This policy explains what personal data Hunt Browser, the Hunt extension, our websites and our Rewards programme collect, why we collect it, how long we keep it, who we share it with, and the choices and rights you have. It is organised feature by feature, so you can read only the parts you use.
Who we are
Hunt Browser is run by Newtact Lab Private Limited (OPC), a company registered in India (CIN U72200TG2015OPC097632), with its registered office at 12th Floor, Manjeera Trinity Corporate, Geek Space Business Centre, Near Lulu Mall, KPHB Phase 3, Hyderabad, Telangana 500072, India. In this policy, "Hunt", "we" and "us" mean that company. Under India's Digital Personal Data Protection Act 2023 (the "DPDP Act"), we are the Data Fiduciary for the personal data described here.
Our sister company, Thaja FZE LLC, a company registered in the Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates (hello@thaja.net), runs Hunt's products outside India and sells our paid products there. It receives only what it needs for that (for example an advertiser's billing details), and handles it under this policy.
This policy covers:
- Hunt Browser for Windows, Mac, Android, iPhone and iPad (where available);
- the Hunt extension for Chrome and Edge;
- huntbrowser.com and its pages, including sign-in;
- Hunt Rewards, offers, shopping rewards and games;
- the advertiser portal at ads.huntbrowser.com.
It does not cover the websites you visit with Hunt, or partners whose own services you choose to use (for example an offer partner or a shop). Their own privacy policies apply.
How to contact us about privacy
| Role | Who | Contact |
|---|---|---|
| Privacy contact (answers questions about your personal data) | Naveen Kumar Davuluri | hello@huntbrowser.com |
| Grievance Officer | Naveen Kumar Davuluri | hello@huntbrowser.com, +91 99890 56789 |
| Postal address | Newtact Lab Private Limited (OPC) | 12th Floor, Manjeera Trinity Corporate, Geek Space Business Centre, Near Lulu Mall, KPHB Phase 3, Hyderabad, Telangana 500072, India |
More about complaints and timelines is on our Grievance Redressal page.
The short version
- We don't read your browsing history or the pages you visit. The ad and tracker blocker runs on your device.
- We don't sell your personal data.
- Most things stay on your device: your history, your to-do list, price history and blocker counts.
- Sync is end-to-end encrypted with a passphrase only you know. We cannot read your synced bookmarks.
- AI features only see a page when you ask them to.
- Usage statistics can be switched off. Crash reports are off unless you turn them on.
- No tracking, behavioural monitoring or targeted advertising for anyone under 18. Rewards are for adults only.
- Sponsored items are always labelled "Sponsored". They are chosen by country, platform and how you installed Hunt, not by a profile of you.
What we collect, feature by feature
Installing and using Hunt
When you install Hunt Browser or the extension, it creates a random install ID (we call it a CLID). It is not linked to your name, phone or email unless you sign in. With it we receive:
- the browser, its version, the extension version and your operating system;
- how you installed Hunt (for example from our website or a campaign link);
- your country, worked out from your internet connection (not your address).
Hunt Browser on a computer also sends a one-way hash of the device's own identifier, never the identifier itself. We use it to recognise a reinstall on the same computer and to stop people creating many accounts on one machine. We do not use it to follow you across websites.
Usage statistics. While "Share usage statistics" is on, Hunt sends small daily counts:
- active minutes (whether a Hunt window was in use, not what you did in it);
- the number of open tabs and new tabs opened;
- the number of searches made from the new-tab search box (not what you searched for);
- clicks on shortcut tiles and sponsored items;
- game sessions started in the games hub.
We use these counts to keep Hunt working, to understand which features are used, to count active users, to calculate Rewards points for browsing, to fight fraud, and to bill advertisers for impressions in total. You can turn usage statistics off in the Hunt menu (on phones, in Settings). While it is off, nothing is recorded or sent, and you will not earn browsing points.
When you uninstall the extension, the browser opens a short page on our website that tells us the install ID was removed.
Your Hunt account
You can use Hunt without an account. You need one for Rewards, AI features and Sync. To sign in you give us a mobile number or email address, and we send a one-time code. We keep:
- your mobile number or email address;
- a record of each sign-in, the one-time codes (stored only as a scrambled hash and valid for 10 minutes) and the IP address used when you signed up;
- the installs you have signed in on;
- your session, so you stay signed in (sessions last up to 180 days unless you sign out).
We use a Cloudflare Turnstile check on the sign-in page to stop automated sign-ups.
