WS Browser Privacy Policy

Effective Date: 1 October 2026

WS Browser Sdn Bhd (the “Company,” “we,” “us,” or “our”) values your personal information and privacy. This Privacy Policy applies to WS Browser and its related websites, applications, services, and features.

This Privacy Policy explains:

A. what information we collect;

B. how we use such information;

C. how we retain, share, and protect such information;

D. your privacy rights; and

E. how we handle browser performance data, network metrics, device information, error logs, behavioral analytics, and advertising-related data.

Please read this Privacy Policy carefully before using WS Browser. If you do not agree with this Privacy Policy, you may be unable to use certain features, but you may continue to use the basic browsing functions.

1. Information We Collect

We collect information only to the extent necessary to provide specific functions, protect product security, improve service quality, or comply with legal obligations.

1.1 Information You Voluntarily Provide

When you use the following functions, we may collect information that you voluntarily provide:

  • your name, contact details, and description of the issue when contacting customer support or submitting comments or feedback;
  • information you provide when participating in surveys or events, or when claiming rewards;
  • information you provide when applying for business cooperation or other services; and
  • other information you voluntarily submit through the product interface.

Depending on the specific context, we will inform you of the purpose of collection, method of use, retention period, and other necessary matters.

Unless necessary for a particular function, we will not require you to provide your name, mobile telephone number, email address, identification document number, payment information, or other sensitive personal information.

1.2 Device and System Information

To ensure the proper operation of WS Browser, adapt the browser to your device, and troubleshoot technical issues, we may collect:

  • operating system and system version;
  • standardized or categorized device model information;
  • browser version, application version, and distribution-channel information;
  • screen resolution, viewport dimensions, and device pixel ratio (DPR);
  • categorized information regarding CPU, GPU, memory, and storage capacity;
  • system language, time zone, and regional settings;
  • network type, connection status, and network quality information;
  • application installation, launch, upgrade, and crash status; and
  • device or application identifiers that have been restricted, pseudonymized, or otherwise processed.

We will not rely solely on the foregoing information to create persistent identification profiles across websites or applications, nor will we use device fingerprinting as a substitute for obtaining your consent without authorization.

1.3 Performance and Network Quality Information

To improve page loading speed, network connectivity, and browser stability, we may collect technical metrics that have been minimized, filtered, de-identified, or aggregated, including:

  • DNS, TCP, TLS, TTFB, download, and overall loading times;
  • page experience metrics, including FCP, LCP, CLS, INP, and TBT;
  • page navigation, redirects, resource loading, and cache-hit information;
  • network latency, network type, effective connection type, and categorized downstream bandwidth;
  • first-screen loading, page visibility, foreground/background status, and page-load completion;
  • frame rate, dropped frames, lag, jank, long tasks, and main-thread processing time; and
  • memory usage, JavaScript heap memory, and device performance category.

The foregoing information is primarily used for performance statistics, troubleshooting, version quality assessment, and security protection. It is not used to read the content of webpages.

1.4 Error, Crash, and Stability Logs

When a JavaScript error, unhandled rejection, page crash, application unresponsiveness, blank screen, or other abnormal event occurs, we may collect:

  • error type, severity, and standardized error code;
  • time of occurrence, duration, and application version;
  • technical source information relating to the page or resource;
  • information concerning blank screens, crashes, lag, and abnormal recovery; and
  • device performance and system environment information.

Before uploading such information, we will use reasonable efforts to filter, truncate, de-identify, or hash error information, error stacks, source addresses, and log contents.

Unless otherwise expressly stated and appropriate authorization has been obtained, we will not automatically upload:

  • complete webpage content;
  • page screenshots or video frames;
  • the complete DOM or page text;
  • user input;
  • cookies, tokens, authorization information, or other authentication information;
  • memory snapshots, heap snapshots, or complete performance profiling files; or
  • raw logs containing personal information or trade secrets.

1.5 URL, Domain, and Resource Information

To analyze page loading, network errors, and redirects, we may process:

  • domain names or host information;
  • resource types;
  • status codes, protocols, and content encoding;
  • URL identifiers that have been filtered, truncated, hashed, allowlisted, or otherwise processed; and
  • anonymous or aggregated website-group information used for statistical purposes.

As a general principle, we will not retain complete URLs. We will use reasonable efforts to remove or process sensitive information contained in URL fragments, query parameters, or paths.

