NJOL — DATA AND EXTERNAL SERVICES NOTICE
Revision 22 October 2026 · njol borealis 0.3.74
Publisher: Marco Marfè · Privacy/security: admin@projectnjol.com · Support: gunko@tuta.com

MICROSOFT DEFENDER SMARTSCREEN
njol includes Microsoft Defender SmartScreen, enabled to check website and download reputation. This feature collects and sends the user's information to Microsoft as disclosed in the Microsoft Privacy Statement and Microsoft Edge privacy whitepaper:
https://privacy.microsoft.com/privacystatement
https://learn.microsoft.com/en-us/microsoft-edge/privacy-whitepaper#smartscreen

WEBVIEW2 ENGINE AND DIAGNOSTICS
This release uses Microsoft Edge WebView2, based on Chromium. Microsoft collects required diagnostic data and optional data according to Windows settings. Engine crashes may send reports and crash dumps to Microsoft. The absence of njol's own analytics does not eliminate Microsoft's data flows.
Optional data: Windows Settings > Privacy & security > Diagnostics & feedback > Diagnostic data. Turning optional data off does not disable required data or SmartScreen.
https://learn.microsoft.com/en-us/microsoft-edge/webview2/concepts/data-privacy

ON YOUR DEVICE
Collections, Pins, bookmarks, preferences, history and the download log are stored in the local Windows profile. njol state is protected with Windows DPAPI for the current Windows user. WebView2 separately manages cookies, cache, website storage and passwords. There are no njol accounts or cloud synchronization in this build. Local protection is not a guarantee against malware or access to your Windows account.
Profile location: %LOCALAPPDATA%\IntegrataPrototype. The UI history keeps up to 500 entries; the download log keeps up to 100. These limits do not clear website storage or caches. You can clear history in the History panel. To remove all local data, close njol and remove its profile: this also loses saved passwords, logins, Pins and bookmarks. Updating preserves the profile. Downloaded files remain in their chosen folders. Do not send your profile to support.
Turning off “Offer to save passwords” does not delete passwords already saved. This preview does not yet provide a complete manager for selectively deleting all site data.

CONNECTIONS AND YOUR CHOICES
Websites you open receive your IP address and the data their services require. Their own notices apply, including sites opened from Pins. Default Pins do not load websites until opened.
DuckDuckGo is the default search provider. Settings can select Google, Bing, Brave Search or Yahoo for address-bar searches. This does not change the optional DuckDuckGo online-suggestion service. Searches are sent to the selected provider when submitted. Online address-bar suggestions are described below.
ChatGPT and Claude open their websites and copy your question to the Windows clipboard. You choose whether to paste and send it. Windows clipboard history/sync, if enabled, can retain or synchronize this text. No njol API key or autonomous agent is included.
HaGeZi filters ship in the package and are matched locally. We do not send your browsing history to the list maintainer. Blocking does not guarantee removal of every advertisement or tracker.
Automatic updates are initially enabled. They check the configured local channel or GitHub (saenagi/njol-releases) and download available packages. GitHub and its delivery networks receive connection data such as your IP and file requests. Your njol profile, history and passwords are not sent. The update check can happen before this notice. You can disable njol updates in Settings. Microsoft manages WebView2 runtime updates separately.
Automatic mood uses your computer's local time, not geolocation. Supported site permissions, such as camera and microphone, are requested for the website and can be denied.

CONTACTS AND SCOPE
This build has no njol advertising, own analytics, payment processing or automatic profile collection by the publisher. Messages or attachments you voluntarily send to gunko@tuta.com are nevertheless received by the recipient and the email service. Avoid passwords, cookies and unnecessary personal data. Use admin@projectnjol.com for privacy questions or requests concerning messages you have sent.
This notice describes the software. It does not replace notices from websites, Microsoft, GitHub or Tuta, or the future commercial website/subscription service privacy notice. “I've read this” only records the notice revision in your local profile; it is not consent to marketing or profiling.
GitHub: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement
Microsoft WebView2: https://developer.microsoft.com/en-us/microsoft-edge/webview2/

ADDRESS BAR SUGGESTIONS (0.3.54)
With Online search suggestions enabled (initial setting), search text entered in the address bar is sent over HTTPS to DuckDuckGo after a short typing pause. DuckDuckGo receives the text and connection metadata such as IP address. njol does not send browser cookies, history, Pins or bookmarks. Recognized addresses, URLs and email-shaped input are excluded. Disable the option in Settings to keep only local suggestions. The last 200 confirmed addresses/searches are stored in the DPAPI-protected local state; Clear history also deletes them.

