This Privacy Policy describes data handling by Pace Browser and That1Dev's first-party Pace services. It does not govern independent websites, AI providers, Addons/extensions, search engines, streaming services, payment providers, or other third parties you choose to use through the browser.
Pace is designed around local storage, explicit feature activation, bounded data sharing, and separation between ordinary browser data, Password Vault data, website sessions, PaceSync, and Sidebar AI Site Data. Optional features can create network traffic and ordinary service metadata, as described below.
History, bookmarks, downloads metadata, cookies/site storage, settings, pinned tabs, themes, permissions, and similar browser state are stored on your device unless a feature you explicitly enable says otherwise. Websites you visit can independently receive your IP address, requests, cookies, device/browser information, and anything you submit to them. That website-side processing is not That1Dev's collection.
Private browsing is intended to reduce local persistence after a private session closes; it does not make you anonymous to websites, networks, employers/schools, operating systems, DNS/VPN providers, or other parties that can observe traffic.
The Password Vault stores supported login, address, and payment-card records in an encrypted local vault. The master password is used to derive encryption material and is not stored as plaintext. Decryption keys are intended to remain in memory only while the vault is unlocked. Optional operating-system authentication may wrap or unlock vault access where supported.
Vault data does not leave the device through ordinary PaceSync. It is eligible for paired-device transfer only when you separately enable Sync password vault data. Autofill can expose selected decrypted values to the site you choose to fill. A malicious or compromised site, Addon, device, operating-system session, or account can still misuse information after it is decrypted or filled.
PaceSync is optional. Online pairing and delivery use managed infrastructure such as Supabase; nearby pairing may use the local network. Payload encryption is performed on the device before relay delivery. The relay can process ordinary connection and delivery metadata—such as IP address, timing, anonymous authentication/session identifiers, opaque routing identifiers, ciphertext size, status, and expiry—but is not intended to receive paired-device decryption keys.
Different PaceSync categories have separate controls. General sync, Password Vault sync, and website-session sharing are not the same permission. Offline/queued encrypted records are bounded and may remain until retrieval, replacement, cancellation, or expiry; queued capsules are designed to expire within seven days. Records already received by another paired device are controlled by that device and are not remotely erased merely because you disable PaceSync.
Website-session sharing is a separate opt-in. When you explicitly send a tab or approve a supported shared-session action with site-data sharing enabled, Pace may package cookies for the destination site and related authentication origins into the encrypted transfer. Cookies can include sign-in tokens and may allow the paired device to access the corresponding account as you. Unrelated browsing data, private tabs, and Pace internal pages are excluded by the applicable transfer rules.
You should enable this only with devices and people you fully trust. That1Dev cannot revoke a third-party website session after credentials or cookies have been accepted by another device; use the website's own account/session controls if access must be revoked.
Sidebar apps are third-party websites loaded inside isolated browser views. They receive information you provide to them and ordinary website/network data under their own privacy policies.
Sidebar AI Site Data is a separate Pace-owned opt-in. On supported AI sidebar providers, enabling it allows Pace—when you send a prompt—to capture the active normal page's title, URL, and bounded rendered text and insert that material into the prompt as labeled untrusted reference content. Private tabs and Pace internal pages are excluded. Pace is designed not to persist the captured page text into settings, history, PaceSync, files, or site storage as part of this feature. Once you send the prompt, the AI provider receives the prompt and attached page material and may retain or use it under that provider's terms and privacy policy.
Do not enable Site Data for pages containing information you are not authorized to disclose, including confidential, privileged, regulated, personal, financial, health, employment, school, or proprietary information.
Pace Addons are extension-like code. Depending on permissions and match rules, an Addon may read or modify pages, block requests, store its own data, or communicate with networks. Addons installed from outside the official Shop require an explicit warning/review flow, but user approval is not a guarantee of safety.
