Privacy & Compliance Policy

Part A: PATANYX Browser

Sections 1 to 19 describe the browser, which runs on your device. Part B describes the PATANYX Search website, which we operate.

1. About PATANYX

PATANYX is a desktop web browser for Windows and Linux, developed and operated by EdgeXene LLC, a limited liability company organized under the laws of the State of Indiana. EdgeXene LLC is the data controller for the limited personal data described in this policy. Your use of PATANYX is also governed by our Terms of Use.

PATANYX has no account system. There is no registration, no sign-in, no profile and no per-install identifier. Nothing you do in the browser is associated with a person by us, because we hold nothing to associate it with.

2. What Data We Collect

Little reaches EdgeXene, and most of what does happens only because you chose it: writing to us, donating, or buying and using Premium. Everything else the browser does happens on your computer. This section lists every case in which something reaches EdgeXene. The browser also makes one outbound request that does not come to us: if you have chosen an encrypted resolver, it may check that the resolver is reachable, described in Section 4.4a.

2.1 Update and blocklist checks

The browser fetches a signed update manifest and a signed blocklist from patanyx.edgexene.io. Each check is a single unconditional GET whose address is identical for every installation of a platform. It carries no version number, no token, no query string and no cache validator, so nothing in the request distinguishes your copy from anyone else's. The comparison that decides whether something newer exists happens on your machine, which means the server is never told which version you are running.

What the server necessarily receives in the act of answering is your IP address and the time of the request. It is not logged. Failures are recorded so they can be fixed, and such a record can incidentally include an address. No content delivery network sits in front of this host, so no third party observes these requests.

Checks run on a randomised schedule rather than an exact clock, because a precisely repeating interval is itself an identifier. Nothing is ever installed without your explicit acceptance.

2.2 The page a launch opens

When you start the browser without handing it a page, its first tab opens PATANYX Search at patanyx.com, a site we operate (Part B). That request looks like any visit to the site: it carries your IP address and your browser's identifying string, and nothing that identifies your copy of PATANYX. Our web server writes no log line for the front page or for the script and images it loads, so an ordinary launch leaves no record on our side. The one exception is a request refused by the site's rate limit, which nginx notes in its error log with the address, as B.2 describes. If you open the browser from a link in another application, that page opens instead and patanyx.com is not contacted.

2.3 Messages you send us

If you use the contact form, we receive the category you pick, the subject, your message, and your name and email address if you choose to supply them. Only the subject, category and message are required.

The submission is delivered to an EdgeXene mailbox by email. It is not written to a database or a file. The only server-side state is an in-memory counter, keyed by IP address, that exists to limit automated abuse. It holds no message content, is cleared when the service restarts, and is never retained beyond the day it was created. Access logging is off for this endpoint as well.

2.4 Donations

The website links to a Stripe payment page where you may donate to EdgeXene's open-source work. The link is an ordinary hyperlink. No Stripe code runs on any PATANYX page, and nothing about you is sent to Stripe unless you click it and leave for their site.

If you do donate, Stripe collects your email address and your payment details and processes the payment. EdgeXene receives a record of the donation, which includes your email address, the amount, the date and the card brand and last four digits. EdgeXene never receives your full card number. Donating is entirely optional, is not required to use PATANYX, and unlocks nothing in the browser.

A donation is separate from Premium, which is covered in 2.5 and in Section 18.

2.5 Premium and the chat relay

PATANYX Premium unlocks private chat, checking a page against what a contact was served, and reading text out of an image. The built-in tunnel is free, and so is how the browser looks: every accent color and chrome color scheme. Buying and using Premium involves EdgeXene in three ways that free use does not.

Buying it. Payment is taken by Stripe, who collect your name, card details, email address, billing address where law requires it, and your IP address, under their own privacy policy. Buying with a card is not anonymous and cannot be made so. EdgeXene receives the payment record, not your card number, and does not collect an email address of its own. Nothing is emailed to you at any point: your license token appears on a page immediately after payment, which you print or save yourself. That page is the only delivery. A lost token cannot be re-sent or recovered by us: we hold no email address of yours and the token is bound to no account or identity we could match you to. You are told this before you pay as well as after.

