Privacy Policy

Last updated: October 13, 2026

WarpX is built so that your browser profiles stay on your own computer. This policy explains the limited information we do handle, why we need it, and the choices you have.

This policy applies to the WarpX desktop application (the “App”), the websites at warpx.app and account.warpx.app, and the licence service the App connects to (together, the “Services”), all operated by WarpX (“WarpX”, “we”, “us”). By using the Services you acknowledge this policy. If you do not agree, please do not use the Services.

1. Summary

• Your browser profiles, cookies, browsing data, proxies, fingerprints, workflows and extensions are stored on your computer, not on our servers.
• Our servers keep only what is needed to run your account and licence: your name, email address, the computers you link, your plan, your invoices, and usage counts such as how many profiles you have.
• If you connect Google Drive, the App talks to Google directly from your computer. Your Google data never passes through or is stored on WarpX servers.
• We do not sell personal information or show ads. Our websites can measure visits and our ads with Google Analytics, the Meta Pixel and the TikTok Pixel — only if you allow it in the cookie banner (see sections 2 and 7). The App uses none of them.

2. Information we collect

Account information. When you create an account we collect your name, your email address and a password. We store only a secure hash of the password, never the password itself. We also record whether your email is verified, your account status, and when the account was created and last changed.

Website sessions. When you sign in to account.warpx.app we create a session and record the IP address and browser user agent it was created from, so you can see and sign out your active sessions and so we can detect suspicious sign-ins.

Linked devices. When you link a computer to your account, the App sends the computer's name (its hostname, which you may have set to your own name), its operating system, the App version, and public cryptographic keys generated on that computer. The matching private keys never leave your computer. The server may also receive one-way hashed technical identifiers of the device, which are used to recognise the same computer again and to prevent abuse of plan limits. The raw identifiers are not sent. We record when each device was first and last seen, and whether it has been signed out.

Licence and usage records. To apply your plan's limits we keep your plan and its expiry date, the licences issued to your devices, and a record of each profile's creation and deletion (an identifier, status and timestamps). While a device is linked, the App checks in with our licence service periodically and reports usage counts: how many browsers are running, and how many times profiles were created or deleted, fingerprints generated, browsers launched or closed and automations run. We do not receive profile names, settings, cookies, browsing history, visited addresses, proxy details or anything describing what a profile is used for.

Payment information. Payments are made in USDT on the TRON network. For each invoice we keep the plan, period, amount, the deposit address generated for that invoice, and the blockchain transactions received for it (transaction hash, amount, confirmations and time). We do not collect card or bank details. Blockchain transactions are public by nature and can be seen by anyone on the network they were sent on.

Messages you send us. When you use the contact form or email us, we receive your name, email address, the topic and your message. The contact form also includes your IP address with the message and uses it to limit spam.

Security and service logs. Our servers keep records of security-relevant events (such as sign-ins, password changes, device linking and sign-out) and standard technical logs, which may include IP addresses, timestamps and request details.

On our websites, if you allow it. warpx.app and account.warpx.app load measurement tools through Google Tag Manager, a Google service. A cookie banner asks first, and nothing below runs until you choose:

• Analytics — Google Analytics 4: the pages you view and how you reached them, your browser, device and language, and an approximate location derived from your IP address.
• Marketing — the Meta Pixel and the TikTok Pixel: that you visited after seeing one of our ads on Facebook, Instagram or TikTok, and actions such as signing up, so we can tell which ads work and show them to people likely to be interested. Meta and TikTok may link this to an account you have with them.

With both refused, Google Tag Manager still loads but these tools set no cookies and send nothing about you. You can change your choice at any time with Cookie settings at the foot of each website. These tools see the websites only — not the App, your browser profiles or anything inside them.

What we do not collect. The App does not use analytics, advertising or tracking tools, and does not send us crash reports or any record of what you do inside your profiles. The usage counts described above are the only product usage information we receive from the App.

3. Data that stays on your computer

The App stores the following locally, in its data folder on your computer: browser profiles and their cookies, local storage and history; fingerprint settings; proxies and their credentials; groups, tags, notes and bookmarks; installed extensions; automation workflows, schedules, tables, variables and credentials; and backups you create. Sensitive values such as proxy passwords and your sign-in tokens are stored encrypted, using your operating system's secure storage where it is available. Backup files you create are not encrypted, so keep them somewhere safe. This data is not uploaded to WarpX servers. You are in control of it, including backing it up and deleting it.

To do what you ask, the App connects to services other than ours, for example:

• the proxies you configure, and the websites you open in your profiles;
• IP information services (such as api.ipify.org, ip-api.com and ipwho.is), reached through a profile's proxy, to check that the proxy works and to match the profile's timezone and location to it;
• the Chrome Web Store, Firefox Add-ons or another address you provide, when you install an extension, and GitHub, when the App downloads a browser engine;
• Google, if you choose to connect Google Drive (see section 4).

Those services receive what any such request carries, such as the proxy's IP address, and handle it under their own privacy policies.

4. Google user data

The App lets you connect your own Google Drive, optionally, so that WarpX can keep backup and sync files for you in storage you control. This section explains exactly how that works.

What we access. When you connect, you sign in with Google and grant these permissions:

• https://www.googleapis.com/auth/drive.file — lets the App create files and folders in your Drive and access only the files and folders the App itself created. It cannot see, read or change any other file in your Drive.
• openid and email — your Google account's email address, shown in the App so you can see which account is connected.