We will not actively collect or upload URLs or parameters containing:

  • passwords, verification codes, or payment information;
  • cookies, session IDs, tokens, or authorization information;
  • email addresses, mobile telephone numbers, names, or account information;
  • order numbers, transaction numbers, or other personally identifiable information; or
  • other authentication credentials or sensitive business information.

1.6 IP Addresses and Regional Information

For security protection, network diagnostics, regional adaptation, and service statistics, we may process your IP address and approximate regional information derived from your IP address.

We generally prioritize the use of country-, state/province-, or city-level information. After completing the necessary processing, we will promptly delete, truncate, mask, or anonymize the original IP address.

Unless you have expressly authorized it, or collection is permitted by law and is necessary, we will not collect precise location information, such as GPS coordinates or latitude and longitude.

1.7 Page Behavior and Usage Information

To understand the use of features, improve product experience, and evaluate page performance, we may collect minimized or aggregated metrics, including:

  • whether you are a first-time or returning visitor;
  • whether a page has been scrolled or clicked;
  • time spent on a page;
  • whether you exited after the first screen;
  • page visibility and foreground/background status; and
  • the frequency and outcome of browser feature usage.

Unless appropriate authorization has been obtained, we will not use the foregoing information to establish a complete browsing history or associate it with your name, mobile telephone number, email address, or other direct identifiers.

1.8 Cookies and Similar Technologies

We may use cookies, local storage, application cache, and similar technologies to:

  • save necessary browser settings;
  • maintain login or service status;
  • record security preferences;
  • analyze product usage;
  • analyze performance and errors; and
  • conduct advertising-effectiveness analysis where appropriate authorization has been obtained.

Necessary cookies are generally used to provide basic functions. For non-essential analytics, advertising, or cross-site tracking technologies, we will obtain your prior consent where required by applicable law and provide means to disable, reject, or withdraw such consent.

You may manage or delete cookies through your browser settings. However, some functions may not operate properly as a result.

2. Information We Do Not Actively Collect

Unless otherwise provided in this Privacy Policy, or unless you voluntarily use a relevant function and provide authorization, we will not actively read, retain, or upload:

  • the complete content of webpages you visit;
  • webpage text, the complete DOM, page screenshots, or videos;
  • account credentials, passwords, verification codes, or form contents entered on webpages;
  • your photographs, videos, contacts, text messages, emails, or local files;
  • the actual content of downloaded files;
  • cookies, Set-Cookie headers, authorization information, session IDs, or tokens;
  • account information, transaction information, or the body of business responses from third-party websites;
  • precise location information without authorization; or
  • device fingerprints used to identify you persistently across websites.

Content, account information, transaction information, and other data on third-party websites are generally processed by the relevant third parties in accordance with their own privacy policies.

3. Third-Party Websites and Content

WS Browser may enable you to access third-party websites, services, or content. With respect to third-party websites:

  • we will not access their complete page content, API response bodies, account information, or transaction information without authorization;
  • we will not circumvent same-origin policies, CORS, CSP, browser sandbox restrictions, or other security mechanisms to obtain data;
  • we will not copy user data, business logs, or complete Console logs from third-party websites without authorization;
  • third-party websites may independently use cookies, advertising technologies, analytics tools, or other tracking technologies; and
  • you should review the applicable third party’s privacy policy and terms of service.

If we use third-party SDKs, cloud services, error-monitoring services, analytics services, or advertising services, we will require the relevant service providers to process information in accordance with our instructions and to implement reasonable security and confidentiality measures.

4. How We Use Information

We may use the information we collect for the following purposes:

  • providing, maintaining, and improving WS Browser and its functions;
  • analyzing page performance, network quality, and operational stability;
  • troubleshooting crashes, blank screens, lag, errors, and security issues;
  • adapting the browser to different devices, systems, and network environments;
  • preventing fraud, attacks, abuse, malware, and other security risks;
  • handling your inquiries, feedback, complaints, and service requests;
  • conducting product usage statistics and internal operational analysis;
  • displaying advertisements, analyzing advertising effectiveness, or attributing promotions where appropriate authorization has been obtained;
  • complying with applicable laws and regulations, regulatory requirements, court orders, or requests from governmental authorities; and
  • handling other reasonable purposes disclosed to you at the time of collection.

We will not use performance data, error logs, or device information to create personal profiles unrelated to the purposes of collection or to conduct cross-site tracking.

5. Advertising and Cross-Site Tracking

If WS Browser provides advertising or promotional functions, we may process anonymous or aggregated advertising metrics, including:

  • whether an advertisement was loaded or displayed;
  • advertisement loading time;
  • whether an advertisement was clicked or otherwise interacted with;
  • time spent on a page; and
  • whether the page was scrolled or exited after the first screen.