Your license. EdgeXene's license server issues a signed token and keeps one record of it: a license identifier, the dates of the term, a payment reference, and the token itself. It keeps the token so that a repeated notification from the payment processor cannot mint you a second license for one payment, and so that the page showing your token still works if you reload it. It records no IP address, at purchase or at any other time. You paste the token into the browser's vault once. There is no account, no sign-in and no periodic license check-in. Each device activates once: the first time your vault opens after you paste the token, the browser asks EdgeXene's license server to activate that device, and it asks again at a later unlock only if that request could not get through. The request carries the license token and a random identifier the browser made for that install, and the server keeps the license identifier, that device identifier and the day; it records no IP address. Releasing a device from its own Vault panel sends the same two things once more. Every unlock after activation is checked by your own copy of the browser, offline, so ordinary use of what you paid for produces no further record here.

Using chat. Connecting to the relay at relay.edgexene.io discloses your IP address and your license identifier to it for the life of the connection. The relay keeps aggregate counters only. Section 18 sets out exactly who can see what, including what this does and does not let us infer.

None of this applies to the free browser. The free build contains no chat or relay code at all, and an automated check on every release fails the build if any appears.

2.6 Not collected by EdgeXene

• Your browsing history, which the browser does not persist. Deep Recall keeps only the pages you choose to save, in an encrypted file on your machine that opens with your vault; nothing about them reaches EdgeXene
• The addresses of pages you open, or their contents
• Search terms
• Bookmarks, saved passwords, set-aside tabs or download records
• Images or documents you open, screenshot or run through OCR
• Analytics, product telemetry, usage metrics or crash reports
• Advertising identifiers, cookies set by us, or any per-install identifier

3. How Your Data Is Processed

PATANYX is built so that the sensitive material stays on your computer. The following are stored locally, in your own user profile directory, and are never transmitted to EdgeXene.

If you forget the passphrase that protects the vault or the store, EdgeXene cannot recover it. We never receive a copy of the passphrase or of the keys derived from it, so there is no reset we could perform. This is a deliberate design property, not an oversight.

3.1 Diagnostics

The browser keeps a short record of recent network decisions so you can see why something was blocked or allowed. It is never transmitted. It leaves your machine only if you deliberately export it to a file and then choose to send that file to someone. That export can contain the addresses of sites you visited, so treat it as sensitive and review it before sharing it.

4. Third-Party Services

A browser is a tool for reaching other people's servers, so the honest question is not whether third parties are involved but which ones, and on whose initiative. Section 4.1 lists the providers EdgeXene engages to operate the service. The sections after it describe the parties your own browsing brings into the picture.

4.1 Service providers EdgeXene engages

That is the complete list of providers we send data to. PATANYX uses no analytics provider, no content delivery network, no crash-reporting service and no customer-relationship platform, because it has no data to put into one. It loads no third-party advertising scripts, no tracking pixels and no advertising SDKs, and it takes no part in behavioral advertising. Section 4.7 describes the affiliate links PATANYX may carry. They make no request when a PATANYX page loads and contain no reader-specific identifier. EdgeXene's own license server and chat relay are not third parties; they are ours, and Section 18 states exactly what they see. EdgeXene LLC is not responsible for the independent privacy practices of the providers above, which operate outside our control, though we select for strong security and privacy standards.

4.2 The rendering engine

On Windows, PATANYX renders pages with Microsoft Edge WebView2. On Linux it uses WebKitGTK. On Windows we ask the engine to reduce what it reports: SmartScreen reputation checking off, so the addresses you open are not sent to Microsoft; crash-dump upload off, so a memory snapshot of a crashed page process is not uploaded; browser sync disabled; hyperlink auditing pings disabled; and tracking prevention enabled explicitly.

Some of those are requests to the runtime rather than guarantees. On an older or unusual WebView2 runtime the settings that suppress crash-dump upload can fail to apply, and the browser falls back to the engine's own defaults, in which case crash reporting to Microsoft remains on. We would rather tell you that than describe a protection as absolute when the code treats it as best effort.

4.3 Search

Text typed in the address bar that is not a web address is sent to DuckDuckGo as a search query. It goes to DuckDuckGo, not to EdgeXene, under their privacy policy.

