Privacy policy

Redoubt, the Android browser org.redoubtbrowser, and this website. Effective 2026-10-14.

Redoubt is published by an independent developer, not by a company: one person maintains it. Contact: security@redoubtbrowser.org. This policy covers the Redoubt app on every channel it is distributed through, this website, and the download channels. What Redoubt changes compared with Firefox for Android, and its security limits, are on Privacy & limits.

In short

• The developer collects no data about you. Redoubt has no telemetry, no analytics, no crash-report upload, no advertising and no advertising identifier, and no account with the developer. Nothing the app does sends data to a server the developer runs.
• Your browsing data stays on your device unless you turn on a feature that sends it somewhere, such as Firefox Sync.
• The app does make some network connections of its own, to keep its security lists and its content blocker up to date. They are listed below with what they carry.
• This website and the download channels are hosted by GitHub and Hetzner, who see the IP address of each request. The developer does not use those records. Details in Website and downloads.

Connections the app makes on its own

These happen without you opening a website. None of them carries an identifier for you or your device, and none is answered by the developer. Like every network request, each one reveals your IP address and the time to the server that answers it.

• Mozilla Remote Settings (firefox.settings.services.mozilla.com and its download hosts): security and compatibility data such as certificate revocation lists, the add-on blocklist and the public suffix list. Answered by Mozilla.
• Add-on update checks (versioncheck-bg.addons.mozilla.org, services.addons.mozilla.org): for each installed add-on, the request names the add-on and its version, the app version, the operating system and the app language, as every Firefox-based browser does. Answered by Mozilla.
• Content-blocker filter lists. uBlock Origin is preinstalled and downloads and updates its filter lists from the sites that publish them (for example the uBlock Origin project's own hosts, EasyList and other list maintainers, and CDNs such as cdn.jsdelivr.net). The requests ask for a list file and carry no information about you.
• Update check (off by default). If you turn on Check for updates in Settings, the app fetches a small signed file from redoubtbrowser.org at most once a day while it is open. The request sends no identifier, not even the app version; the site is hosted on GitHub Pages, so GitHub sees the IP address and the time. When F-Droid installed or last updated the app, the switch is hidden and the check never runs: F-Droid tells you about updates instead.

Connections you start

• Websites you visit receive what any browser sends them. Their own privacy policies apply. Redoubt's defaults limit what they can learn: fingerprinting resistance, strict tracking protection, cookie partitioning and Global Privacy Control.
• Search. What you type into the search bar goes to the search engine you choose, when you search. Search suggestions are off by default.
• Firefox Sync is off by default. If you sign in with a Mozilla account, your bookmarks, history, passwords and open tabs are synchronised through Mozilla's servers, end-to-end encrypted, under Mozilla's privacy notice for Mozilla accounts. Signing in is your choice and you can sign out at any time.
• Add-ons you choose to install come from addons.mozilla.org. Each add-on has its own data practices.
• DNS over HTTPS, if you turn it on, sends the names of the sites you visit to the provider you pick.

Website and downloads

• This website (redoubtbrowser.org) is hosted on GitHub Pages. GitHub sees the IP address and request details of every visit, under GitHub’s own privacy statement. The pages themselves use no cookies, scripts or analytics and load nothing from any other server.
• APK downloads from the release page come from GitHub Releases, so GitHub sees those requests the same way.
• The F-Droid repository is a Hetzner Object Storage bucket in Helsinki, Finland, which the project rents from Hetzner Online GmbH. Hetzner sees the IP address and time of each request and may keep access logs; the project does not use them.
• The in-app update check, if you turn it on, requests a file from this website, so GitHub sees it like any other visit.

What stays on your device

History, bookmarks, saved passwords, cookies, site data, downloads and settings are stored in the app's private storage on your device. They are deleted when you clear them in Settings or uninstall the app; by default Redoubt also deletes browsing data when you quit it. Private tabs keep nothing once they are closed.

Device permissions

Redoubt asks for the camera, microphone or location only when a website requests them, and only after you allow it for that site. The browser passes what you allow to that website and to nobody else. Notifications are used for downloads and media playback. Redoubt can see which other apps are installed so that it can open links in them and offer them for sharing; that list never leaves the device.

Children

Redoubt is a general web browser and is not directed at children.

Changes and contact

Changes to this policy are published on this page with a new effective date, and the history is public in the source repository. Questions about privacy can go to the project's issue tracker, or by e-mail to security@redoubtbrowser.org for anything you would rather not post publicly; Security describes private reporting.