We will not identify and upload your email address, mobile telephone number, account information, password, or other personal information for advertising purposes by scanning webpages, reading the DOM, extracting cookies, reading third-party login status, or using other automated methods without authorization.

For non-essential personalized advertising, advertising attribution, or cross-site tracking, we will obtain your consent where required by applicable law and provide means to reject, disable, or withdraw such consent.

6. Device Identifiers and Device Fingerprinting

We will not, by default, use permanent device identifiers or device fingerprints to identify you over the long term.

If the use of a pseudonymized identifier is necessary for security, account, synchronization, or another clearly defined business purpose, we will:

  • limit the purpose and scope of use;
  • use randomly generated or irreversible identifiers wherever practicable;
  • limit the retention period;
  • refrain from using such identifiers for unauthorized cross-application or cross-site advertising matching;
  • obtain your consent where required by applicable law; and
  • provide mechanisms for reset, deletion, or withdrawal where reasonably practicable.

We will also comply with applicable Apple App Store, Google Play, and other platform policies concerning device identifiers, advertising identifiers, and user data.

7. Information Sharing and Processing by Service Providers

We do not sell your personal information.

We may share or entrust the processing of necessary information in the following circumstances:

7.1 Service Providers

Examples include cloud storage providers, server hosting providers, error-monitoring providers, performance analytics providers, customer support providers, data security providers, and technical operations providers.

7.2 Affiliates

We may share information with our affiliates to the extent necessary to provide products, technical support, security protection, and internal management.

We may disclose information in response to lawful requests from courts, governmental authorities, or regulatory bodies, or as otherwise required by applicable laws and regulations.

7.4 Corporate Transactions

If we undergo a merger, acquisition, reorganization, asset transfer, or similar transaction, your information may be transferred as part of that transaction. We will require the recipient to continue implementing appropriate protection measures.

7.5 Other Authorized Circumstances

We may share information with other parties with your consent or in accordance with your instructions.

We will use reasonable efforts to require third parties to process information only for agreed purposes and to implement reasonable security measures.

8. Cross-Border Transfers

Because our service providers, affiliates, or servers may be located in Singapore, Malaysia, or other countries or regions, your information may be transferred to, stored in, or processed outside the country or region in which you are located.

When conducting cross-border transfers, we will take reasonable measures in accordance with applicable law, including:

  • conducting security and privacy assessments of service providers;
  • entering into data-processing or confidentiality agreements;
  • specifying the processing purposes, data scope, and retention period;
  • implementing access controls, encryption, de-identification, or pseudonymization measures;
  • ensuring that recipients provide a level of protection no less protective than that required under applicable law; and
  • obtaining your consent or completing other compliance requirements where required by law.

9. Data Retention

We retain personal information and related technical data only for as long as necessary to fulfill the purposes for which they were collected.

The specific retention period will be determined based on:

  • the purpose of collection;
  • the sensitivity of the data;
  • security and operational requirements;
  • statutory retention obligations;
  • dispute-resolution and audit requirements; and
  • whether the data has been anonymized or aggregated.

Generally:

  • performance and network metrics will be retained in aggregated or de-identified form;
  • original IP addresses will be deleted, truncated, or anonymized after the necessary security or technical processing is completed;
  • error logs will be deleted or de-identified after troubleshooting and quality analysis are completed;
  • abnormal logs containing sensitive information will not be retained for longer than necessary; and
  • customer service and feedback information voluntarily submitted by you will be deleted or anonymized after the relevant matter has been handled and a reasonable subsequent period has elapsed.

When the applicable retention period expires, we will delete, anonymize, or otherwise securely process the relevant information, except where retention is required by law.

10. Information Security

We implement reasonable technical and organizational measures to protect your information, including:

  • access controls;
  • identity authentication and operational auditing;
  • encryption or other security safeguards during transmission and storage;
  • log de-identification and filtering of sensitive fields;
  • data minimization and retention-period management;
  • security management of service providers;
  • security-incident monitoring and emergency response; and
  • employee confidentiality and data-protection training.

Although we implement reasonable measures, Internet transmission and electronic storage cannot be guaranteed to be completely secure. If a security incident occurs that may affect your rights and interests, we will take notification, remedial, reporting, and other necessary measures in accordance with applicable law.