4.4 Encrypted DNS

By default PATANYX uses your operating system's DNS resolver, usually your network provider's. You may instead opt in to Mullvad or Quad9 encrypted DNS, sending the domain names you look up to that provider over an encrypted connection rather than in the clear to your network. Whichever resolver you choose sees the domains you visit; encryption changes who can see them, not whether anyone can.

This control is available on Windows only. On Linux the engine offers no encrypted-resolver setting, so PATANYX makes none available and the resolver choice is not shown; name lookups follow your operating system's configuration.

4.4a Checking that your chosen resolver is reachable

Choosing Mullvad or Quad9 makes name resolution fail closed: if that resolver cannot be reached, PATANYX does not quietly fall back to whatever the network offers, so pages simply stop loading. To tell you why, the browser contacts the resolver you already chose to see whether it is reachable, and only after a navigation has already failed in a way consistent with a dead network. The request goes to that resolver and nowhere else, carries no hostname you were trying to reach, and is not made at all while you are using your operating system's resolver. Nothing about it reaches EdgeXene.

4.5 The private tunnel

PATANYX includes a WireGuard client, but EdgeXene operates no VPN servers and supplies no endpoints. You import a configuration from a provider you already deal with, and your traffic goes to them under their terms. We are not a party to it. We may also point to a VPN service as an alternative to this feature rather than a source of configurations for it. Any such link is an affiliate link and is labeled as one. It changes nothing above: we still operate no VPN servers and supply no endpoints.

4.6 Sites you visit

Pages you open receive whatever your browser sends them in the normal course of loading a page, including your IP address. PATANYX reduces this where it can, by blocking known advertising and tracking hosts from first launch, and because neither engine accepts third-party cookies, an advertiser present on two different sites cannot join them up through a cookie. It cannot eliminate what a site learns, and the About page states those limits in full.

Pages we publish, such as the news and AreaGram views, may show images hosted by the publishers whose stories they link to. Your browser fetches those images directly from the publisher, which receives your IP address in the same way any site you open does. We keep no record of which stories or images you loaded.

Known tracking parameters are also removed from addresses. On Windows the browser strips them from top-level navigations as you browse; the Linux engine offers no equivalent hook, so it does not. On both platforms the right-click menu offers a copy-link action that removes them from the address you are about to share.

4.7 Affiliate links

Some pages we publish, and two panels inside the browser, may carry links to products from companies we have an affiliate relationship with. Where one appears it is labeled, and nothing reaches the company until you click it.

An affiliate link carries a partner identifier that identifies PATANYX as the referring publisher, so the company can attribute a referral or a commission. That identifier identifies PATANYX, not you. We do not add a user ID, an account ID, a search query, browsing history, a session identifier or any other information about you to the link, and a page carrying one sends nothing when it loads. It is an ordinary link that goes nowhere until chosen.

If you open one, you are on the company's own site. The company may use cookies or other attribution mechanisms on its site to determine whether a later purchase resulted from the referral, under its own privacy and cookie practices.

An affiliate relationship does not affect PATANYX search results, safety warnings, source rankings, blocklists or security decisions. A company being a partner is not a security assessment of it, and if a partner's link ever appears in the malicious-host data PATANYX publishes, the link is withdrawn rather than exempted.

5. Data Retention

6. Data Deletion

Data held on your device is deleted by you: clear it from within the browser, or delete the PATANYX application data directory. Because we hold no copy, nothing survives that deletion on our side.

For anything you have sent us, which in practice means a message through the contact form, write to compliance@edgexene.io and we will delete it. We aim to act within thirty days and will tell you when it is done.

7. Data Sharing

EdgeXene does not sell personal data, does not share it for cross-context behavioral advertising, and does not transfer it to data brokers, advertisers or analytics providers. We hold almost nothing, and what little we hold is not a product.

Data is disclosed to the service providers listed in Section 4.1 only to the extent they must process it to perform their function, under contractual terms restricting them to that purpose.

Beyond that, we would disclose data only where legally compelled by valid process. The practical consequence of the design is that a demand for your browsing activity could not be satisfied, because we do not have it.

If we receive a legal demand for data relating to you, we will notify you before responding wherever we are permitted to do so and have a means of reaching you.

