Privacy
Privacy, in plain language.
This page describes the Melon browser and the Melon Cloud service run on this server.
The short version
- The browser has no telemetry and no trackers.
- A Melon Cloud account is optional. Without one, nothing is sent to us.
- Synced data is encrypted at rest, but it is not end‑to‑end encrypted yet.
- Announcements and surveys are anonymous.
- Deleting your account deletes all of its data.
The browser
Melon is built on ungoogled‑chromium, a version of Chromium with Google services and background requests removed. Melon adds no analytics, crash reporting or usage tracking of its own.
Your browsing history, bookmarks, cookies, passwords and project files stay on your device. Websites you visit, and any extensions you install, are governed by their own privacy policies.
To block known phishing and malware sites, Melon periodically downloads public blocklists and checks addresses on your device. The addresses you visit are never sent anywhere to be checked.
AI agents (Claude, Codex) run with your own account with those providers. What you send to them is governed by their terms, not by this page.
Melon Cloud
Melon Cloud is optional. It lets you sync between your devices and is only used if you sign in.
Signing in
You sign in with your email address and a one‑time code sent to it. There are no passwords to store or leak.
What we store
- Your account email, to sign you in.
- Your device names, so you can tell your devices apart.
- Your synced Spaces, folders and tabs.
How it is protected
Synced data is encrypted at rest with AES‑256‑GCM.
Not end‑to‑end encrypted yet. The server holds the keys, so the operator of this server can technically read your synced data. End‑to‑end encryption, where only your devices can read it, is planned.
Deleting your account
Deleting your Melon Cloud account deletes all of the data stored for it: your email, devices and synced data.
Announcements
The browser may fetch short announcements, such as release notes, from this server. These requests are anonymous: they carry no account or device identifier.
We only record aggregate counters per day for each announcement: how many times it was shown, clicked or dismissed. Nothing that identifies you or your device is recorded.
Surveys
Occasionally Melon may ask an optional question. Answers are anonymous and are not linked to your account or device.
Melon Connect
When you connect Melon on one device to another through the Melon Connect relay, the relay only forwards a connection that is already encrypted with TLS between your devices. It cannot read what passes through it.
Questions
For privacy questions or data requests, contact the operator of this server at privacy@ followed by this site's domain.