Privacy & Security Overview
Privacy in Omni isn’t a mode you turn on — it’s the default state. Here’s the whole stack, layer by layer.
The five layers
| Layer | What it does | Default | Details |
|---|---|---|---|
| Content blocking | Blocks ads, trackers, popups | On | Ad blocking |
| Isolation | Private tabs in a separate context | On | Private tabs |
| Transport | Tor routing, WireGuard VPN | Off | Tor · VPN |
| Storage | AES-256-GCM encrypted vault | Opt-in | Vault |
| Session control | Burn everything in one tap | Ready | Fire Button |
Zero data collection
Omni ships no analytics, no crash reporting, no telemetry and no accounts. There is no Firebase, no OpenCensus, nothing that phones home. Your history, bookmarks, passwords and vault never leave your device.
The only network requests Omni makes are the ones you initiate: loading pages, updating filter lists, downloading FFmpeg on demand.
Encryption at rest
- The vault database is encrypted with SQLCipher (AES-256).
- Vault files use AndroidX EncryptedFile (AES-256-GCM) with keys in the hardware-backed Keystore.
- Passwords are stored in Keystore-backed encrypted preferences.