privacy
Privacy Policy
Last updated: July 9, 2026
The short version. Blanc is built to collect as little as possible. Your browsing history, downloads, and favorites stay on your device — we never receive them. The installed app sends one anonymous usage ping you can switch off, and nothing else leaves your device unless you opt in. This website uses analytics only if you allow it.
Who this covers
This policy explains how Blanc — the desktop web browser for macOS, Windows, and Linux — and this website (blancbrowser.com) handle your information. Blanc is made by Bananify, an independent software studio based in Rochester, New York.
A mobile version of Blanc is in development. It hasn't been released, so it isn't covered here yet — we'll update this policy when it ships.
Questions about anything below? Email us at [email protected].
What stays on your device
Almost everything Blanc knows about your browsing lives only on your computer, in the app's local data folder, and is never sent to us:
- Your browsing history (kept locally, and capped so it doesn't grow without limit)
- Your downloads list
- Your favorites
- Your settings
- Cookies and site data from the pages you visit
- The permissions you've granted to individual websites
Private tabs go a step further: pages you open in a private tab are never written to history at all.
Because this data is local, you're the one in control of it — Blanc's history, downloads, and favorites screens let you remove items, and uninstalling Blanc removes its data folder.
What Blanc sends — and only when
There are exactly three things Blanc can send off your device. One is a small anonymous ping that's on by default and easy to turn off. The other two happen only if you choose them.
Anonymous usage ping
So we can gauge roughly how many people use Blanc, the installed app sends a small ping when it launches. It's on by default, and you can turn it off any time in Settings, under "Help improve Blanc."
Each ping contains only:
- a random install ID — a token that identifies the installation, not you
- a random per-launch session ID
- the app version
- your operating system and processor type (for example, macOS on arm64)
That's the entire payload. It carries no browsing data, no personal details, no account, no name, and no precise location. The install ID isn't tied to any identity; it's kept in its own small file on your device and is cleared when you remove the app's data. We use these pings only in aggregate — counts like "launches this week" — and those totals may be reflected in Google Analytics. Development builds send no pings at all.
Profile Sync (optional, off by default)
If you turn on Profile Sync in Settings, Blanc can keep your favorites and settings in step across your own devices. It stays off until you set it up with a sync name and passphrase.
Sync is end-to-end encrypted. The encryption key is derived from your passphrase on your device, and only encrypted data — which we cannot read, index, or decrypt — is stored on our server. Your passphrase never leaves your device, and we never store it. That also means that if you lose your passphrase, we can't recover your data, because we never had access to it.
Sync deliberately covers only favorites and settings. It does not sync your history, downloads, permissions, cookies or site data, your supporter status, your app-icon choice, or your usage-ping setting.
Supporter purchase (optional)
Blanc is free. If you choose to become a supporter, that one-time purchase is handled by our payment provider, Polar, which acts as the merchant of record. Polar processes your payment and email address under their privacy policy. Blanc receives only a confirmation that you're a supporter and stores a small local flag to unlock the extra app-icon colorways. We never see your full payment details.
Browsing the web with Blanc
Blanc is a web browser, so when you visit a site, Blanc connects you to it directly — that site and its servers see your requests just as they would in any browser. We don't sit between you and the web, and we don't log or monitor the pages you visit.
Blanc's built-in ad and tracker blocking reduces how much third parties can follow you around the web, but no blocker catches everything, so it's best thought of as a strong default rather than a guarantee.
Aside from the sites you choose to visit, Blanc itself makes a few ordinary network requests:
- it loads its interface fonts from Google Fonts;
- it downloads ad and tracker block lists (EasyList and EasyPrivacy) on first launch and to keep them current;
- it fetches site icons (favicons) so your favorites, history, and tabs show the right logos;
- in installed builds, it checks GitHub for app updates.
This website (blancbrowser.com)
The marketing site is intentionally light:
- Analytics is opt-in. Nothing analytics-related loads until you click "Allow" on the banner. If you allow it, we use Google Analytics to gauge interest, and your choice is remembered in your browser so we don't ask again. If you decline, no analytics runs.
- Fonts load from Google Fonts, so Google may see your IP address as part of delivering them.
- Download buttons ask GitHub's API for the latest release so they point to the right installer; the installers themselves are hosted and served by GitHub.
- Hosting is on Cloudflare Pages, which keeps standard server logs (such as IP addresses) to serve and protect the site.
We run no advertising networks and no cross-site trackers here, and we don't sell your data.
Children
Blanc isn't directed at children under 13, and we don't knowingly collect personal information from them.
Your choices and rights
You're in control of the little data involved:
- Turn the usage ping off in Settings at any time.
- Leave Profile Sync off, or turn it off to stop syncing.
- Reset your install ID by clearing the app's data.
- Clear your history, downloads, and favorites from within Blanc.
- Allow or decline analytics on this site, and change your mind by clearing the site's stored choice in your browser.
If you're in the European Union, the United Kingdom, California, or a similar place, you have rights over your personal data, including the right to access or delete it. We don't sell personal data. Because we hold so little — an anonymous install ping and, only if you enable sync, encrypted data we can't read — there's usually very little to act on, but you're welcome to email us at [email protected] with any request.
Keeping data, and keeping it safe
Usage pings are kept only in aggregate. Synced data stays on our server as encrypted blobs until you turn sync off or delete it. We take reasonable steps to protect the information we handle. One honest note: the data Blanc stores on your own device is kept in ordinary files, so the security of that data depends on your device's own protections.
Changes to this policy
If we change this policy, we'll update the date at the top and call out anything significant.
Contact
Bananify — [email protected]