Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
Brave provides several privacy protections, but users should be aware of potential data exposure in certain features. On Android and iOS, using Safe Browsing may expose IP addresses to Google and Apple respectively (risk_flags-1, risk_flags-2). Users enabling Sync risk losing data if they lose their decryption key (risk_flags-3). Email Alias messages might be deleted after 24 hours of delivery failure (risk_flags-4). When using Brave Rewards with custodial accounts, transaction details can be seen and recorded by partners (risk_flags-5). For Brave Wallet, third-party services and DEX aggregators may capture IP addresses and transaction data (risk_flags-6, risk_flags-7). Cryptocurrency addresses on OFAC's SDN list are ineligible for Brave services (risk_flags-8). Crash reports from experimental browser versions may contain personal information and could be retained indefinitely by Brave (risk_flags-9, risk_flags-10).
89% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
7 findings
Clauses that indicate potential risks or significant disclaimers for the user.
medium90% confidence
Inability to recover synced files if decryption key is lost
If Sync is enabled, user data such as bookmarks and passwords are saved in an encrypted file on a cloud hosting provider, and only the user has access to the decryption key. This means Brave cannot recover synced files if the user loses access to their device or keys.
Why it matters: Users who enable Sync risk permanent loss of their synced data (bookmarks, passwords, etc.) if they lose their decryption key or access to their devices.
If you enable Sync, your bookmarks, passwords and other data will be saved in an encrypted file on our cloud hosting provider (AWS). Only you have access to the decryption key, which is stored on your devices. This means it’s impossible for us to recover synced files if you lose access to your device or keys.
Temporary email delivery failures may lead to message deletion for Email Aliases
In case of temporary email delivery failures, such as a full primary mailbox, Brave will periodically try to resend the email for up to 24 hours before deleting the message.
Why it matters: Users relying on Brave Email Aliases might miss emails if their primary mailbox is full for more than 24 hours, as messages may be deleted after this period.
In case of temporary email delivery failures (e.g., if your primary mailbox is full), we will periodically try to resend the email for up to 24 hours, before deleting the message.
Custodial partners can see and record transaction details for Brave Rewards contributions
When making an on-demand contribution to Brave Creators using BAT from a linked custodial account, the custodial partner can see and record details of the transaction, such as the amount and recipient.
Why it matters: Users' cryptocurrency transaction details (amount and recipient) for on-demand contributions may be visible to and recorded by custodial partners, which is subject to their privacy policies.
When you make an on-demand contribution to Brave Creators using BAT from your linked custodial account(s), the custodian can see and record the details of your contribution transactions (such as, but not limited to, the amount and the recipient). This is subject to the privacy policies of Uphold , Gemini , bitFlyer , or ZebPay .
Connecting a custodial account, paragraph 2 · Citation strength: strong
medium90% confidence
Third-party DEX aggregators process wallet address, transaction data, and IP address
Decentralized Exchange Aggregators (DEX) used for cryptocurrency swaps, such as 0x and Jupiter, will process the user's wallet address, related transaction data, and IP address for the purpose of fulfilling the transaction.
Why it matters: Users making cryptocurrency swaps through DEX aggregators will have their wallet address, transaction data, and IP address processed by these third-party services.
We use Decentralised Exchange Aggregators (DEX) such as 0x for swaps made on EVM compatible blockchains and Jupiter for swaps completed on the Solana blockchain. They will also process your wallet address, related transaction data and your IP address but will ONLY use this data to fulfill the transaction (including getting a quote).
Cryptocurrency addresses on OFAC's SDN list are ineligible for Brave services
Cryptocurrency addresses listed on the OFAC's Specially Designated Nationals List (SDN list) are ineligible to participate in Brave services, including Brave Wallet. Brave compares cryptographic addresses to this list and will not allow transfers to sanctioned addresses.
Why it matters: Users with cryptocurrency addresses on the OFAC's SDN list will be unable to use certain Brave services, including Brave Wallet, and transfers to such addresses will be blocked.
