8 OCTOBER 2026
Privacy policy
OrniWeb is published by Ornitix Technologies, Tamil Nadu, India. This policy describes the OrniWeb desktop app and this website. It matches the current build. Where a backend is not connected, the policy says so.
This website
These pages are static files. They do not set cookies, do not run analytics, and do not send the page you read to Ornitix. The download button points at a placeholder address until a real installer URL is published.
Browsing history is not sent to us
OrniWeb does not upload your browsing history, bookmarks, downloads, or passwords to Ornitix. There is no account server for the browser. A normal visit is stored on the PC, in an encrypted library file, or only in memory if Windows encryption is unavailable.
What stays on the device
Files live in the app’s user-data folder on that Windows account.
- settings.json holds settings (theme, search engine, Transparent, Blur, HTTPS upgrade, Do Not Track, cookie blocking, permissions, sponsored-card switch, shortcuts, display name), the local Free or Premium flag, and the count of assistant replies used. This file is not the encrypted vault.
- library.orni holds bookmarks (up to 2,000), history (up to 500), the download list (up to 200), spaces, and the last session’s tabs (up to 30). When Windows encryption is available, Electron safeStorage (DPAPI) encrypts this file before it is written. If that encryption is unavailable, bookmarks and history stay in memory for the session and are not written. If a saved file cannot be decrypted, it is left untouched.
- passwords.orni holds saved passwords (up to 500), encrypted the same way. This build has no passkey backend. Revealing a password decrypts it on the device for you to see. Passwords are not uploaded.
A private window uses a separate in-memory session. It does not add history. Its downloads are not written into the encrypted library.
Search
A search leaves your PC because that is how a search engine works. The address bar sends the query to the engine you chose:
- Bing, the default, opens Bing and adds a partner code (the
pcparameter) andform=ORNIWEB. Images and videos use Bing’s own image and video pages, with the same partner code. - DuckDuckGo opens DuckDuckGo and adds a partner code (the
tparameter). - Google and Ecosia open those sites directly. No partner code is added.
The partner code in the current config is the placeholder ORNIX_PARTNER_CODE. The engine then handles the query under its own policy. OrniWeb does not keep a copy of that query on an Ornitix server. Suggestions while you type are matched against history and bookmarks already on the device.
New tab, affiliate links, and the sponsored card
Amazon and Flipkart shortcuts on the new tab are ordinary links. The current config uses the Amazon Associates tag orniweb-21 so OrniWeb may earn a commission when you buy through them. Affiliate tagging is on by default and you can turn it off in Settings (Affiliate links). No Flipkart affiliate value is applied; the Flipkart affid is a placeholder and is always removed. Tags are never added to pages you open or type yourself, or to sign-in, account, cart or checkout pages. They are click-only. OrniWeb does not read your history to choose them. Sample deals are text from the same config file, not a live price feed.
The sponsored card is one fixed creative from that config. It is not personalised, and it is not chosen from browsing history. It is hidden in a private window, in focus mode, and when you turn Sponsored placements off.
Sites, permissions, and the block list
Sites run in a sandboxed Chromium view. The chrome window and each tab are separate. A site does not receive the app’s preload script. Webviews are blocked. Certificate errors are not clicked through. Public http addresses can be upgraded to https. You can allow http for one site. Do Not Track, when you turn it on, sends the DNT: 1 header. Third-party cookies can be blocked.
Camera, microphone, location, and notifications start as Ask, and can be set to Allow or Block. Other requests, including USB, screen capture, and file access, are denied. A permission prompt can be dismissed for that origin for the session.
A small local block list can warn before a listed host opens. The check uses the list shipped with the app. It does not send the address to a safe-browsing service.
History and bookmark rows ask DuckDuckGo’s icon service for that site’s favicon (icons.duckduckgo.com). That request includes the site’s hostname. Placeholder .example addresses do not.
Assistant and VPN
Orni assistant replies are written on the device. No message is uploaded, and no model is called. The assistant backend flag is off. Free includes 20 uses, counted locally. Premium is set to remove that cap once a backend exists.
Orni VPN does not create a tunnel. The VPN backend flag is off, and no traffic is routed. The free allowance of 500 MB, and full VPN on Premium, apply only once a tunnel exists.
Updates
The app can check an HTTPS update feed with electron-updater. The feed in this build is the placeholder https://updates.orniweb.example/desktop. A placeholder host is not contacted. When a real feed is configured, a packaged app may download a signed update and install it the next time you quit. A failed check leaves the current version running. The check does not send your history.
Crashes and logs
In a packaged build, an uncaught main-process error or an unhandled rejection is written to the local console instead of Electron’s native error dialog. Those lines are not uploaded. The app does not ship a crash-report service.
Payments
Premium checkout is a placeholder. The Razorpay key id in the app is rzp_test_PLACEHOLDER. No charge is sent. Choosing “simulate payment” in the app only flips the local plan flag. See the refund policy for the rule that will apply if a real charge is added later.
Children
OrniWeb is a general-purpose browser. It is not directed at children. There is no account, and this website does not ask for a name, age, or email. Ornitix does not knowingly collect personal data of a child through the app or this site. A parent who believes a child’s information was saved in a local library can delete that history, bookmark, or password on the device.
India: IT Rules 2011 and the DPDP Act 2023
This policy is published for the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023. Ornitix Technologies is the data fiduciary for any personal data it actually receives. Today the browser does not operate a cloud account, and this website does not collect personal data. If that changes, this policy will name the purpose, the data, and how to withdraw consent or ask for erasure.
A grievance officer is required. The role is not filled on this page yet.
- Grievance officer: TODO name
- Email: TODO@example.com
- Postal address: TODO, Tamil Nadu, India
You can also use the contact page. There is no form, and nothing is stored by this site.
Changes
If the app starts sending data, or a real payment or update server is connected, this page will be updated and the date at the top will change.