Privacy policy

Your history, open tabs, bookmarks, downloads, and hidden elements stay on your Mac. We do not send them to a server. The lists below say what Satori keeps on your Mac and what it sends over the network.

• Passwords, in the login keychain, as internet passwords labeled Satori.
• History, open tabs, bookmarks, downloads, hidden elements, and the session, as files encrypted with AES-GCM under ~/Library/Application Support/Satori/, with a key kept in your login keychain.
• Site icons, under names made with a keyed hash. Per-site settings such as colors, mute, and reading position, in macOS preferences under the same kind of hashed name. Sites where you paused the Shield blocker or chose never to save a password are listed by name in preferences.
• Settings, extensions, and the data websites store (cookies, caches). Satori does not encrypt them.
• A local crash log, crash.log, in the same folder. Nothing is sent from it.
• Private tabs add nothing to history, downloads, or bookmarks. The only thing kept is an element you hide in a private tab, filed under a hash of the site's name.

• The pages you ask for, and their icons. Icons come from each site's own declared icons, not from a third-party icon service.
• Update checks, about five seconds after launch, then once a day. They go to brandkit.pro, which serves the update feed and sees your IP address. The update itself downloads from GitHub, which also sees your IP address. Satori downloads updates in the background and installs them when you quit; the new version opens the next time you launch. You can turn automatic checks off in Settings › About.
• In a new tab, the address Satori is completing from your history starts loading before you press Return. This happens only on a blank tab.
• Pointing at a link can open a connection to that site early. This is on by default. Turn it off in Settings › Privacy & Security, under Connect ahead on hover.
• A single word that is not in the dictionary is looked up in DNS with .com added, to see whether that site exists. Only the name is looked up. Search words are not sent before you press Return.
• Searches go to the search engine you choose, after you press Return. DuckDuckGo is the default.
• When you use Share, Satori loads the page's preview image. Copy Image downloads the image from its site again. Making a web app downloads the site's icon and manifest from that site. Mini player artwork loads from the address the page declares.
• Installing Bitwarden downloads its extension from Google's Chrome Web Store update service, which gets the extension's ID and a Chrome version string. About every 20 hours, Satori checks installed Chrome Web Store extensions for updates, and sends each extension's ID and current version. Other Chrome extensions are switched off for now.
• A natural voice for Listen downloads its model from Hugging Face once, 135 MB, and only when you pick it. The download is checked against a fixed SHA-256 value.
• An embedded YouTube player loads the thumbnail from YouTube's image server and the player from youtube-nocookie.com, only after you press play.
• Satori can open http pages. It does not force https.
• Send Feedback… opens a GitHub issue page in your browser. Satori sends nothing itself.
• Translation and summaries run on your Mac with Apple's frameworks. Soundscapes are composed on your Mac and fetch nothing.

• It does not require an account.
• It does not sync your history, tabs, or bookmarks to a server.
• It does not send telemetry, analytics, or crash reports.
• It does not download filter lists for ad blocking. The blocking rules ship with the app.
• It does not fill in sign-in forms by itself. The one exception is the sign-in dialog for a password-protected folder, which Satori answers only over https, and only when there is one saved login for that site.

The Satori website at satoribrowser.com does not set cookies. It counts page views with Umami Cloud, an analytics service that uses no cookies and does not follow you across other sites. The Satori app is not part of this and sends no analytics. The website is hosted on Cloudflare. Cloudflare processes technical request logs, such as your IP address and the page you asked for, and keeps them according to Cloudflare's own policy.

• Publisher and data controller: 0mind LLC, 30 N Gould St Ste R, Sheridan, Wyoming 82801, USA.
• Retention: files that Satori keeps on your Mac stay there until you remove them. Website logs are kept according to Cloudflare's policy, as described above.
• Legal basis: Satori keeps your browsing data on your Mac, and 0mind LLC does not receive it. For the website, the only data processed is the technical request log kept by Cloudflare, which is needed to deliver and secure the site (legitimate interests). If you write to us, we use your message to answer it.
• Children: Satori and the website are not directed to children under 13, and we do not knowingly collect personal information from them. If you think a child has written to us, tell privacy@satoribrowser.com and we will delete the message.
• International transfers: 0mind LLC is in the United States. Cloudflare, which hosts the website, and GitHub and brandkit.pro, which serve updates, operate globally, so request data may be processed outside your country. Browsing data in Satori does not leave your Mac.
• Rights: whatever your region, you can ask us to access, correct, or delete the personal data we hold about you, which is mostly email you sent us. To ask, or to object to processing, write to privacy@satoribrowser.com. We reply within 30 days. We do not sell personal information or share it for advertising.
• Changes: when we change this policy, we post the new version on this page and update the date below. Material changes are also noted in What's new.
• Last updated: November 1, 2026.