies.
Your control: Choose another search engine (Ctrl+E), or block trackers with the built-in ad blocker.
Ad blocker filter lists
Goes to: ublockorigin.github.io, easylist.to and raw.githubusercontent.com
Why: To download and refresh the rules that block ads and trackers. Only the lists are requested; none of your browsing is sent.
Your control: Edit the list URLs or disable the blocker in config.json (adblock.lists / adblock.enabled).

4. Browser identity

To keep websites working properly, Saya Browser presents itself to sites as a Chromium-based browser on your operating system (it sends a Chrome-style User-Agent and matching client hints). Websites can therefore see your Windows version and that you use a Chromium-based browser. WebRTC is set to avoid revealing your local network address.

5. Permissions

A website must ask before it can use your microphone, camera, location or clipboard contents, and your choice is remembered for that site only. Notifications are always blocked. You can review or reset a site's permissions from the site-info button in the address bar, or reset all of them from the menu.

6. This website

This website is a static site. It does not use cookies, advertising or analytics scripts from us. Our hosting provider may keep standard server logs (such as IP address, browser type and time of request) for security and reliability. Downloads are served from GitHub, which has its own privacy statement.

7. Third parties

These services receive data when you use the matching feature. Their own policies apply to what they do with it.

8. Your controls

Clear history from the History page, and cache, cookies and site data from Settings.
Turn off history, tab restore or remote suggestions in config.json (history.enabled, restoreTabs, suggestions.remote).
Pause the ad blocker for any site from the site-info button or the right-click menu.
Uninstalling Saya Browser and deleting its data folder removes everything it stored.

9. Your rights

Depending on where you live (for example under Indonesia's Personal Data Protection Law, the GDPR or the CCPA), you may have the right to access, correct, delete or object to the processing of your personal data. We do not hold personal data about Saya Browser users, so there is nothing for us to retrieve or erase. If you believe we hold something about you, contact us and we will look into it.

10. Children

Saya Browser is a general-purpose browser and is not directed at children. We do not knowingly collect personal data from anyone, including children.

11. Changes to this policy

If the way Saya Browser handles data changes, we will update this page and its date. Significant changes will also be noted in the release notes on GitHub.

12. Contact

Questions or requests about privacy: open an issue on GitHub.