Protection panel: only counts and up to 64 blocked hostnames per page are kept in memory, without URL paths or query parameters. These details clear on navigation or tab closure and are not sent to external services. Temporary pauses end when the browser closes; saved site exceptions and Standard/Extended level remain in the protected local preferences. HaGeZi lists are bundled with signed browser updates.

EMAIL CONTACT FROM VERSION 0.3.72
The form and FormSubmit transport have been removed. The panel only shows gunko@tuta.com with Open email app and Copy address. The browser collects no message text, sends no messages and adds no versions, diagnostics, browsing data or attachments. Open email app passes only mailto:gunko@tuta.com to the Windows email handler after explicit activation of that button. You write and choose whether to send in your own app; the browser cannot confirm or guarantee delivery. Copy address puts only the address on the clipboard; Windows clipboard history or sync may retain it. Opening this panel does not contact FormSubmit, Tuta or another email service. Opening your email app may trigger that app’s normal connections. Seen feature highlights remain in protected local preferences.


REQUEST HANDLING AND RIGHTS
Purposes, legal bases and retention
For processing controlled by the publisher, the purposes are operating and securing the site, handling voluntary support and feature requests, and investigating vulnerabilities. The intended basis is legitimate interest (GDPR Article 6(1)(f)): delivering the requested service and responding to people who contact the project, with limited data and no marketing reuse. Applicable legal obligations use Article 6(1)(c). Email contact is voluntary and does not subscribe you to marketing. Messages should be retained only while the request, associated fix or a specific legal need remains active, then deleted or stripped of identifying details. No universal mailbox deletion deadline or automatic purge has been implemented; requests for deletion can be sent to the contact above. The infrastructure providers’ exact log retention and contractual roles remain under verification. Supplying feedback is optional and does not affect use of the browser; without a reply address a personal response is not possible.

Providers, contracts and transfers
Website hosting: OpenAI Sites publishes a data processing agreement for hosted-site data. It describes OpenAI as processor for that data; for EEA users it identifies OpenAI Ireland Ltd as contracting party. It provides for subprocessors and standard contractual clauses or adequacy decisions for transfers outside the EEA. Cloudflare appears on the subprocessor list. The hosted-site agreement is distinct from processing AI development inputs. Account-specific terms and operational log retention still need confirmation.
https://openai.com/policies/chatgpt-sites-data-processing-addendum/
https://openai.com/policies/sub-processor-list/

Email and historical copies: messages you voluntarily send using your email app are received by Marco Marfè and the Tuta email service, as well as services chosen by the sender. gunko@tuta.com is the support contact at the same mailbox used by public contact admin@projectnjol.com; this software change creates no alias or account and does not change the email plan. The applicable email plan and processing arrangement still need verification. Versions before 0.3.72 may still submit through FormSubmit if not updated: removing code from this version does not disable those older executables or erase submissions already retained by the provider or mailbox copies. Contractual terms and retention of historical copies have not been fully verified. Contact admin@projectnjol.com about messages already sent. We do not claim automatic deletion, EU-only processing or completed contractual verification.

Your rights
For personal information controlled by Marco Marfè, contact admin@projectnjol.com (mailto:admin@projectnjol.com) to request access, correction, deletion, restriction, or to object to processing based on legitimate interest. Portability applies where its legal conditions are met. Where consent is used, it can be withdrawn without affecting earlier lawful processing. These rights have legal conditions and exceptions. Requests normally receive a response within one month; a permitted extension must be explained within that month. You can complain to the Italian Garante (https://www.garanteprivacy.it/home/i-miei-diritti/diritti) or your competent supervisory authority. njol does not make automated decisions producing legal or similarly significant effects about feedback senders. Local browsing data is not held by the publisher and cannot be retrieved by emailing support.

Website notices and preview terms: https://projectnjol.com/privacy.html · https://projectnjol.com/terms.html