Privacy Policy

Browse by Dart Technologies ("Browse") is a web browser for Android Automotive OS. This policy explains what information Browse handles, why, who receives it, how long it is kept and the choices you have. It covers Browse 1.36.62 and later from in-vehicle app stores, and this website.

Dart Technologies, Inc. ("Dart Technologies", "we", "us") is the controller of the information described here. Questions go to privacy@dart.art.

At a glance

• No account, no ads in the app, no location access. Browse never reads your device's location and declines every website request for it.
• Your history, cookies and site data stay in the car. They're stored on your vehicle's head unit, not sent to us.
• We receive pseudonymous diagnostics. Browse sends usage analytics and crash reports so we can keep it working. Analytics record the sites you visit, cut down to the site's address (for example https://example.com), never full web addresses or page titles.
• We don't sell your information or use it for advertising.

Information that stays in your vehicle

Browse keeps the following on the head unit only:

• Browsing history and open-page state for Back, Forward and the press-and-hold history menu. The engine keeps up to your last 50 pages and restores them after a restart; the saved state can include text you typed into forms on those pages.
• The last page you visited, so Browse can reopen it.
• Cookies, cache and site data that websites store, in Browse's private engine profile.
• App settings.

Browse doesn't save passwords. Clearing Browse's storage in your car's app settings, or uninstalling Browse, deletes all of this.

Information Browse sends us

Usage analytics

To understand how Browse is used and to find problems, Browse sends analytics events to Segment, which forwards them to Mixpanel. Events can include:

• Screens shown and controls used, such as Back, Forward, Reload and the history menu.
• The website you're viewing, reduced to its scheme and host (for example https://example.com). Never the full address, path or search terms, and never the page title.
• How many characters you typed in the address bar, but not the text. The type of a website's dialog (alert, confirm or prompt), but not its text.
• Page-load errors, connection changes, and timings such as how long Browse took to start.
• The kind of permission a website asked for (for example location) and the site's host.
• That media was paused for a phone call (see Vehicle and phone signals).
• When driving restrictions start and end, when the vehicle's parked state changes, and which kind of display Browse runs on (for example the driver's display or a rear-seat display).
• App version, Android version, and device and network details such as the head unit's manufacturer, model, processor, memory, screen size, language, time zone and connection type.
• Pseudonymous identifiers: a random ID that Browse creates when it's first opened, and a hashed identifier that the analytics library derives from your vehicle's DRM (Widevine) system. The random ID resets when you clear Browse's storage. The hashed identifier is calculated from the head unit's hardware and stays the same.

Analytics never include your typed text, website content, form entries, passwords, vehicle speed or gear, or your device's location.

Network address and approximate location. Like any internet service, Segment and Mixpanel receive the network (IP) address that each report comes from. Mixpanel can use it to estimate an approximate location, such as country, region and city, which it stores with the events.

Crash and performance reports

When Browse crashes or hits an error, it sends a report to Sentry, stored in Sentry's United States region. Reports contain technical details such as the error and stack trace, app and Android versions, device model and memory state, recent app events (with web addresses reduced to the site, as above) and a random installation identifier. Browse also sends performance timings, such as how long the app takes to start.

Browse is configured so that Sentry receives no screenshots, no screen recordings (session replay is off), no view hierarchy and no default personal information. Like any internet service, Sentry receives the network (IP) address each report comes from. Crash reports produced by Android's native layer, such as an engine crash, describe the app's technical state at that moment.

Information websites and services receive

When you visit a website, it receives the information needed to load it, including your network (IP) address, and it may set cookies or collect what you enter. Each website's own privacy policy applies.

• Search. Searches you type in the address bar are sent to Google Search, and Google's privacy policy applies to them.
• Cookie banners. Browse uses the engine's built-in cookie-banner handling to clear many consent pop-ups. Where a site offers a choice, Browse declines non-essential cookies. Where a site offers only an "accept" button, Browse may accept to dismiss the banner.
• Website permissions. Browse declines website requests for your location, notifications and similar permissions automatically. Videos can start silently on their own, but sound needs a tap. To play protected video, Browse lets sites use Android's protected-media (DRM) system, which exchanges licence requests with the streaming service.
• Voice search is handled by your car's voice assistant, which passes the recognized text to Browse. Browse doesn't access the microphone or camera.
• The browser engine's own services. Like Firefox, the GeckoView engine can contact services run by Mozilla and Google to keep browsing safe and working. For example, it can download lists of dangerous sites from Google Safe Browsing (and, when a page matches an entry, send a shortened hash of its address to check it), download cookie-banner rules and security data from Mozilla, and check website certificates with the authorities that issued them. These requests carry your network (IP) address and can show which sites' certificates are being checked, but they don't include full page addresses.