Hunt Rewards
If you join Rewards, we keep a points ledger for your account: each entry, its reason (for example "Daily check-in" or "Offer completed"), its date, whether it is pending, your tier, your streak and your daily limit. We also keep your referral code, who you invited (by account, not by contact list) and whether each referral qualified. Rewards are only for people aged 18 or over, so we also keep your confirmation that you are 18 or over.
The points rules are in the Hunt Rewards Terms. See the "Notice of Financial Incentive" in the California section below for how Rewards relates to your data.
Offers and offerwalls
When you open an offerwall from a partner such as AdGem or ayeT-Studios, we give the partner an opaque reference for your account. It is a random code, never your phone number or email. When you complete an offer, the partner tells us the reference, the offer, the points and whether it was confirmed or reversed. The partner may collect data about you inside its offerwall under its own privacy policy, which it shows you. More detail is in the Offers, Cashback and Affiliate Terms.
Shopping rewards, coupons and price tracking
The shopping bar appears only on shops we list, and the check is made on your device. If you press Activate, we send you to the shop through an affiliate link. That link includes the shop page you were on and your install ID as a reference, so the affiliate network can tell us about a qualifying purchase. We receive the order status and reward amount, not what you bought. Price tracking keeps the price history on your device; a daily check reads the price from the shop and shows you a notification if it drops.
Games
Games in the games hub are free to play. We count game sessions and simple milestones (for example "level finished") as statistics. Game results never earn points or prizes.
Sponsored content on the new tab
The new tab shows sponsored wallpapers, shortcut tiles, news-feed cards and, if you turn them on, sponsored notifications. Each is labelled "Sponsored". To choose and count them we use your country, platform, how you installed Hunt and the counts of impressions and clicks described under usage statistics. Impressions are deduplicated and counted per campaign. Advertisers only see totals. We do not build an interest profile from your browsing to target ads.
Sponsored notifications are off unless you turn them on. If you do, you see at most a few a day and earn extra points. You can turn them off at any time in the points panel. You never need them to earn other points.
News feed
The news feed on the new tab is on by default and can be switched off in Customize. To fill it, Hunt asks our server for stories by country, language and topic. We do not record which stories you read. Stories open on the publisher's own site, where the publisher's policy applies. If we later fill some feed slots through a content partner, those cards will be labelled "Sponsored" and the partner will be named in our Service Providers list.
Weather and other new-tab widgets
To show the weather, our server uses your approximate city, as Cloudflare sees it from your connection. It asks MET Norway for the forecast for a rounded location. MET Norway sees only our server, not you. We do not store your location; the forecast for the area is cached for 30 minutes. Your to-do list and notes stay on your device and are never sent to us. Shortcut tile icons are fetched by our server from the website you added, so that site sees our server, not you.
AI sidebar (Summarize and Ask AI)
AI features need an account and only run when you ask. When you press Summarize, or send a question with "Use this page" switched on, Hunt sends the page's text (or a video's captions) and your question to our AI service on Cloudflare Workers AI. Before reading a page for Ask AI, Hunt asks you to allow that site. We cache summaries of identical content for 7 days so the same page is not processed twice; questions and answers are not stored by us after the answer is made. The chat stays in your sidebar. We count how many requests you make each day to apply daily limits. More detail is in the AI Features Notice.
Sync
Sync is off unless you turn it on. Your bookmarks are encrypted on your device with a key made from your passphrase before they are sent. We store only the encrypted data, a version number and a non-secret salt. We cannot read your synced data and cannot recover it if you forget your passphrase.
Crash reports
Crash reports are off by default. If you turn on "Send crash reports to Hunt", the browser sends a crash report when it crashes: a technical snapshot of the crashed process (a minidump), the version and the platform. A minidump can contain fragments of what was in memory, which may include parts of a page you had open. We use crash reports only to find and fix crashes, and delete them after 30 days.
Ad and tracker blocker
The blocker runs entirely on your device, using filter lists built into Hunt and rule updates in Hunt's signed settings file. We do not receive the list of sites you visit or what was blocked. The blocked counter on the new tab is kept on your device.
Updates and settings
Hunt checks for updates and downloads its settings file (features, wallpapers, filter rule fixes) from our servers. These requests include the version, platform, release track and install ID so we can roll out updates in stages and keep old versions safe.
Safety and fraud prevention
To protect Rewards, partners and advertisers from abuse, we combine signals such as:
- several accounts on one install, or one browser reinstalled many times;
- many new accounts from one IP address;
- many installs on one computer (from the hashed device identifier);
- too many offer credits in a day;
- offers completed from a different country than usual;
- an install shared with a banned account.
