Privacy

What goes out, and where.

We only wrote what we saw in the code and the settings. Where we are not sure, we say "we don't know".

In short

Telemetry is off. The crash reporter is not in the build. There is an automatic updater; it can be turned off and only talks to our server (see the table below).
The requests made by Vento's own shell code are limited to the table below; we added nothing else.
Page text goes to Esin only when you send a question. The default model keeps no prompt/response logs.
No API key in the browser; requests pass through our proxy.

Requests Vento makes

Network requests in Vento's own shell code
When	To	What goes
You type a search in the address bar and submit	The search engine you chose: duckduckgo.com by default, google.com if you pick it	The search text. If you choose Google, those searches fall under Google's privacy policy.
You open a site	That site	The normal web request any browser makes
You send a question to Esin	esin.cansoykanyilmaz.com → LLMTR → GreenPT	The question, the last messages of the chat, the text of attached pages
An update check (in the background when automatic updates are on, or Customize ▸ "Check for updates")	vento.cansoykanyilmaz.com	The URL carries only the build target and channel name (e.g. Darwin_aarch64-gcc3, vento); no version, ID or profile data. As with any web request the server sees your IP address. The update file downloads from the same server and its signature is verified.
First launch after an update	vento.cansoykanyilmaz.com/en/release-notes/	A normal page request (the version number is in the URL as ?v=). Opened once, only when the version goes up.
You click "more information" on an error page	support.mozilla.org	Only if you click; a link to the engine's help page

On certificate error pages, Firefox's default-on check against a Mozilla server (security.certerrors.mitm.priming) is turned off.

Esin

Details are on the Esin page. Summary:

Page text (first 20,000 characters per page, up to five tabs) and your question go only when you send it. The open tab is attached by default; remove it if you do not want it. You see what was sent under the answer.
Default model greenpt/gpt-oss-120b-eu: GreenPT, France (Scaleway). No training on inputs. According to LLMTR and GreenPT, no prompt or response is logged.
With Qwen models the provider may keep logs. They are not the default; if you pick one by hand in the Customize panel, the panel states this difference.
The proxy does not record content; it writes time, model, status, message count and duration. The web server's own access logs (IP address, time, URL; not content) depend on server configuration.
To count your daily allowance the proxy keeps a salted digest of your IP address only for that day's counter; the raw IP is not recorded and the digest is deleted the next day (details).
GreenPT models need a data-transfer approval in the LLMTR account; it is managed in Vento's account.

What we don't do

We do have servers: this site, the update files and Esin's proxy run on real, serious infrastructure. But we use none of it to watch you. We collect no usage data, clicks, browsing history or tab lists; your history, tabs and bookmarks stay on this Mac. Strong infrastructure, zero tracking: that is the whole point of Vento. The only things that reach our servers are what you knowingly send to Esin and, as with any web request, your IP address (detailed above and below).
There are no accounts, so nothing ties you to an identity.
No advertising or tracking partners.

This site

No cookies, no analytics, no trackers. Nothing is loaded from other servers; the fonts (Inter Tight and Fraunces, OFL) and images come from here too. The pages work without JavaScript; we use none. The web server's standard access logs (IP, time, URL) depend on the hosting configuration.

Not yet measured

Firefox's engine (Gecko) can make its own background requests (for example safe browsing, remote settings lists, network connectivity checks). We have not yet measured at the network level which of these actually fire in this version; we will update this section when we have. That is why we do not write a flat "it sends nothing".

Questions: info@cansoykanyilmaz.com