Skip to content
Zephium
70Download

Privacy

The short version: the browser collects nothing about how you browse, your data stays on your device, an account is optional, and this website counts page views without knowing who you are.

Effective October 19, 2026

This policy covers the Zephium browser and the website at zephium.app. Zephium is open source, so every statement about the browser below can be checked against its source code.

The browser collects nothing

Zephium has no telemetry, no usage analytics and no crash reporting that sends data on its own. We do not receive your browsing history, your searches or anything you do in the browser. You never need an account to browse, to use your own API key or to run a model on your computer, and until you sign in, the browser does not contact Zephium's servers at all.

Your data stays on your device

History, open tabs, tasks, notes and activity are stored locally, on your computer, in the profile they belong to. Profiles are kept apart from one another. You can delete any of this data at any time from within the browser or by removing your profile.

Models and keys

Work features use a model you choose. With your own API key for a provider such as OpenAI, Anthropic, Google, xAI, Mistral or DeepSeek, requests go directly from your device to that provider and your key is kept in your system keychain. With a model running locally, nothing leaves your device.

Before anything is sent to a model, Zephium shows you which pages and notes are included and why. What the provider does with that data is governed by your agreement with them, so review their terms for the provider you use.

Your account

An account is optional and is only needed for Zephium AI, our hosted models. Until you sign in, the browser does not contact our servers at all.

If you create an account, we keep:

  • your email address, to send you sign-in codes. There is no password;
  • the devices and sessions signed in to your account, each named only by the app version and operating system, such as “Zephium 1.0 · macOS”, so you can see them and sign them out;
  • your plan and billing status, as Polar reports it;
  • usage records, without any content: which model was used, how many tokens, what it cost and when;
  • the security and abuse-prevention records needed to run the service, such as rate limits.

The sign-in token stays in your system keychain on your device. You can sign out any device, and delete your account, from Settings → Account.

Zephium AI

When you use Zephium AI, your prompts and the pages, files and audio they include, such as voice input for transcription, pass through our servers to the model provider that answers them, such as OpenAI or Anthropic, and the answer comes back the same way.

Our servers do not store prompts, answers, page content, images or audio. How long the model provider keeps what it receives depends on that provider's settings and its agreements with us, and is governed by its own terms and privacy policy.

We do not yet state fixed retention periods for the account and usage records above. When we set them, this page will say how long each is kept.

Deleting your account

You can delete your account in Settings → Account. Deleting it signs out your devices and removes your account data. Some records are kept, and these are the ones:

  • To stop repeated sign-up allowances, we keep a keyed (hashed) record derived from your email address. It is not your email address, and it contains no browsing content.
  • Billing and tax records are kept for as long as Polar and the law require.
  • Aggregate cost records, which contain no content, are kept.

Deletion finishes in the background, and some records may take time to clear from systems and backups. If you have a question about your data, write to [email protected].

Payments

Paid plans are sold by Polar, which acts as the merchant of record: it runs checkout, holds your payment details, and issues invoices and receipts under its own privacy policy. We never see or store your card. Polar tells us which plan you bought and whether it is active.

Who helps us run it

Zephium is currently operated by Hayk Injighulyan, an individual based in Armenia.

These companies process data for us:

  • Polar, the merchant of record, for payments;
  • Resend, for sign-in emails. It receives only your email address and the code;
  • Hetzner, where our servers run;
  • Cloudflare, for DNS on our domains. The website is served through Cloudflare's proxy, which processes visitors' IP addresses and request details. Zephium AI traffic is not routed through Cloudflare's proxy today;
  • the model providers that answer Zephium AI requests, such as OpenAI and Anthropic.

Blocking ads and trackers

The built-in blocker uses the EasyList and EasyPrivacy filter lists. A copy ships with the browser and updates are downloaded from their publishers. Blocking decisions happen on your device; the pages you visit are not reported to anyone.

Downloads and updates

Installers and updates are served from GitHub Releases. When you download a build or the browser checks for an update, GitHub receives your IP address and the usual request details, under GitHub's privacy statement.

Websites you visit

Sites you open in Zephium can see what any site sees in any browser, such as your IP address. Their handling of your data is covered by their own policies.

This website

zephium.app is a static website. It sets no cookies and uses no third-party trackers or advertising. We count page views with a self-hosted, cookieless instance of Umami: it counts visits, pages and referrers without storing personal data and without following you across other sites. It does not record query strings. The page that checkout and the billing portal return to loads no analytics at all.

This is separate from the browser, which has no telemetry. Visiting this website tells us nothing about how you use Zephium.

Like any web server, ours keeps short-lived access logs, including IP addresses, for security and to keep the service running. These logs are deleted after a short period and are never sold or shared.

Children

Zephium is not directed at young children. You must be at least 13 to create an account. The browser collects no personal data, and an account holds only what is listed above.

Changes

If this policy changes, we will update this page and its effective date. Because the browser is open source, any change to what it does is also visible in its public history.

Contact

Questions about privacy go to [email protected].