8. Security

• Saved passwords are encrypted with a key derived from your passphrase, using algorithms named on the About page. The vault locks itself after five minutes of inactivity by default; that interval is yours to change, and it can be switched off entirely, which trades protection for convenience.
• The bookmark and download store uses a separate key derived under a distinct domain label, so compromise of one file's key does not yield the other's.
• Every update and blocklist is cryptographically signed with a key that exists only on the publisher's own machine, and is verified by your copy of the browser before it is accepted. Someone who took control of the distribution server, its DNS, or a certificate for it still could not make an installation accept a modified update.
• Released binaries are signed with Sigstore, and the About page documents how to verify a download yourself.
• All connections to EdgeXene infrastructure use TLS.

No security measure is absolute, and pre-1.0 software carries more risk than a mature release. If you believe you have found a vulnerability, please report it to compliance@edgexene.io.

9. Breach Notification

If a breach affecting personal data occurs, EdgeXene will notify affected individuals and the relevant supervisory authorities as required by applicable law, without undue delay and, where GDPR applies, within seventy-two hours of becoming aware of it.

The scope of any such breach is bounded by what we hold. Material kept on your device is not reachable from our infrastructure.

10. Lawful Basis for Processing

Where we rely on consent, you may withdraw it at any time by writing to compliance@edgexene.io. Withdrawing is as easy as giving it, and it does not affect the lawfulness of anything done before you withdrew.

11. International Data Transfers

EdgeXene's servers are located in Finland, European Union. PATANYX is operated by EdgeXene LLC, a company organized under the laws of the State of Indiana, United States. If you are accessing PATANYX from outside the European Union, the limited data described in Section 2 is transferred to and processed in the European Union, and may be accessed from the United States by EdgeXene personnel.

Our hosting provider is bound by a data processing agreement under Article 28 of the GDPR which commits it to processing data for an EU server location exclusively within the EU or EEA. Our mail provider is established in Switzerland, which the European Commission recognizes as providing an adequate level of protection. Payments are processed in the United States, and that transfer relies on the payment provider's Standard Contractual Clauses. Where any other transfer arises we rely on an adequacy decision, Standard Contractual Clauses, or your consent, as applicable.

Where an optional feature sends data elsewhere, it does so to a party you chose: an encrypted DNS provider you selected, or a VPN provider whose configuration you imported. Those transfers are governed by that provider's terms, not ours.

12. Your Rights

Subject to applicable law you have the right to access the personal data we hold about you, to correct it, to have it deleted, to obtain a copy in a portable form, to object to or restrict processing, and not to be subject to automated decision-making. PATANYX performs no profiling and no automated decision-making.

To exercise any of these, write to compliance@edgexene.io. We respond within thirty days. Because we hold no account and no identifier, an access request will in most cases return only the correspondence you have had with us, and we will say so plainly rather than manufacture a record.

We must be able to verify that a request comes from you. Because there is no account, in many cases the only thing we can verify against is correspondence you have already sent us. Where we cannot reasonably establish that a request is yours, we will say so and decline rather than hand your information to someone else on the strength of an unverified claim.

Exercising any right never degrades how PATANYX works.

13. California Privacy Rights

Under the California Consumer Privacy Act as amended by the CPRA, California residents have the right to know what personal information is collected, to delete it, to correct it, to opt out of sale or sharing, and not to be discriminated against for exercising those rights.

EdgeXene does not sell personal information and does not share it for cross-context behavioral advertising, so there is no opt-out to operate. We do not use or disclose sensitive personal information for purposes requiring a limitation right.

The statute requires disclosure by its own categories rather than in plain description alone, so the table states them directly.

EdgeXene has not sold or shared personal information in the preceding twelve months, and does not knowingly sell or share the personal information of consumers under 16 years of age.

PATANYX sends the Global Privacy Control signal to every site you visit, permanently and with no setting to turn it off. On Windows that means both the request header and the page property; on Linux, the page property alone. Section 15 explains why. In California and in several other states this is a legally recognized opt-out request, which means the browser exercises that right on your behalf without your having to find a link on each site. Section 15 states what the signal does and does not achieve.