These signals may lead to points being held for review or an account being frozen, as described in the Hunt Rewards Terms. A person on our team reviews a case before an account is closed for fraud, and you can ask for a review through the Grievance Redressal page.
Websites and the advertiser portal
Our websites set a few cookies needed for referrals, reinstalls, sign-in and security. We do not use advertising cookies or third-party analytics on our websites. Details are in the Cookie Policy.
Redemption (when it opens)
Redemption of points is not available yet. When it opens, we will need more data to deliver a reward and meet legal duties, for example a delivery email for a gift card, and where the law requires it, identity or tax details such as your PAN. We will update this policy and tell you exactly what is needed before you can redeem.
Advertisers
If you use the advertiser portal, we keep your business name, contact person, email, billing and tax details (such as GSTIN and PAN), your campaigns and creatives, your prepaid balance and every change to it, and records of our review. We use this to run your account, review ads, charge for delivery, issue invoices and meet tax law. The Advertiser Terms also apply.
Itemised list of personal data
| Data | Purpose | Basis | Kept for | Shared with |
|---|---|---|---|---|
| Install ID, browser, versions, operating system, install source, country | Run Hunt, count installs, updates, fraud prevention | Consent (usage statistics switch); legitimate use for security | While the install is active, then reduced to totals | Cloudflare (hosting) |
| Hashed device identifier (Hunt Browser on computers) | Spot reinstalls and multiple accounts | Consent; legitimate use for fraud prevention | While the install is active | Cloudflare |
| Daily usage counts (active minutes, tabs, new tabs, searches count, tile and sponsored clicks, game sessions) | Statistics, browsing points, advertiser totals | Consent (can be switched off) | Raw daily rows up to 3 months; totals after that | Cloudflare; advertisers see totals only |
| Mobile number or email address | Account, sign-in, service messages | Consent | Until you delete your account | Cloudflare (email), MSG91 (SMS) |
| Sign-in records, sign-up IP address, sessions | Security, fraud prevention, legal duty to keep logs | Legitimate use; legal duty | Account life, and logs at least 1 year | Cloudflare |
| Points ledger, tier, streak, check-ins, 18+ confirmation | Run Hunt Rewards | Consent (joining Rewards) | Account life, then as accounting and tax law requires | PlanetScale (ledger database), Cloudflare |
| Referral code and referral records | Referral points | Consent | Account life | Cloudflare, PlanetScale |
| Offerwall reference, offer completions and reversals | Credit offer points | Consent (opening the offerwall) | Account life | The offer partner you use |
| Affiliate click reference, order status, reward amount | Shopping rewards | Consent (pressing Activate) | Account life | The affiliate network and shop |
| Fraud signals and review notes | Protect Rewards, partners and advertisers | Legitimate use; legal duty | 3 years after the case is closed | Cloudflare |
| Page text, captions and questions for AI | Make the summary or answer | Consent (you press the button) | Not stored; identical summaries cached 7 days | Cloudflare Workers AI |
| Daily AI request count | Daily limits | Consent | Up to 3 months | Cloudflare |
| Encrypted Sync data, salt, version | Sync your bookmarks | Consent (turning Sync on) | Until you turn Sync off or delete your account | Cloudflare (we cannot read it) |
| Crash reports | Fix crashes | Consent (off by default) | 30 days | Cloudflare |
| Approximate city for weather | Show the forecast | Consent (weather widget on) | Not stored; area forecast cached 30 minutes | MET Norway receives only a rounded location from our server |
| Website cookies (referral, reinstall, sign-in, security) | Referrals, reinstall detection, sign-in, bot protection | Legitimate use; consent where required | Up to 400 days (see the Cookie Policy) | Cloudflare |
| Advertiser account, billing and tax details, campaigns | Run the advertiser account, invoices, tax | Contract; legal duty | Account life, then 8 years for accounts records | Cloudflare, our accountants |
| Messages you send us (support, grievances, rights requests) | Answer you and keep a record | Legitimate use (you sent it); legal duty | 3 years after the matter is closed | Cloudflare (email routing) and our mailbox provider |
"Consent" means you agreed, for example by turning a switch on or pressing a button, and you can withdraw it at any time. "Legitimate use" means a use the DPDP Act allows without consent, for example data you gave us for a stated purpose, or to meet a legal duty.
Hunt Browser for iPhone and iPad
- The app uses the same install ID and usage counts as the other Hunt apps (Settings → Share usage statistics turns the counts off). It doesn't use the advertising identifier and doesn't track you across other companies' apps or websites.
- Hunt AI answers on your device when Apple Intelligence is available; nothing leaves the device. Instant summaries are also made on the device. Hunt AI uses our servers only when you're signed in and ask a question; your question and the page's text are used for that answer and not kept. Private tabs never use the cloud.
