LAST UPDATED April 23, 2019

Brave Websites, Forums, and Email Privacy Policy

Read this document to understand how Brave Software (“us”, “we”, “Brave”, etc.) use data to operate its websites, forums, and communications. To learn how we use data for the Brave Browser, see the Brave Browser Privacy Policy. To learn how we use data for publishers and creators, see the Publisher Privacy Policy.

Infrastructure

Brave websites are hosted on infrastructure we operate, and on infrastructure operated on our behalf by Amazon, Heroku (a Salesforce company), and Fastly. Fastly’s infrastructure is designed to be as close to you as possible — probably in the same country as you, though this is not guaranteed. The rest of this infrastructure is located in the United States, which is where information is processed and stored only for as long as necessary in order to provide services to you and support Brave in doing so. We take a range of technical and organisational measures to safeguard any personal data processed including the use of EU standard contractual clauses. Wherever possible we try not to process personal data. See data processing details.

Community forums

Brave provides two forums by which you can post feedback and comments on Brave’s services and publicly communicate with other Brave users - community.brave.com and forum.batcommunity.org. While Brave runs these forums, they are hosted on our behalf by the platform provider, Discourse.

Use of our forums is subject not only to Brave’s privacy policy but also that of Discourse. In a nutshell, your personal data will be used to operate and improve the forum and to provide customer service and support. Please do read the privacy policies.

We automatically capture and keep the IP address of all server requests but for no more than 30 days. You can access or delete your forum account (and related data) in the “preferences” panel at community.brave.com. See data processing details for more information about what data we use and why.

Advertising Brave to people using Facebook, Google, and Twitter

Brave uses Facebook, Google, and Twitter ads to attract new users. Brave does not track people on Facebook, Google, or Twitter, or use any kind of in-app or Brave-server post-install tracking. See data processing detail. These ads link to pages on a separate website run by a company called Unbounce on Brave’s behalf, on servers based in the EU. See data processing details.

Children

Children under the age of 131 are not permitted to use the website, sign up for email updates, join the community forum, or send Brave any other information. If you have reason to believe that a child under the age of 13 has interacted with the website, please contact privacy@brave.com. In that case, we will do our best to remove all related records.

Support

You can submit a support enquiry to Brave by clicking here: https://support.brave.com/hc/en-us/requests/new. We use an online ticketing system from Zendesk to help us manage our support to you. The information you provide will only be used to resolve your enquiry.

What personal data we use and why

Users of Brave websites

Purpose of processingCategories of personal data processedLegal basis of processingDuration of storage
To provide efficient access to Brave websites on the Internet IP address, user agent Our interest in providing a fast-loading website. The data are used in a way that does not negatively affect your rights or interests. Cloudflare DNS2 log is 1 week. Fastly3 only logs aggregated data unless an IP address is suspected of security threat.

Users of the Brave or Bat Community forums

Purpose of processingCategories of personal data processedLegal basis of processingDuration of storage
To operate the forum, including improving it based on feedback and use. IP address, user agent (version number of your operating system version and browser), community pages visited, incoming and outgoing links, reading times per post, user profiles viewed, likes given and flags being requested, registration IP addresses, posts that you write, pseudonym or real name, profile photo Necessary for the performance of a contract between us (and necessary for us to provide the requested service). The time necessary to deliver the requested service.
To send user-requested notifications or respond to user questions E-mail address, pseudonym or real name Necessary for the performance of a contract between us (and necessary for us to provide the requested service). The time necessary to deliver the requested service.
To provide customer service and support IP address, user agent (version number of operating system version and browser), community pages visited, incoming and outgoing links, reading times per post, user profiles viewed, likes given and flags being requested, registration IP addresses, posts that you write, pseudonym or real name, profile photo Necessary for the performance of a contract between us (and necessary for us to provide the requested service). The time necessary to deliver the requested service.
To display ongoing community conversations that include posts from members who have left the community. Posts by former members (these may no longer be personal data because once user name is removed the former user may no longer be identifiable) Our interest in maintaining an unbroken community conversation. The data are used in a way that does not negatively affect your rights or interests. Until the forum closes.

