Noodle

Privacy

Noodle collects no data.

No telemetry, analytics, crash reports or accounts. There is no Noodle server.

What Noodle fetches on its own

The few requests Noodle makes by itself are plain downloads.

  • Ad blocking filter listsOnce a day.
  • Userscript updatesOnce a day for the scripts you installed, and you can turn the checks off.
  • Site iconsFetched without cookies.
  • SearchGoes to DuckDuckGo by default. You can pick another engine.

Off from the first start

Ad and tracker blocking is on from the start. So are these:

Third-party cookies

Sites can't follow you around through embedded content.

Ad APIs

Privacy Sandbox ad APIs and link auditing pings are off.

WebRTC leaks

Pages can't read your local network addresses through WebRTC.

What stays on your machine

Everything Noodle stores stays in your profile folder. History, bookmarks, the session, settings, the canvas, userscripts and their saved values are in an SQLite database encrypted with ChaCha20, and canvas pictures are in a second encrypted database.

The key is protected by the operating system keychain (DPAPI on Windows), or by a master password if you set one, which also adds an unlock screen and auto lock. Installed builds encrypt cookies too.

The page cache and site storage (localStorage and IndexedDB) are kept by the browser engine and aren't encrypted by Noodle, so disk encryption such as BitLocker is still worth having.

This website

This site sets no cookies, runs no analytics and loads nothing from other servers. The fonts, pictures and scripts all come from here. If you switch the theme or turn on Classic 98, the choice is kept in your browser's local storage and never leaves it.