- Searches go straight to the search engine; we only count that a search happened.
- History, bookmarks, open tabs, downloads and the offline morning edition stay on your device. The offline edition and the home-screen widgets fetch today's stories from our news feed and the publishers' own pages.
- The weather uses your approximate city from your connection. The app never asks for your location, contacts or photos.
- Topic alerts are notifications made on your device from our alerts list; we don't send push notifications.
- You can delete your account at any time in Settings → Account → Delete account, or on the web at huntbrowser.com/account/delete.
What stays on your device
These are kept only on your device and are never sent to us: your browsing history, your open pages, your to-do list and notes, price-tracking history, the blocker's counts, your AI chat history in the sidebar, and your Sync passphrase.
What we don't do
- We don't sell your personal data, or "share" it for cross-context behavioural advertising.
- We don't read your browsing history or keep a list of sites you visit.
- We don't fingerprint your device to follow you around the web.
- We don't give offer partners or advertisers your phone number or email.
- We don't use your data to train AI models.
- We don't track, behaviourally monitor or show targeted ads to anyone we know is under 18.
Who we share data with
We share data only with:
- service providers that process data for us under contract (hosting, storage, AI, SMS and email);
- partners you choose to use, such as an offer partner or a shop through an affiliate link, who act under their own policies;
- authorities, when Indian law requires it, for example a valid order from a court or a government agency;
- a buyer or successor, if our business is sold or merged, who must keep this policy's promises.
Each provider and partner is named in our Service Providers list. We will update that list at least 30 days before adding a new provider that handles your personal data, except in an emergency.
Transfers outside India
Some providers process data outside India. For example, Cloudflare runs a global network, and our points database runs on PlanetScale in the AWS Mumbai region. The DPDP Act allows transfers except to countries the Government of India restricts. We will not transfer personal data to a restricted country, and our contracts require providers to protect it.
How long we keep data
| Data | Retention |
|---|---|
| One-time sign-in codes | 10 minutes |
| Weather forecast for an area | 30 minutes (no personal data) |
| AI summary cache | 7 days |
| Crash reports | 30 days |
| Raw daily usage counts and daily AI request counts | Up to 3 months, then only totals |
| Sign-in logs, security logs and processing logs | At least 1 year, as the DPDP Rules require, including after an account is deleted |
| Account data (phone or email, installs, referral records) | Until you delete your account |
| Encrypted Sync data | Until you turn Sync off or delete your account |
| Points ledger | Account life, then as long as accounting and tax law requires |
| Fraud records | 3 years after the case is closed |
| Advertiser billing and tax records | 8 years after the financial year they relate to |
| Support, grievance and rights-request messages | 3 years after the matter is closed |
| Inactive accounts | Deleted after 3 years without sign-in, with at least 48 hours' warning first |
When a retention period ends, we delete the data or turn it into totals that cannot identify you.
How we protect data
We use encryption in transit and at rest, strict access controls for our team, access logs and monitoring, backups, and security clauses in our contracts with providers. Codes and session tokens are stored only as hashes. Sync data is encrypted on your device before it reaches us. If you find a security problem, please tell us through our Security and Vulnerability Disclosure Policy.
Your rights
Under the DPDP Act you have the right to:
- get a summary of the personal data we hold about you, how we use it, and who we shared it with;
- correct, complete or update your personal data;
- erase your personal data, unless we must keep it to meet a legal duty;
- withdraw consent at any time, as easily as you gave it, without affecting what was done before;
- have a grievance resolved by us;
- nominate another person to exercise your rights if you die or become unable to.
How to ask. Email hello@huntbrowser.com from the email address on your account, or write from your account in the app where that option is offered. To identify you, we need the mobile number or email address you signed in with, and we may send a one-time code to it to confirm the request is yours. If you never signed in, data is linked only to a random install ID, so we usually cannot find it from your name or number; you can stop all collection by turning usage statistics off or uninstalling Hunt. Most switches, such as usage statistics, crash reports, sponsored notifications and Sync, can be turned off yourself at any time.
Deleting your account deletes your account data and points. Points have no cash value and cannot be recovered after deletion. We will show you your balance before you confirm. You can delete your account in the app where that option is offered, or from any device at huntbrowser.com/account/delete, after confirming it's you with a one-time code.
How long we take. We acknowledge requests promptly and answer them within 90 days at the most, and usually much sooner. Our full timelines are on the Grievance Redressal page. Every reply includes the contact details of our privacy contact.
