Privacy and data
What Umbral protects, what it stores, and when data can leave your computer.
Scope of these notes
These notes describe known Umbral features as of 4 November 2026. They are not a full Firefox traffic audit, an anonymity guarantee, or a regulatory compliance certification. External providers’ own practices also matter.
Protection and metrics
Strict ETP and FPP are enabled; RFP remains off. uBlock Origin is distributed unmodified with its own filters, controls and exceptions. Protection reduces some tracking, but a fingerprint may still be distinguishable.
Cards query only aggregate ETP-classified tracker and tracking-cookie records for today and the previous six UTC days. They are not uBO statistics, individual ads or HTTP requests. Firefox excludes private activity from this persistent record. The homepage receives two numbers and uBO status, not URLs or history.
Local AI and credentials
AI starts disabled. Enabling it, opening the panel or saving settings generates no traffic. When you send, the configured server receives conversation text; tabs, pages, history and forms are not collected automatically. Review pasted text and your server configuration.
Conversations live in memory, separated by window and normal/private browsing. Hiding the panel retains them; you can clear them. The key is stored through LoginManager, not this website. A local server may keep its own logs: that configuration is outside Umbral.
External connections
Your search engine receives your queries. SearXNG is contacted when you confirm adding an instance or use it for search; remote suggestions from that instance are not enabled. uBO can download lists and extensions can check for updates. Pages you visit generate their own traffic.
A complete audit of inherited Firefox/Zen services and connections is not finished. We do not claim “zero connections”, “zero telemetry”, or that private browsing or Flatpak eliminates all tracking. Automatic browser updates are not operational; updates are currently manual.
This website and reports
This website’s code adds no analytics, ads, collection forms or remote fonts. Hosting may process technical access data; the private preview also depends on its provider’s authentication. GitHub links lead to a service with its own terms.
Regular issues are public. Do not attach complete profiles, passwords, API keys, cookies or browsing history. Share only reviewed logs and screenshots.