14. Indiana, Virginia and Other State Privacy Laws

EdgeXene LLC is organized in Indiana. Residents of Indiana, Virginia, Colorado, Connecticut and other states with comprehensive consumer privacy statutes have rights to access, correct, delete and port personal data, and to opt out of targeted advertising, sale and profiling. EdgeXene engages in none of those three activities.

Requests go to compliance@edgexene.io. If we decline a request you may appeal by replying to our decision, and we will respond to the appeal in writing.

15. Do Not Track and Global Privacy Control

PATANYX sends Sec-GPC: 1 and exposes the corresponding Global Privacy Control property to every page. It is always on. There is no switch, because a privacy signal that most users never find is not a privacy signal.

Be clear about what this is worth. GPC is a legally binding opt-out request in California and several other jurisdictions, and sites subject to those laws are obliged to honor it. Elsewhere it is a request that a site may ignore. It does not block anything by itself, and it does not make you anonymous.

PATANYX does not send the older Do Not Track header, which was never standardised in a way that obliged anyone to act on it, and does not act on a DNT header received from anywhere.

16. EU and UK Users

In addition to Section 12, residents of the European Economic Area and the United Kingdom may restrict processing while a dispute is resolved, object to processing on grounds relating to their particular situation, and lodge a complaint with their local supervisory authority.

PATANYX carries out no marketing, no profiling and no automated decision-making. Contact compliance@edgexene.io to exercise any of these.

EdgeXene LLC does not currently have an EU representative. EU users may contact compliance@edgexene.io directly or lodge a complaint with their local supervisory authority.

17. Children's Privacy

PATANYX is a general-purpose web browser intended for adults. We do not knowingly collect personal data from children under 13, or under the age of digital consent in their country where that age is higher, and the product is built so that we collect almost nothing from anyone. If you believe a child has sent us information through the contact form, write to compliance@edgexene.io and we will delete it promptly.

A browser can reach any site on the web. PATANYX does not filter content by age and is not a substitute for parental supervision.

18. PATANYX Premium

Premium unlocks private chat, checking a page against what a contact was served, and reading text out of an image. Everything else stays free, including every accent color and chrome color scheme, the built-in tunnel, all the blocking, the vault, the update channel, and light and dark following your system setting. Paying changes what the browser can do. It does not change what it collects about your browsing, which remains nothing.

18.1 Two builds, and why that matters

PATANYX ships as two binaries. The free build contains no chat code and no relay code whatsoever, and an automated check runs on every release that fails the build if any is found. That is a stronger statement than a setting being switched off: if you run the free build, the code that could talk to our relay is not present in the file. The Premium build contains everything the free build has, plus the paid features.

18.2 Who can see what

Stated as a table because it is the only honest way to answer it.

18.3 What this lets us infer, stated rather than fudged

A license identifier is stable across renewals. The relay sees it alongside an IP address for the duration of a chat connection. So a relay operator who chose to keep records it currently does not keep could, in principle, learn that a particular license was online at particular times and from particular addresses. It could not learn who you spoke to by name, or anything you said, because it never holds the keys. We keep aggregate counters instead, and we would rather write this paragraph than let you assume a property the architecture does not provide.

The relay cannot be removed from the path for relayed chat. On a local network, chat can connect directly between two machines and the relay is not involved at all.

18.4 What we deliberately do not do

• No account and no sign-in. Your license is a signed file on your device, checked by your own copy of the browser.
• No license check-in and no phone-home. One activation call per device, and nothing on a schedule. After that, ordinary use of what you paid for produces no record at EdgeXene.
• Up to five devices per license, each bound to a random identifier the browser makes for that install, and a limited number of activations in all. No hardware fingerprinting: the identifier is random, and it is only created if you buy.
• No usage tracking of any kind, paid or free. We do not count which features you use.
• No way to reach you, and nothing to reach you about. We keep the token we issued so one payment cannot become two licenses, but we hold no email address and no account, so a lost token cannot be re-sent by us to anyone.
• No enforcement that requires watching you. A license check running on your own machine can be bypassed by someone who modifies their own copy, and we accept that rather than build the surveillance that preventing it would need.

18.5 When a Premium term ends

Premium is a prepaid term, not a subscription. There is nothing to cancel and nothing renews on its own: a term simply runs out on the date the token carries.

