Privacy Policy
Last updated: June 29, 2026 · Effective: June 29, 2026

✦ The short version
We do not collect your browsing history
We do not use cookies or tracking pixels
We do not sell or share your data with third parties
Session data (URLs, chat, annotations) lives only in RAM and is deleted when the room closes
The extension only sends data to b.krl.kr — your own server if you self-host
1. Who We Are
Shared Browser is operated at b.krl.kr. The source code is open and available at github.com/3289david/shared-browser.

1. What Data We Process
   Shared Browser is designed to process as little data as possible. Here is exactly what happens:

During an active session (held in server RAM only)
Display name — the name you type when creating or joining a room
URLs you visit — broadcast to other participants to sync navigation
Scroll and cursor positions — broadcast for real-time sync
Chat messages — sent to all room participants
Annotations — highlights or notes you add to a shared page
All of the above is held only in server memory for the duration of the session. When the last participant disconnects, the room and all its data are permanently deleted.

We never write session data to disk, a database, or log files. There is no persistent record of what you browsed.

Standard server logs
Like any web server, our nginx instance may briefly log your IP address and the path requested for error-debugging purposes. These logs are not analysed or retained beyond 7 days and are never linked to your session content.

1. What We Do Not Collect
   Your name, email, or any account information (there are no accounts)
   Browser fingerprints, device identifiers, or persistent cookies
   The content of web pages you visit (we sync URLs and scroll positions, not page HTML)
   Payment information (there is no paid tier)
   Any data from pages you visit that are not synced to a room
2. The Browser Extension
   The Shared Browser extension runs entirely on your device. It communicates only with the WebSocket server at wss://b.krl.kr (or your self-hosted server) and only while you are in an active room.

The extension does not:

Read or exfiltrate page content, form data, or passwords
Track tabs you open outside of an active room
Send analytics to any third-party service
Inject ads or modify page content for commercial purposes
You can inspect the full extension source code on GitHub.

1. Cookies
   Shared Browser does not use cookies, local storage, or any persistent client-side identifiers. Each session is stateless from the server's perspective.
2. Third Parties
   We do not use any third-party analytics, advertising, or tracking services. There are no embedded scripts from Google, Meta, or similar platforms on this site.
3. Self-Hosting
   You can self-host the entire Shared Browser stack — the server and extension — so that no data ever leaves your infrastructure. See the GitHub README for instructions.
4. Children's Privacy
   Shared Browser is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has used the service in a way that raises privacy concerns, contact us at hello@b.krl.kr.
5. Changes to This Policy
   We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes. Since we don't collect email addresses, we cannot notify you directly — check this page periodically if you are concerned.
6. Contact
   Privacy questions or requests: hello@b.krl.kr