How we use it. The App creates a folder named “WarpX” in your Drive and uses it to store, list, download and remove the backup and sync files that you ask the App to keep there. Your email address is used only to display the connected account. Google user data is used only to provide this feature to you, at your request.

How it is stored. The connection is made directly between the App on your computer and Google. The access and refresh tokens and the connected email address are encrypted with your operating system's secure storage and saved only on your computer; if secure storage is not available, the App does not save them. No Google user data, including tokens, email address and file contents, is sent to or stored on WarpX servers, and WarpX staff cannot access it.

Sharing. We do not share, transfer, sell or disclose Google user data to anyone. We do not use it for advertising, and we do not use it to develop, improve or train artificial intelligence or machine learning models. No human at WarpX reads it.

Retention and deletion. The connection stays on your computer until you disconnect. When you choose Disconnect in the App's settings, the App deletes the stored tokens and connection details from your computer and stops accessing your Drive. To also withdraw the permission you granted, remove WarpX from your Google Account at myaccount.google.com/permissions; if you do, the App deletes its stored connection the next time it tries to use it. The “WarpX” folder and its files remain in your Drive, where you can delete them at any time.

WarpX's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we use information

• to create and run your account, sign you in, and recover access when you forget your password;
• to link your devices, issue licences and apply your plan's limits;
• to create invoices, detect your payments on the blockchain and activate your plan;
• to answer your messages and provide support;
• to keep the Services secure, including detecting and preventing fraud, abuse, account sharing beyond plan limits and violations of our Terms of Service;
• to send you service messages, such as password reset emails (we do not send marketing emails);
• to comply with legal obligations and enforce our agreements.

We process information because it is necessary to provide the Services you asked for, for our legitimate interests in keeping them secure and working, to comply with the law, or with your consent (for example, when you connect Google Drive). You can withdraw consent at any time.

6. How we share information

We do not sell or rent personal information. We share it only as follows:

• Service providers who help us run the Services under confidentiality obligations: our server hosting provider; Cloudflare, which carries traffic to our websites and protects them from attacks; our email provider (Google), which delivers service emails and contact form messages; and a blockchain data provider for each network we accept (TRON and BNB Smart Chain), which we query with invoice deposit addresses to detect payments.
• Measurement and advertising partners, only if you allow them in the cookie banner: Google (Google Tag Manager and Google Analytics), Meta (the Meta Pixel) and TikTok (the TikTok Pixel). They receive information about your visits to our websites as described in section 2 and handle it under their own policies: Google, Meta and TikTok. Meta and TikTok may use it for their own purposes too, such as improving their ads.
• Legal reasons, when we believe in good faith that disclosure is required by law, a court order or a lawful request from authorities, or is needed to protect the rights, property or safety of WarpX, our users or others.
• Business transfers, if WarpX is involved in a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.
• With your consent, or at your direction.

7. Cookies and similar technologies

account.warpx.app uses a strictly necessary session cookie to keep you signed in. Both websites remember your light or dark theme choice in your browser's local storage. Cloudflare may set strictly necessary cookies to protect the websites from abuse. A strictly necessary warpx_consent cookie, on both websites, remembers what you chose in the cookie banner for 180 days, after which we ask again.

Only if you allow them: analytics cookies from Google Analytics (such as _ga and _ga_*, kept up to two years), and marketing cookies from the Meta Pixel (such as _fbp, about three months) and the TikTok Pixel (such as _ttp, about a year). Refusing them loses nothing on the websites. You can change your choice with Cookie settings at the foot of each website, block or clear cookies in your browser, and opt out of Google Analytics everywhere with Google's browser add-on. If you remove the session cookie you will be signed out.

8. How long we keep information

• Account, device and licence information: for as long as your account exists.
• Website sessions: until they expire or you sign out. Password reset links expire after a short time.
• Invoices and payment records: for as long as accounting, tax and other laws require, including after your account is deleted.
• Security and service logs: generally up to 12 months, unless needed longer to investigate abuse.
• Support messages: for as long as needed to handle your request and keep a record of it.

When you delete your account, we delete or anonymise your personal information within 30 days, except for what we must keep for the reasons above.

9. Security

We protect information with measures appropriate to its sensitivity, including encryption in transit (HTTPS), hashed passwords, device credentials based on public-key cryptography, licence signing keys held in a dedicated secrets store, and access limited to those who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep your computer secure, since the data in the App lives there. If we become aware of a breach affecting your personal information, we will notify you and the authorities as required by law.

10. Your rights and choices

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy of it;
• correct inaccurate information;
• delete your account and personal information;
• restrict or object to certain processing, and withdraw consent;
• receive your information in a portable format;
• complain to a data protection authority.

You can update your name and password and sign out sessions and devices yourself at account.warpx.app. For any other request, including deleting your account, email us at [email protected] from the address on your account. We may need to verify your identity, and we will respond within 30 days. We will not discriminate against you for exercising these rights.

We process personal information in accordance with applicable data protection laws, including the personal data protection laws of Vietnam and, where they apply to you, laws such as the EU and UK General Data Protection Regulation and US state privacy laws.

11. International transfers

Our servers and service providers may be located in countries other than yours. When we transfer personal information across borders, we take steps required by applicable law to protect it.

12. Children

The Services are not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, notify you by email or in the App before they take effect. We will not use Google user data in a new way without first asking for your consent.

14. Contact us

Questions or requests about this policy or your information: email [email protected] or use our contact form.