Cryptocurrency addresses that are listed on the OFAC’s Specially Designated Nationals List (SDN list) are ineligible to participate in Brave services, including Brave Wallet. To meet our legal obligations, Brave compares cryptographic addresses to a copy of the SDN list built-in to the browser. Brave Wallet will not allow for transfers to any sanctioned addresses.
Crash reports from experimental browser versions may contain personal information
Nightly, Dev, and Beta versions of the Brave Browser are experimental and may automatically send crash reports to Brave. These crash reports can contain personal information.
Why it matters: Users testing experimental versions of the Brave browser (Nightly, Dev, Beta) may have crash reports containing personal information automatically sent to Brave.
These test versions of the Browser may automatically send crash reports to Brave so that we can identify and fix problems. A crash report can contain personal information.
While Apple retains data for one year, Brave may retain some crash reports indefinitely if they are deemed useful for testing.
Why it matters: Crash reports from experimental browser versions, which can contain personal information, may be retained by Brave indefinitely, potentially beyond the one-year retention period by Apple.
Apple retains the data for one year. Brave may retain some crash reports indefinitely, if useful for testing.
Rewards Payment ID and associated Solana address, paragraph 71 · Citation strength: strong
Data Use
All clear
How the organization collects, uses, shares, and stores user data.
✓
Looking good
No data-use concerns flagged
Verbaterm only flags concerns it can cite. No source-backed data-use findings are shown here.
Cancellation and Renewal
All clear
Terms related to subscription cancellation, auto-renewal, and associated billing practices.
✓
Looking good
No billing surprises spotted
Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.
Gotchas
All clear
Unexpected or less-than-obvious clauses that may be detrimental or tricky for users.
✓
Looking good
No hidden gotchas
Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.
Protections
8 findings
Clauses that protect user rights, privacy, or provide benefits.
Protection90% confidence
No collection or retention of user's browsing history
Brave states that it does not collect or retain a user's browsing history.
Why it helps: This protects user privacy by ensuring that their browsing activities are not logged or stored by Brave.
Our company does not collect or retain a user’s browsing history.
IP address and translated text deleted for Brave Translate
Brave does not collect the content of webpages being translated, and any text submitted to its translation server is deleted once translated. IP address information associated with requests is also removed.
Why it helps: This ensures user privacy by not retaining sensitive information like webpage content, translated text, or IP addresses related to translation requests.
Brave does not collect the content of webpages being translated, and any text submitted to our translation server is deleted once it’s translated. We also remove IP address information associated with your requests. We do this to protect your privacy.
No collection of browsing history or specific ad interactions with Brave Rewards
Even with Brave Rewards enabled and a Rewards Payment ID assigned, Brave states that it never collects browsing history or similar information, and cannot derive this from user contributions or tell which specific ads were seen or interacted with.
Why it helps: This commitment ensures that participating in Brave Rewards does not compromise user browsing privacy or expose specific ad interactions.
Even with Brave Rewards enabled and a Rewards Payment ID assigned, we never collect your browsing history or similar information, and we can’t derive this information from your contributions to content creators or sites. We also cannot tell which specific Brave Private Ads you’ve seen or interacted with .
Brave does not track actions or log transaction data in Brave Wallet
Brave states that it does not track actions made in the Brave Wallet and does not log transaction data.
Why it helps: This protects user privacy by ensuring that their specific actions and transaction details within the Brave Wallet are not monitored or recorded by Brave.
Brave does not track actions that you make in your wallet.
Users can choose whether to send diagnostic reports when Brave crashes or freezes, and can turn off future reports in settings.
Why it helps: This provides users with control over sharing diagnostic data, allowing them to decide if technical information about their system and issues are sent to Brave.
You can choose whether to send us these reports. Even if you have chosen to send reports in the past, you can turn off future reports in settings .
Brave Leo includes multiple privacy protections:, paragraph 12 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.