8 OCTOBER 2026

Privacy policy

OrniWeb is published by Ornitix Technologies, Tamil Nadu, India. This policy describes the OrniWeb desktop app and this website. It matches the current build. Where a backend is not connected, the policy says so.

This website

These pages are static files. They do not set cookies, do not run analytics, and do not send the page you read to Ornitix. The download button points at a placeholder address until a real installer URL is published.

Browsing history is not sent to us

OrniWeb does not upload your browsing history, bookmarks, downloads, or passwords to Ornitix. There is no account server for the browser. A normal visit is stored on the PC, in an encrypted library file, or only in memory if Windows encryption is unavailable.

What stays on the device

Files live in the app’s user-data folder on that Windows account.

A private window uses a separate in-memory session. It does not add history. Its downloads are not written into the encrypted library.

Search

A search leaves your PC because that is how a search engine works. The address bar sends the query to the engine you chose:

The partner code in the current config is the placeholder ORNIX_PARTNER_CODE. The engine then handles the query under its own policy. OrniWeb does not keep a copy of that query on an Ornitix server. Suggestions while you type are matched against history and bookmarks already on the device.

New tab, affiliate links, and the sponsored card

Amazon and Flipkart shortcuts on the new tab are ordinary links. The current config uses the Amazon Associates tag orniweb-21 so OrniWeb may earn a commission when you buy through them. Affiliate tagging is on by default and you can turn it off in Settings (Affiliate links). No Flipkart affiliate value is applied; the Flipkart affid is a placeholder and is always removed. Tags are never added to pages you open or type yourself, or to sign-in, account, cart or checkout pages. They are click-only. OrniWeb does not read your history to choose them. Sample deals are text from the same config file, not a live price feed.

The sponsored card is one fixed creative from that config. It is not personalised, and it is not chosen from browsing history. It is hidden in a private window, in focus mode, and when you turn Sponsored placements off.

Sites, permissions, and the block list

Sites run in a sandboxed Chromium view. The chrome window and each tab are separate. A site does not receive the app’s preload script. Webviews are blocked. Certificate errors are not clicked through. Public http addresses can be upgraded to https. You can allow http for one site. Do Not Track, when you turn it on, sends the DNT: 1 header. Third-party cookies can be blocked.

Camera, microphone, location, and notifications start as Ask, and can be set to Allow or Block. Other requests, including USB, screen capture, and file access, are denied. A permission prompt can be dismissed for that origin for the session.

A small local block list can warn before a listed host opens. The check uses the list shipped with the app. It does not send the address to a safe-browsing service.

History and bookmark rows ask DuckDuckGo’s icon service for that site’s favicon (icons.duckduckgo.com). That request includes the site’s hostname. Placeholder .example addresses do not.

Assistant and VPN

Orni assistant replies are written on the device. No message is uploaded, and no model is called. The assistant backend flag is off. Free includes 20 uses, counted locally. Premium is set to remove that cap once a backend exists.

Orni VPN does not create a tunnel. The VPN backend flag is off, and no traffic is routed. The free allowance of 500 MB, and full VPN on Premium, apply only once a tunnel exists.

Updates

The app can check an HTTPS update feed with electron-updater. The feed in this build is the placeholder https://updates.orniweb.example/desktop. A placeholder host is not contacted. When a real feed is configured, a packaged app may download a signed update and install it the next time you quit. A failed check leaves the current version running. The check does not send your history.

Crashes and logs

In a packaged build, an uncaught main-process error or an unhandled rejection is written to the local console instead of Electron’s native error dialog. Those lines are not uploaded. The app does not ship a crash-report service.

Payments

Premium checkout is a placeholder. The Razorpay key id in the app is rzp_test_PLACEHOLDER. No charge is sent. Choosing “simulate payment” in the app only flips the local plan flag. See the refund policy for the rule that will apply if a real charge is added later.

Children

OrniWeb is a general-purpose browser. It is not directed at children. There is no account, and this website does not ask for a name, age, or email. Ornitix does not knowingly collect personal data of a child through the app or this site. A parent who believes a child’s information was saved in a local library can delete that history, bookmark, or password on the device.

India: IT Rules 2011 and the DPDP Act 2023

This policy is published for the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023. Ornitix Technologies is the data fiduciary for any personal data it actually receives. Today the browser does not operate a cloud account, and this website does not collect personal data. If that changes, this policy will name the purpose, the data, and how to withdraw consent or ask for erasure.

A grievance officer is required. The role is not filled on this page yet.

You can also use the contact page. There is no form, and nothing is stored by this site.

Changes

If the app starts sending data, or a real payment or update server is connected, this page will be updated and the date at the top will change.