Vehicle and phone signals

To keep you safe, Browse reads your vehicle's driving-restriction state, gear, parking brake and, where the vehicle gives it access, speed, on the head unit. These signals decide when to pause playback and show the driving notice on the driver's display. Browse also identifies which display and seat it is running on, so passenger displays can keep browsing. Raw driving signals are not sent to us; analytics record only when restrictions start and end, when the parked state changes, and the display type.

If your vehicle lets Browse see whether a phone call is in progress, Browse pauses playback during calls and records that it did. It never reads numbers, contacts or call history.

How we use information

Information that stays in your vehicle, and the raw vehicle and call signals, are processed by the app on the head unit to make it work; we don't receive them. For the information we do receive:

Purpose	Information	Legal basis (EEA and UK)
Find and fix crashes, errors and slowdowns	Crash and performance reports, analytics	Our legitimate interest in a reliable, secure product
Understand which features are used and improve them	Analytics	Our legitimate interest in improving Browse
Answer your questions and requests	What you send us	Our legitimate interest in responding to you
Meet legal obligations and protect our rights	Any of the above, as needed	Legal obligation, or our legitimate interests

We don't use your information for advertising, we don't sell it, and we don't share it for cross-context behavioural advertising.

Who receives it

We use these service providers, which process information on our behalf under contract:

Provider	Role	Location
Segment (Twilio Inc.)	Receives analytics events and forwards them to Mixpanel	United States
Mixpanel, Inc.	Stores and analyzes analytics events	United States
Sentry (Functional Software, Inc.)	Stores crash and performance reports	United States
Vercel Inc.	Hosts this website and its visit statistics	United States and global edge network

Their privacy policies: Twilio/Segment, Mixpanel, Sentry, Vercel.

We may also disclose information if the law requires it, to protect the safety, rights or property of people or of Dart Technologies, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to it.

International transfers

Our service providers process information in the United States. Where data protection law requires it, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework and its UK and Swiss extensions.

How long we keep it

• On your vehicle: until you clear Browse's storage or uninstall it.
• Analytics events: while they help us understand and improve Browse, and then deleted. They are pseudonymous: linked to the identifiers described above, not to your name.
• Crash and performance reports: deleted automatically when they reach the retention period of our Sentry plan.
• Messages you send us: as long as needed to answer you and to meet legal obligations.
• Website visit statistics: kept only in aggregate. See This website.

Your rights and choices

Everyone. Browse has no in-app switch for analytics or crash reporting. Uninstalling Browse stops all collection. Clearing Browse's storage deletes your on-vehicle data and resets the random identifier. You can ask us about, correct or delete information we hold by emailing privacy@dart.art.

EEA, United Kingdom and Switzerland. You have the right to access, correct or erase your personal data, to restrict or object to its processing (including processing based on our legitimate interests), and to data portability. You can also complain to your local data protection authority.

India. Under the Digital Personal Data Protection Act, 2023, you have the right to obtain a summary of the personal data we process and the processing activities, to have it corrected, completed, updated or erased, to nominate another person to exercise your rights if you die or become incapacitated, and to have grievances redressed. Contact our Grievance Officer at privacy@dart.art. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

United States and other regions. Depending on where you live, you may have similar rights to know, access, correct or delete personal information. We don't sell personal information or share it for targeted advertising, and we won't treat you differently for using your rights.

Because Browse has no accounts, we usually can't link analytics or crash reports to a person. When you contact us, we may ask for details that help us find records from your vehicle, such as the approximate times you used Browse and the head unit's model, and we'll tell you if we can't identify any. We respond within the time limits set by applicable law.

Children

Browse is not directed at children, and we don't knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@dart.art and we'll delete it.

Security

Browse sends analytics and crash reports over encrypted connections (HTTPS). We limit access to the people who need it to run and improve Browse. To report a vulnerability, see our security policy.

This website

browse.dart.art sets no cookies and loads no third-party trackers. It is hosted by Vercel, whose servers process your IP address and request details to deliver pages and protect the service. We use Vercel Web Analytics to count visits. It records page views without tying them to you or your IP address, and recognizes a visit only by a hash of the request, which is discarded after 24 hours.

Changes

We'll post any change to this policy on this page and update the effective date.

Contact

Dart Technologies, Inc. · privacy@dart.art