Privacy policy

Last updated 18 October 2026.

Breached collects no data. It has no telemetry, no crash reports, no accounts and no servers of its own, and nothing you do in it is sent to the Breached project. Your history, bookmarks, passwords and settings stay in your profile folder on your computer.

Connections Breached makes on its own

Besides the sites you visit, Breached talks to these services. Each one sees your IP address and the request, as any website would.

• Update check, GitHub. Once a day Breached asks api.github.com for the newest Breached release, and downloads it from GitHub if you choose to update. Turn the daily check off in settings > Updates.
• Security lists, Mozilla. Firefox's engine fetches revoked certificates and blocked extensions from Mozilla, and checks certificates with the site's certificate authority, so that dangerous sites and add-ons are stopped. These can be changed in about:config, but we recommend leaving them on.
• Extension updates, Mozilla. Extensions you install from addons.mozilla.org check there for updates. Remove an extension, or set extensions.update.enabled to false in about:config, to stop this.

Things that only happen when you ask

• Search. What you search for goes to the search engine you picked. Search suggestions are off unless you turn them on.
• Mods. Opening the mods site or installing a mod loads it from GitHub Pages.
• Protected video. If you add this mod, Breached downloads Google's Widevine module, and streaming sites use it as they would in Firefox.
• Firefox Sync. If you add this mod and sign in, your data syncs through your Mozilla account under Mozilla's privacy policy.
• Passwords with Bitwarden. The Bitwarden mod talks to your Bitwarden vault through Bitwarden's own bw program.

This website

This site is hosted on GitHub Pages and loads its fonts from Google Fonts, so both see your visit. The download buttons ask GitHub for the newest release. The site sets no cookies and runs no analytics.

Questions

Open an issue on GitHub.