Privacy browser for Windows · v0.5.0
Vulpine is built on Chromium. It blocks ads, trackers and fingerprinting before a request leaves your machine, then lists exactly what it caught, page by page.
Measured with Vulpine 0.5.0 on 31 October 2026. The lists update daily, so these move.
Live check
Read from your own browser as this page loaded, using nothing that needs your permission. None of it was sent anywhere. The last column is what a site reads in Vulpine instead.
| Signal | This browser | In Vulpine |
|---|---|---|
| Canvas fingerprint | Your browser: … | ChangedNoise is mixed into the pixels, so the value a site reads is not your real one. |
| Graphics card | Your browser: … | ChangedReports Intel Iris OpenGL Engine, the same as every other Vulpine. |
| CPU cores | Your browser: … | ChangedReports 4, 6 or 8. |
| Device memory | Your browser: … | ChangedReports 8 GB. |
| Browser plugins | Your browser: … | ChangedReports none. |
| Audio fingerprint | Your browser: … | ChangedAudio samples are scaled by a few parts in a million before a page can read them. Inaudible, but it changes the fingerprint. |
| Battery level | Your browser: … | ChangedThe API is gone. Asking for it fails the way it does in Firefox and Safari, which both dropped it years ago. |
| Automation flag | Your browser: … | ChangedReports false. |
| Do Not Track | Your browser: … | ChangedSent on every request, by default. |
| Global Privacy Control | Your browser: … | ChangedSent on every request, by default. Unlike Do Not Track, it is legally binding in California and parts of the EU. |
| Cookies | Your browser: … | ChangedFirst-party cookies work as normal. Third-party cookies, the ones used to follow you between sites, are blocked by default. |
| Screen size | Your browser: … | SameUnchanged. Sites use it to lay out the page, so a false answer breaks them. |
| Time zone | Your browser: … | SameUnchanged. Clocks and calendars need the real one. |
| Languages | Your browser: … | SameUnchanged. Sites use it to pick which language to show you. |
| IP address | Your browser: … | SameUnchanged. Every site you open sees it, and no browser setting changes that. A VPN or Tor does. |
0 of 0 hidden or changed.
Shields
Shields cancels a tracker's request before it is sent, rather than hiding what it loaded. Every protection can be set for all sites, or for one.
The panel, as it opened on theguardian.com. The count beside the shield in the toolbar is the same number, live, on every page.
The whole result of that run, not a selection. A host is listed as stopped if any of its requests were; a site's own host appears there when one of its requests was an ad slot. Pages change, so the same page on another day stops a different number.
How it works
Every request goes through them in this order, inside the browser. One stopped at any of the first three never leaves your machine.
Hosts-style rules: 76,976 domains from the downloaded list, a built-in seed list, and any rules you add.
stops it, orThe filter lists inside blockers you install, such as uBlock Origin Lite, enforced by Shields.
stops it, orFull Adblock Plus syntax from EasyList, EasyPrivacy and Fanboy’s cookie list, through the filter engine Brave publishes.
stops it, orTracking parameters come off page addresses, and http:// is upgraded to https://.
rewrites itThird-party cookies are dropped, a cross-site Referer is trimmed to the origin, and Do Not Track and GPC are sent.
then sends itFeatures
Built on Chromium, so sites work as they do in Chrome. What Vulpine adds sits around that.
Sites can identify you without cookies, from how your machine draws and what it reports. Vulpine alters those readings for each session, so the value a tracker reads is not yours.
DNS-over-HTTPS through Cloudflare, Quad9, Google, AdGuard, Mullvad or your own resolver, strict if you want it to fail rather than leak. Proxies: system, direct, manual (SOCKS included) or PAC.
A separate session in memory, with a tinted toolbar so you always know which window you are in. No history is written, and its new tab page shows none of yours.
Install from the Chrome Web Store or Firefox Add-ons. Before you do, Vulpine says whether the extension will actually work, in words like these:
Blocking works: its filter lists are loaded and enforced by Shields.
Will not work: it blocks using the MV2 webRequest API, which this browser does not implement. Shields does the blocking instead.
Should work.
Background tabs sleep and come back on click, with their history and scroll position. Not while you are typing in one, or it is playing.
427 MB
freed of 1,095 MB, in testing with six heavy tabs
Bookmarks and history import in one click. Nothing already in Vulpine is touched, and importing twice adds nothing twice.
Widevine L3 is included, so Spotify and YouTube rentals play. Netflix needs a signed build, which this is not, so it will refuse.
Why Vulpine
Every request it stops is counted on the page that made it and listed by host. You never have to take the blocking on trust.
See one page loadNo analytics, no telemetry, no crash reports, no identifier. The privacy policy lists every request the browser itself makes.
Read the listNo account needed, no rewards scheme, no ads of its own. It is a browser, and that is the whole product.
What it doesWhat it does not do is on this page too, in plain words, next to what it does.
What it is notWhat it is not
Download
Not released yet. When it is, the installer will be here, with its checksum.
It installs for your account only and needs no administrator rights. Start Menu and desktop shortcuts are created; it can be removed like any app.
It says Windows protected your PC because the installer is not code-signed yet. Choose More info, then Run anyway. The checksum is how you can check the file is the one published here.
In PowerShell, in your Downloads folder:
Get-FileHash .\Vulpine-Setup-0.5.0.exe -Algorithm SHA256
The expected value is published here alongside the installer.
Questions
Yes. It runs Chromium 150.0.7871.129 through Electron 43.2.0, so pages render as they do in Chrome. Shields, fingerprint protection and the rest are Vulpine’s own work on top.
The installer is not code-signed, so SmartScreen does not recognise it. That costs money or a Store listing, and neither is in place yet. Choose More info, then Run anyway, and compare the checksum if you want to be sure of the file.
No. There is no analytics, telemetry, crash reporting or identifier. The browser does fetch filter lists and checks for updates, and the privacy policy lists every request it makes and what is in it.
Yes, from the Chrome Web Store or Firefox Add-ons. Vulpine tells you before installing whether one will work. Modern ad blockers work, because Shields enforces their filter lists; older ones that filter with their own code cannot work in Electron.
No. Vulpine includes Widevine L3, which is enough for Spotify and YouTube rentals. Netflix also requires the build to be signed with castlabs’ VMP tooling, which this build is not.
Yes, from Chrome, Edge, Brave, Vivaldi and Firefox, on the same computer. Settings shows what each holds before you import, and nothing already in Vulpine is changed.
It checks for a new version on start and once a day, downloads it in the background and applies it when you quit. Filter lists and extensions from the stores are refreshed daily too.
Not yet. Only Windows has an installer. Parts of the browser already build for macOS and Linux, but nothing is published for them.
No independent review has been done. The repository has 326 unit tests and 39 Rust tests, and the browser’s own privileged pages are sandboxed, but that is not the same thing as an outside audit.