When it runs out, the Premium features stop until you buy another term. All of them. We do not operate a partial or reduced Premium tier, and we would rather state that here than have the browser surprise you. Nothing phones home to switch anything off: your own copy of the browser reads the date in your token and stops honoring it after that date, offline, with no check-in.

Free features are never affected. Nothing you created is deleted or held back; it is on your device and stays yours. We do not need to delete anything at our end, because we hold no copy of it. There is no account to close.

19. Changes to This Policy

EdgeXene LLC may update this policy as PATANYX develops. Material changes will be announced in the release that introduces them and recorded in the changelog below, with the effective date updated. Continued use after a change constitutes acceptance.

While PATANYX remains pre-1.0, expect this policy to change more often than it would for a finished product. Every change will be recorded rather than made quietly.

Part B: PATANYX Search (patanyx.com)

B.1 What it is

PATANYX Search is a website at patanyx.com, operated by EdgeXene LLC. It has five parts: Weather, which answers a place name with a forecast; Earthquakes, which shows recent earthquakes worldwide from the US Geological Survey; AreaGram, which shows which publishers in which countries carried the same news story; Travel, which answers a destination you name with the weather there, the travel advice published separately by the United States, the United Kingdom and Canada, recent earthquakes nearby, news stories that crossed borders about it, and for a United States city, alerts from the National Park Service; and Recall, which answers a product, brand, food, medicine or vehicle you name with the official recall notices published by the United States Consumer Product Safety Commission, the National Highway Traffic Safety Administration, the Food and Drug Administration, and Health Canada. There are no accounts, PATANYX Search sets no cookies, and there is no analytics beyond the page-view totals described in B.2. The pages load no advertising scripts, tracking pixels or advertising SDKs. Some may carry a labeled affiliate link, described in Section 4.7. The pages contain no scripts except the small one that offers place-name suggestions as you type on the weather, earthquake and travel pages.

B.2 What our web server records

Like most web servers, ours writes one line per request to a log: your IP address, the time, the page you asked for, the response, and your browser's identifying string. The front page, and the script and images it loads on its own, are the exception: no line is written for them, because the PATANYX browser opens that page every time it starts and a record of those requests would be a record of when you started your browser. A request the rate limit refuses is noted in the server's error log with the address; that log is kept on the same 14-day schedule. It does not record what you typed into the weather search, and it does not record the address of the page you came from; the log format is set so those two fields are never written. These logs are rotated daily and deleted after 14 days. They are used to keep the site running and to notice abuse; they are not used to build profiles, are not combined with any other data, and are not shared. We use them for analytics: counting visits and downloads, and seeing which country and city a visit came from. We keep no personal information about you — no name, no email, no account — and the only address we hold is the one in the log described above, kept to deal with abuse and deleted after 14 days.

B.3 Weather

The place you type is matched to a coordinate on our own server, from a copy of the GeoNames gazetteer we hold. That coordinate, rounded to one tenth of a degree (about 11 kilometers), is sent to the forecast provider: MET Norway for most of the world, the United States National Weather Service for the United States. Nothing about you goes with it: the request carries our own identifying string, not your IP address or browser. Forecasts are cached on our server for five minutes, so a place that several people ask about is looked up once. Radar and satellite images are fetched by our server on a schedule and re-served to you; the image providers see our server, not you. The providers are listed on the Sources page.

B.4 AreaGram

AreaGram is built from publishers' public news feeds, which our server polls. From each item we keep the headline, the outlet's name, the time the publisher gave, and the link. We never keep the article. Nothing about readers is recorded by AreaGram: it does not know who looked at which story. Every headline is a link to the publisher's own page; opening one takes you there, and the publisher receives your IP address as any site you open does. What we may show from publishers is stated in section 4.6. Every publisher we poll is listed on the Sources page. We do not poll publishers whose feed terms limit use to personal or non-commercial readers, or require permission.

B.5 Retention and your rights

The only data about you that PATANYX Search holds is the server log in B.2, kept for 14 days. Sections 5 through 17 of Part A apply to it in the same way: you may ask what we hold and ask us to delete it, using the contact below, and the lawful basis is our legitimate interest in running and protecting the site.