11. Your Privacy Rights

To the extent permitted by applicable law, you may have the following rights:

  • the right to inquire whether we hold your personal information;
  • the right to request access to or a copy of your personal information;
  • the right to request correction of inaccurate or incomplete information;
  • the right to request deletion of information that is no longer necessary;
  • the right to withdraw consent previously given;
  • the right to object to or restrict certain non-essential processing;
  • the right to manage cookie, analytics, and advertising preferences;
  • the right to raise questions, complaints, or comments regarding our processing of personal information; and
  • the right, where permitted by law, to request data portability or restriction of processing.

You may contact us as follows:

WS Browser Sdn Bhd

Address:

Email:

Phone: 03 2022 4476

To protect the security of your information, we may require reasonable identity-verification materials. We will process your request within the period required by law or within a reasonable period. If we are unable to fulfill your request, we will provide an explanation of the relevant reasons.

12. Children’s Privacy

WS Browser is not specifically designed for children.

If you have not reached the age at which you may independently provide consent under the laws of your country or region, you should use our services with the consent and guidance of a parent or legal guardian.

If we discover that we have collected a child’s personal information without appropriate authorization, we will take reasonable measures to delete such information.

13. Permission Management

WS Browser requests and uses device permissions only to the extent necessary to provide the relevant functions.

You may view, disable, or re-authorize relevant permissions through your device or browser settings. Refusing non-essential permissions will not affect the basic browsing functions, but may cause certain specific features to become unavailable.

We will not obtain your information by circumventing:

  • browser same-origin policies;
  • CORS;
  • CSP or other webpage security policies;
  • browser sandbox restrictions;
  • operating-system permission controls; or
  • application-store or platform security mechanisms.

14. Specific Device Permissions

WS Browser requests and uses device permissions only to the extent necessary to provide the relevant functions.

The permissions that may be required include:

  • Network access permission: to load webpages, update the browser, and provide online services;
  • Notification permission: to send security alerts, download-status notifications, update reminders, or notifications to which you have expressly subscribed;
  • Storage permission: to download, save, or open files at your direction;
  • Camera or microphone permission: only when you use webpage video, audio, scanning, or related functions;
  • Location permission: only when you actively use a webpage or function that depends on location, and with your authorization where required by applicable law;
  • Clipboard access: only when you actively perform copying, pasting, or related operations; and
  • Other system permissions: only where specifically necessary for a particular function.

You may view, disable, or re-authorize permissions through your device or browser settings. If you decline a permission, the relevant feature may not be available, but basic browsing functions will generally remain available.

15. Singapore and Malaysia-Specific Provisions

Where Singapore’s Personal Data Protection Act 2012 (“Singapore PDPA”), Malaysia’s Personal Data Protection Act 2010 (“Malaysia PDPA”), or any other applicable data-protection law applies, the Company will process personal data in accordance with the applicable law, its subsidiary legislation, regulations, codes of practice, guidelines, and applicable regulatory requirements.

We will collect, use, disclose, and otherwise process personal data only for purposes that are reasonably necessary to provide, maintain, secure, operate, optimize, and improve WS Browser and its related services; to respond to your requests, feedback, or complaints; to comply with legal or regulatory obligations; or for other purposes notified to you or permitted by applicable law.

Where required by applicable law, we will provide notice and obtain your consent before collecting, using, disclosing, or otherwise processing your personal data, unless an applicable exception, legal basis, or exemption applies.

You may withdraw your consent by contacting us using the contact details set out in this Privacy Policy. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal. However, if you withdraw consent, certain services or features may no longer be available or may be affected.

15.2 Access, Correction, and Other Rights

Subject to applicable law and any applicable exceptions, you may have the right to:

  • request access to personal data held by us and, where required by applicable law, information about how such personal data has been used or disclosed;
  • request correction of personal data that is inaccurate, incomplete, or outdated;
  • withdraw consent to the processing of your personal data;
  • object to the processing of your personal data for direct marketing purposes;
  • make inquiries, complaints, or reports concerning our handling of your personal data; and
  • exercise any other rights available to you under applicable data-protection laws.

We may require reasonable identity-verification information before processing your request. Where permitted by applicable law, we may charge a reasonable fee for an access request or other request. If a fee applies, we will inform you before processing the request.

15.3 Accuracy, Security, and Retention

We will take reasonable steps to ensure that personal data is accurate, complete, and up to date where it is likely to be used to make a decision affecting you or disclosed to another organization.

We will implement reasonable security arrangements, including appropriate technical, organizational, and administrative measures, to protect personal data against unauthorized access, collection, use, disclosure, copying, modification, disposal, loss, misuse, or similar risks.

