LAST UPDATED April 23, 2019

Brave Websites, Forums, and Email Privacy Policy

Read this document to understand how Brave Software (“us”, “we”, “Brave”, etc.) use data to operate its websites, forums, and communications. To learn how we use data for the Brave Browser, see the Brave Browser Privacy Policy. To learn how we use data for publishers and creators, see the Publisher Privacy Policy.

Infrastructure

Brave websites are hosted on infrastructure we operate, and on infrastructure operated on our behalf by Amazon, Heroku (a Salesforce company), and Fastly. Fastly’s infrastructure is designed to be as close to you as possible — probably in the same country as you, though this is not guaranteed. The rest of this infrastructure is located in the United States, which is where information is processed and stored. Amazon, Heroku, and Fastly are certified under the EU-US Privacy Shield agreement, which provides safeguards intended to be equivalent to those provided in the EU. See data processing details.

Community forums

Co and forum.batcommunity.org are forums on which you may post and publicly communicate with other Brave users and community-members. Brave runs these forums, and they are hosted on its behalf by Civilized Discourse Construction Kit. Their privacy policy describes how they use your data to host the forum for us. The IP address of all server requests are stored for no more than 30 days. We have access to the information that you make available on the forum, and can use this to administer the forum. Information about how Discourse keeps your data safe is available here. All of Discourse’s code is open source and subject to public inspection. If you are a user you can access or delete your account (and related data) in the “preferences” panel at co. You can also contact us to request the transfer of your personal data to you or to a third party. See data processing details.

Advertising Brave to people using Facebook, Google, and Twitter

Brave uses Facebook, Google, and Twitter ads to attract new users. Brave does not track people on Facebook, Google, or Twitter, or use any kind of in-app or Brave-server post-install tracking. See data processing detail. These ads link to pages on a separate website run by a company called Unbounce on Brave’s behalf, on servers based in the EU. See data processing details.

Children

Children under the age of 131 are not permitted to use the website, sign up for email updates, join the community forum, or send Brave any other information. If you have reason to believe that a child under the age of 13 has interacted with the website, please contact . In that case, we will do our best to remove all related records.

Support

If you send a support enquiry to Brave, we will only use the information you provide to resolve your enquiry.

Users of Brave websites

Purpose of processingCategories of personal data processedLegal basis of processingDuration of storage
To provide efficient access to Brave websites on the Internet IP address, user agent Our interest in providing a fast-loading website. The data are used in a way that does not negatively affect your rights or interests. Cloudflare DNS2 log is 1 week. Fastly3 only logs aggregated data unless an IP address is suspected of security threat.

Users of the Brave or Bat Community forums

Purpose of processingCategories of personal data processedLegal basis of processingDuration of storage
To operate the forum, including improving it based on feedback and use. IP address, user agent (version number of your operating system version and browser), community pages visited, incoming and outgoing links, reading times per post, user profiles viewed, likes given and flags being requested, registration IP addresses, posts that you write, pseudonym or real name, profile photo Necessary for the performance of a contract between us (and necessary for us to provide the requested service). The time necessary to deliver the requested service.
To send user-requested notifications or respond to user questions E-mail address, pseudonym or real name Necessary for the performance of a contract between us (and necessary for us to provide the requested service). The time necessary to deliver the requested service.
To provide customer service and support IP address, user agent (version number of operating system version and browser), community pages visited, incoming and outgoing links, reading times per post, user profiles viewed, likes given and flags being requested, registration IP addresses, posts that you write, pseudonym or real name, profile photo Necessary for the performance of a contract between us (and necessary for us to provide the requested service). The time necessary to deliver the requested service.
To display ongoing community conversations that include posts from members who have left the community. Posts by former members (these may no longer be personal data because once user name is removed the former user may no longer be identifiable) Our interest in maintaining an unbroken community conversation. The data are used in a way that does not negatively affect your rights or interests. Until the forum closes.

Advertising Brave to people using Facebook, Google, and Twitter

Purpose of processingCategories of personal data processedLegal basis of processingDuration of storage
To market Brave to prospective users who use Facebook and Google websites and apps. For Facebook: Facebook ID (not available to Brave, and used by Facebook for people logged in to Facebook), actions on Facebook, location, age, gender, previously visited website, device details. For Google: Google ID (not available to Brave), keywords used in searches, and interests determined by Google based on what the person has done and browsed (“affinity audiences” and “custom intent audiences”). Legitimate interest. Brave’s interest is to attract users, and to defend those users’ privacy over the long term. Everybody has an interest in gaining protection from online surveillance. Therefore, Brave uses advertising on Facebook and Google to offer its service to people whose privacy and data rights are currently unprotected. Brave does not receive or store data. Google or Facebook store the data until the user deletes their Google or Facebook account.
To market Brave to prospective users using variations of landing pages that cater to their interests. Unique ID assigned by Unbounce, unique ID assigned by Facebook, referral URL. Country/region, timezone, operating system, device, browser, ID, IP address, timestamp, page variant visited. Legitimate interest. This might seem unusual, but consider the following. Brave’s interest is to attract users, and to defend those users’ privacy over the long term. Everybody has an interest in gaining protection from online surveillance. Therefore, Brave uses advertising on Facebook and Google to offer its service to people whose privacy and data rights are currently unprotected. Unbounce stores the data for 184 days.

Research and product development

Purpose of processingCategories of personal data processedLegal basis of processingDuration of storage
To receive user testing responses (from survey and tests in person) Name, contact details, responses to survey questions about use of Brave Browser Consent 1 year
To send Brave Beta Testers new software E-mail address, Name Consent The duration of a person’s participation in Brave Beta Testing

Correspondence/contact/competitions

Purpose of processingCategories of personal data processedLegal basis of processingDuration of storage
To run occasional contests E-mail address, IP address Consent The duration of an individual contest.
General correspondence Data sent by the person communicating. Our interest in correctly responding to users, and maintaining good relations with them. The data are used in a way that does not negatively affect your rights or interests. Indefinite.
To respond to requests for customer support IP address, email address, data submitted in a support request Legitimate interests of Brave and the customer The time needed to resolve the customer support query

Contacting Brave about your privacy

We are always interested in hearing and responding to questions and concerns at twitter.com/brave and at github.com/brave. More in-depth conversations can be had at co.

You can contact our data protection officer and the rest of our privacy team at . We are represented in Europe by Brave Software Europe Ltd.

You can ask to know what information we have about you, update incorrect information, delete it, object to our use of it, or get a copy of it. If you’re in the European Union, you also have the right to complain to your local data protection authority (though everyone should have this right).

We’ll update this policy whenever we make material changes to our practices, and we’ll announce it to let you know.



  1. Some countries in the European Union have defined a child as any person under the age of 13. This varies from country to country, as provided for in Article 8(1) of the General Data Protection Regulation (GDPR). This policy uses the lowest age for consistency. ↩︎

  2. The Domain Name Systems (DNS) translates domain names such as Brave.com in to the IP addresses that web browsers use. Cloudflare is our DNS provider. See https://www.cloudflare.com/learning/dns/what-is-dns/. ↩︎

  3. Content Management Networks (CDNs) attempt to speed up websites by using servers near to the user requesting the site. Fastly is our CDN provider. See https://www.fastly.com/solutions/digital-publishing. ↩︎