Privacy Policy

Last Updated: October 2026

At MAHI Browser, we build tools for privacy, anonymity, and secure multi-account management. We believe privacy policies should be concise, straightforward, and technically accurate.

1. Data We Do NOT Collect

Zero Plaintext Browsing Data: Your browser profiles, browsing history, cache, visited URLs, entered form data, and account passwords remain 100% on your local machine.

We do not log your visited websites or DNS queries.
We do not track your real IP address during browsing sessions.
We do not monitor or inspect the traffic routed through your configured proxies.

2. Data We Collect & Store

When you create an account or use our cloud synchronization features, our server stores only the minimal data required to deliver the service:

Account Credentials: Your account email and a cryptographically salted bcrypt password hash. We never store plaintext passwords.
Subscription & Payment Records: Subscription status (Free or PRO), activation timestamps, expiration dates, and payment reference IDs for manual accounting.
Encrypted Cloud Sync Blobs: If you are a PRO user who enables Cloud Sync, your profile bundles are encrypted locally on your device with AES-256-GCM before transmission. Our server only stores encrypted ciphertext. We cannot decrypt your cookies or session state.
Device Session Tokens: An active session counter to enforce single active workstation usage per account license.

3. Security & Encryption Standards

All communication between the MAHI client and our cloud infrastructure is encrypted using Transport Layer Security (TLS 1.3). Database access is restricted to authenticated server processes on our private server network.

4. Third-Party Sharing

We never sell, rent, monetize, or share your account details or synchronization data with advertisers or data brokers.

5. Data Deletion & Export

You have full control over your local data. Deleting a profile from the MAHI interface permanently wipes the corresponding database record and Chromium user-data directory from your disk. To request the complete deletion of your server account and cloud backups, contact us directly at support@mahibrowser.com or via WhatsApp.