Addon data handling is controlled by the Addon and its developer. "Verified" or Shop-hosted status reflects Pace's review state at a point in time and does not mean That1Dev continuously monitors every action or guarantees that an Addon, publisher, dependency, or future update cannot become vulnerable or malicious. You can review permissions and disable or remove Addons at pace://addons.
Pace may locally apply ad/tracker lists, security rules, sandboxing, permission controls, compatibility exceptions, and other protections. These processes can inspect request metadata locally to decide whether to allow or block a request. Pace does not send your browsing history to an ad-filtering service merely to make those decisions.
Compatibility exceptions can intentionally allow certain requests on sites that otherwise break. No blocker or security feature catches every ad, tracker, scam, exploit, malicious file, fingerprinting technique, phishing page, or future threat.
Weather may use an approximate IP-derived area or a location you enter and contact location/geocoding/weather providers. Sports cards may request league scoreboards or team assets. Those providers can receive your public IP address, timing, and the query or endpoint needed to answer the request. Pace does not request GPS merely for the new-tab weather card.
Fast Mode can make destination-site requests while you type before you press Enter. Those sites and network intermediaries can observe the resulting requests. If you do not want speculative network requests, disable Fast Mode in Settings.
Pace checks first-party release infrastructure for software updates. Update/release services may process ordinary request metadata such as IP address, time, user agent, platform/architecture, current version, requested artifact, and security/error information necessary to deliver and protect releases. Update artifacts are subject to integrity verification before installation according to the installed release path.
Files you download from third-party websites are delivered by those websites or their providers. Pace's local download list does not make That1Dev the controller of the third party's file or server logs.
If you create or use an Addon Shop publisher account, submit an Addon, request a review, contact support, send feedback, or make a related transaction, That1Dev and relevant service providers may process the account, publisher, contact, package, review, security, transaction, fraud-prevention, and request metadata reasonably needed to provide that service, respond, enforce policies, secure the service, resolve disputes, and comply with legal/accounting obligations.
Pace relies on or can connect to independent services such as Supabase, hosting/CDN providers, AI providers, websites, search engines, streaming/DRM providers, weather/sports providers, and form/payment providers. These parties may receive ordinary network information and any data you intentionally send to them. Their privacy practices are governed by their own notices. That1Dev is not responsible for a third party's independent collection, security, retention, model training, advertising, profiling, or account practices.
We use technical controls intended to reduce unauthorized access, but no browser, encryption system, updater, cloud relay, sandbox, Addon review, or storage mechanism can guarantee absolute security. Security can be defeated after a trusted device, operating-system account, paired device, website account, Addon, recovery method, or session credential is compromised. Keep systems updated, use account recovery and multi-factor authentication where available, review pairings and permissions, and maintain independent backups.
Most core browser data remains on your device until you delete it, clear browsing data, remove a profile/item, or uninstall Pace. PaceSync relay data is designed to be short-lived and bounded as described above. First-party service providers may retain ordinary access/security logs, account records, transaction/review records, abuse-prevention records, backups, or legal/compliance records for as long as reasonably necessary for the purpose or as required by law.
Deleting local Pace data does not delete data previously sent to a website, AI provider, paired device, Addon, Shop/service provider, or other third party. Use that recipient's deletion/account controls where applicable.
Depending on where you live and the type of information involved, you may have rights to request access, correction, deletion, portability, restriction, objection, or information about processing. These rights can be subject to identity verification, legal exceptions, and retention obligations. Pace does not sell browsing history or use it for cross-context behavioral advertising. Requests concerning first-party service data can be sent to the contact below.
Pace and its developer/publisher services are not directed to children under 13 or below the higher minimum digital-consent age that applies in their jurisdiction. If you believe a child provided personal information to a first-party Pace service, contact us so we can review the request and act where required.
We may update this Policy when Pace, service providers, legal requirements, or data practices change. The current version will state its update date. Where applicable law requires additional notice or consent for a material change, we will provide it. Product descriptions in this Policy describe the current intended architecture and may be updated as implementation changes.
Privacy requests, security reports, or questions: cbusinessact@proton.me.