Advertising Brave to people using Facebook, Google, and Twitter

Purpose of processingCategories of personal data processedLegal basis of processingDuration of storage
To market Brave to prospective users who use Facebook and Google websites and apps. For Facebook: Facebook ID (not available to Brave, and used by Facebook for people logged in to Facebook), actions on Facebook, location, age, gender, previously visited website, device details. For Google: Google ID (not available to Brave), keywords used in searches, and interests determined by Google based on what the person has done and browsed (“affinity audiences” and “custom intent audiences”). Legitimate interest. Brave’s interest is to attract users, and to defend those users’ privacy over the long term. Everybody has an interest in gaining protection from online surveillance. Therefore, Brave uses advertising on Facebook and Google to offer its service to people whose privacy and data rights are currently unprotected. Brave does not receive or store data. Google or Facebook store the data until the user deletes their Google or Facebook account.
To market Brave to prospective users using variations of landing pages that cater to their interests. Unique ID assigned by Unbounce, unique ID assigned by Facebook, referral URL. Country/region, timezone, operating system, device, browser, ID, IP address, timestamp, page variant visited. Legitimate interest. This might seem unusual, but consider the following. Brave’s interest is to attract users, and to defend those users’ privacy over the long term. Everybody has an interest in gaining protection from online surveillance. Therefore, Brave uses advertising on Facebook and Google to offer its service to people whose privacy and data rights are currently unprotected. Unbounce stores the data for 184 days.

Research and product development, including related surveys

Purpose of processingCategories of personal data processedLegal basis of processingDuration of storage
To receive user testing responses (from survey and tests in person) Name, contact details, responses to survey questions about use of Brave Browser Consent 1 year
To send Brave Beta Testers new software E-mail address, Name Consent The duration of a person’s participation in Brave Beta Testing

Support/General Correspondence/competitions

Purpose of processingCategories of personal data processedLegal basis of processingDuration of storage
To respond to requests for customer support IP address, email address, data submitted in a support request Legitimate interests of Brave and the customer The time needed to resolve the customer support query
To run occasional contests E-mail address, IP address Consent The duration of an individual contest.
General correspondence Data sent by the person communicating. Our interest in correctly responding to users, and maintaining good relations with them. The data are used in a way that does not negatively affect your rights or interests. Indefinite.

Contacting Brave about your privacy

We are always interested in hearing and responding to questions and concerns at twitter.com/brave and at github.com/brave. More in-depth conversations can be had at community.brave.com.

We are represented in Europe by Brave Software Europe Ltd (based in the UK). You can contact our data protection officer and the rest of our privacy team at privacy@brave.com. However, from the 1st January 2021, given the UK’s exit from the EU, Brave has appointed an EU nominated representative and which you may contact if you would prefer not to contact Brave directly:

Brave EU Nominated Representative
Care of Castlebridge
Unit 7, 12 Mountjoy Square,
Dublin 1
Ireland

brave@gdprnomrep.eu

You can ask to know what information we have about you, update incorrect information, delete it, object to our use of it, or get a copy of it. If you’re in the European Union, you also have the right to complain to your local data protection authority (though everyone should have this right).

We’ll update this policy whenever we make material changes to our practices, and we’ll announce it to let you know.



  1. Some countries in the European Union have defined a child as any person under the age of 13. This varies from country to country, as provided for in Article 8(1) of the General Data Protection Regulation (GDPR). This policy uses the lowest age for consistency. ↩︎

  2. The Domain Name Systems (DNS) translates domain names such as Brave.com in to the IP addresses that web browsers use. Cloudflare is our DNS provider. See https://www.cloudflare.com/learning/dns/what-is-dns/. ↩︎

  3. Content Management Networks (CDNs) attempt to speed up websites by using servers near to the user requesting the site. Fastly is our CDN provider. See https://www.fastly.com/solutions/digital-publishing. ↩︎

Coming soon: Brave Search. A new search engine that respects your privacy.