If you are not satisfied, you can complain to the Data Protection Board of India once you have used our grievance process.
Children and age
- Under the DPDP Act, anyone under 18 is a child.
- Hunt Rewards, offers, shopping rewards and sponsored notifications are only for people aged 18 or over. We ask you to confirm your age before you join Rewards.
- We do not track, behaviourally monitor or show targeted advertising to children. The basic browser can be used without an account and without any profile being built.
- An account for anyone under 18 needs the verifiable consent of a parent or lawful guardian. Until we offer a way to give that consent, Hunt accounts are only for adults.
- Children under 13 must not create accounts anywhere.
- If we learn that a child has given us personal data without the right consent, we close the account and delete the data, except what the law makes us keep.
- Parents and guardians can write to hello@huntbrowser.com.
If there is a data breach
If a breach affects your personal data, we will tell you without delay through your account or the contact details we hold. We will explain what happened, what it may mean for you, what we are doing about it and what you can do. We will also report it to the Data Protection Board of India and to CERT-In as Indian law requires.
Changes to this policy
We will update this policy when our features or the law change. The date at the top shows when the current version took effect, and earlier versions stay available on request. If a change matters, for example a new use of your data, we will tell you in Hunt before it takes effect and, where needed, ask for your consent again. We also remind all users of this policy at least once a year.
Language
This policy is in English. You can ask for it in any language listed in the Eighth Schedule to the Constitution of India by writing to hello@huntbrowser.com.
European Union and United Kingdom
This section applies only when Hunt offers its services to people in the European Economic Area (EEA) or the United Kingdom. We will name our EU and UK representatives here before we do.
- Controller. Newtact Lab Private Limited (OPC) is the controller of your personal data.
- Legal bases. We rely on: your consent (usage statistics, crash reports, Rewards, AI, Sync, sponsored notifications, non-essential cookies); contract (your account, Rewards and the advertiser portal); legitimate interests (security, fraud prevention and keeping Hunt working, balanced against your rights); and legal obligation (tax records, logs and answering lawful requests).
- Device storage. We ask for your consent before storing or reading anything on your device that is not strictly needed for a service you asked for.
- Transfers. When we transfer personal data outside the EEA or UK to a country without an adequacy decision, we use the European Commission's Standard Contractual Clauses and the UK Addendum.
- Your rights. You can ask for access, correction, erasure, restriction, portability, and object to processing based on legitimate interests. You can withdraw consent at any time. We answer within one month, which can be extended by two months for complex requests.
- Age. In the EEA the minimum age for an account is 16, or the lower age set by your country if that is 13 or more. Rewards stay 18+.
- Complaints. You can complain to the data protection authority where you live or work. In the UK this is the Information Commissioner's Office.
California
This section applies only to California residents, and only when the California Consumer Privacy Act (as amended by the CPRA) applies to Hunt.
Categories of personal information we collect (see the itemised list above for detail): identifiers (install ID, account phone or email, IP address); commercial information (points history, offer and shopping reward records); internet and device activity (usage counts, crash reports); approximate location (country, and city for weather, not stored); and inferences we do not make. We do not collect sensitive personal information for inferring characteristics about you.
Sources. You, your device, and partners you choose to use (offer partners and affiliate networks).
Sale and sharing. We do not sell your personal information and do not share it for cross-context behavioural advertising. We honour Global Privacy Control signals as a request to opt out of sale and sharing.
Your rights. You can ask to know, delete and correct your personal information, and to limit the use of sensitive personal information (we do not use any for that purpose). We will not discriminate against you for using your rights. You or an authorised agent can make a request by email to hello@huntbrowser.com. We will verify your request by sending a code to your account's phone or email.
Retention. See "How long we keep data" above.
Notice of Financial Incentive
Hunt Rewards is a financial incentive programme under California law, because you earn points in return for things that involve your personal information, such as usage statistics while browsing, opening offers and using shopping rewards.
- What you get: points as described in the Hunt Rewards Terms. Points have no cash value, and redemption is not available yet.
- What data is involved: your account details, the points ledger, daily usage counts, referral records, and offer and shopping reward records, as listed above.
- How to join: you opt in by joining Rewards and agreeing to the Rewards Terms. Joining is optional, and Hunt works without it.
- How to withdraw: you can leave Rewards at any time by deleting your account or writing to hello@huntbrowser.com. Points have no cash value and end when you leave.
- Value of your data: we estimate the value of a participant's data in good faith as roughly equal to the cost to us of the points they earn and the services we provide to them, because we use the data to run the programme and pay for it through advertising and partner commissions. We calculate this from our expenses for running Rewards, not from a sale of data.