We will not retain personal data for longer than is reasonably necessary to fulfil the purposes for which it was collected, to meet legal, regulatory, operational, or business requirements, or as otherwise permitted or required by applicable law. When personal data is no longer required, we will delete, anonymize, or otherwise securely dispose of it.

15.4 Direct Marketing

Where we send direct marketing communications, we will provide appropriate means for you to opt out or unsubscribe, where required by applicable law.

You may withdraw your consent to receive marketing communications at any time by using the unsubscribed function in the relevant communication or by contacting us using the details set out in this Privacy Policy.

Even if you opt out of marketing communications, we may continue to send you service-related, security-related, transactional, administrative, or legally required communications.

15.5 Cross-Border Transfers

Where personal data is transferred outside Singapore, Malaysia, or another applicable jurisdiction, we will take reasonable steps to comply with applicable cross-border transfer requirements. Such steps may include obtaining consent where required, relying on another lawful basis, conducting appropriate assessments, implementing contractual or organizational safeguards, or adopting other measures permitted or required by applicable law.

15.6 Data Breach Notification

Where a data breach is assessed to be notifiable under applicable law, we will take the notification, investigation, containment, remediation, and other measures required by law. This may include notifying the relevant regulatory authority and affected individuals where applicable.

15.7 Data Protection Officer and Contact Details

Our Data Protection Officer, or the person responsible for data-protection matters, may be contacted using the following details:

WS Browser Sdn Bhd

Address:

Email:

Phone: 03 2022 4476

Depending on the applicable law and the circumstances, we may process personal information on one or more of the following bases:

  • your consent;
  • performance of a contract or provision of a service requested by you;
  • compliance with legal or regulatory obligations;
  • protection of our rights, property, systems, users, or the public;
  • legitimate interests, provided that such interests do not override your applicable rights and interests; or
  • another legal basis permitted by applicable law.

Where consent is the applicable legal basis, you may withdraw it at any time in accordance with this Privacy Policy.

17. Automated Processing and Profiling

We may use automated tools to:

  • detect malware, fraud, abusive behavior, or security threats;
  • identify technical errors and service interruptions;
  • categorize devices or network environments for performance optimization; and
  • analyze aggregated product usage and performance trends.

We will not make decisions producing legal or similarly significant effects on you solely through automated processing, unless permitted by applicable law and subject to any safeguards required by law.

We will not use browser performance data or error logs to make decisions concerning your eligibility for credit, employment, insurance, housing, education, or other similarly significant opportunities.

18. Complaints and Regulatory Contact

If you have concerns about our collection, use, disclosure, or protection of personal information, please first contact us using the details provided in this Privacy Policy. We will review and respond to your complaint within a reasonable period and in accordance with applicable law.

Where permitted by applicable law, you may also contact the relevant data-protection authority, including:

  • the Personal Data Protection Commission of Singapore; or
  • the Personal Data Protection Commissioner or other applicable authority in Malaysia.

Nothing in this Privacy Policy limits your right to lodge a complaint with a competent regulatory authority.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to WS Browser or its functions;
  • changes in data-processing practices;
  • changes in applicable laws or regulatory requirements;
  • changes to service providers or cross-border arrangements; or
  • improvements to privacy and security measures.

For material changes, we will provide notice through WS Browser, our website, email, or another appropriate method. The updated Privacy Policy will become effective on the date stated at the beginning of the revised policy.

Your continued use of WS Browser after the effective date of the revised Privacy Policy constitutes acknowledgment of the updated policy, to the extent permitted by applicable law. Where consent is required for a material change, we will obtain your consent before implementing the relevant processing.

20. Interpretation and Severability

If any provision of this Privacy Policy is found to be invalid, unlawful, or unenforceable, that provision will be interpreted or modified to the minimum extent necessary to make it valid and enforceable. The remaining provisions will remain in full force and effect.

If there is a conflict between this Privacy Policy and a mandatory requirement of applicable law, the mandatory requirement will prevail to the extent of the conflict.

21. Contact Us

If you have any questions, requests, complaints, or comments regarding this Privacy Policy or our handling of personal information, please contact us:

WS Browser Sdn Bhd

Address:

Email:

Phone: 03 2022 4476

We will use reasonable efforts to respond to your inquiry within the period required by applicable law or, where no statutory period applies, within a reasonable period.

22. Language and Prevailing Version

This Privacy Policy may be translated into different languages. In the event of any inconsistency or conflict between the English version and any translated version, the English version shall prevail to the extent permitted by applicable law.