Kakangkung
Privacy policy
Effective 9 November 2026
Kakangkung is a free, open-source web browser for Windows (“Kakangkung”, “we”). This policy explains what data the Kakangkung desktop app and this website handle, where that data goes, and how you control it. The source code is public at github.com/revanapriyandi/kakangkung, so you can check every statement below.
In short: Kakangkung has no servers that receive your data. Your browsing data stays on your PC. If you sign in with Google, the data you choose to sync is stored in a hidden app folder in your own Google Drive, and nowhere else.
1. Data that stays on your PC
Like any browser, Kakangkung keeps the following in your Windows user profile (%LOCALAPPDATA%\Kakangkung): history, bookmarks, open tabs and sessions, downloads list, settings, site permissions, extension list, cookies and website storage (managed by Microsoft Edge WebView2), and saved passwords. Saved passwords and the Google sign-in token are encrypted with Windows Data Protection (DPAPI), so only your Windows account on that PC can decrypt them. We never receive any of this data.
2. Sign in with Google
Signing in is optional. When you choose Sign in with Google, Kakangkung opens Google’s consent page in your web browser and asks for these permissions:
| Permission (scope) | What Kakangkung does with it |
|---|---|
openid, email, profile | Reads your Google account ID, email address, name and profile photo to show which account is signed in (on the toolbar and the Account page) and to keep each account’s sync data separate. |
https://www.googleapis.com/auth/drive.appdata | Creates, reads, updates and deletes Kakangkung’s own sync files in the hidden application data folder of your Google Drive. This folder is visible only to Kakangkung. Kakangkung cannot see, open or change any other file in your Drive. |
What is synced
Only the data types you switch on: bookmarks, history, open tabs, settings and the names of installed extensions. Passwords, cookies and website sign-ins are never synced. Each PC writes one sync file; other PCs signed in to the same account download and merge it.
Where Google user data goes
- Data received from Google APIs is used only on your PC, only to provide sign-in and sync for you.
- It is sent to Google’s servers (to store your sync files in your Drive) and nowhere else. We do not operate a server that receives it.
- We do not sell it, share it with or transfer it to anyone, use it for advertising, or use it to build profiles.
- No person reads it. It is not used to develop, improve or train generalized or non-personalized AI or machine-learning models.
Kakangkung’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and protection
Your Google refresh token is stored on your PC, encrypted with DPAPI. Your profile photo is cached locally. Communication with Google uses HTTPS, and sign-in uses OAuth 2.0 with PKCE.
Removing your Google data
- Sign out in Kakangkung (Profile button → Sign out). Kakangkung deletes its token from your PC and asks Google to revoke it.
- Revoke access at any time at myaccount.google.com/connections.
- Delete the synced files in Google Drive on the web: Settings → Manage apps → Kakangkung → Options → Delete hidden app data.
- Delete local data by uninstalling Kakangkung and deleting
%LOCALAPPDATA%\Kakangkung.
3. Network connections the app makes
Besides the websites you visit, Kakangkung connects to:
- Your search engine (Google by default, or the one you choose) for address bar suggestions as you type. Turn this off in Settings.
- GitHub to check for and download updates. GitHub sees your IP address and the version request. Turn automatic updates off in Settings.
- Chrome Web Store (Google) when you add an extension from the store.
- Google for sign-in and sync, only if you sign in (section 2).
- Microsoft for WebView2 updates, handled by Windows.
Kakangkung contains no analytics, telemetry, advertising or crash-reporting code.
4. This website
kakangkung.rnevio.com is a static site hosted by Vercel and served through Cloudflare. It sets no cookies and uses no analytics. Like any web host, Vercel and Cloudflare process your IP address and request details to deliver the page and protect it from abuse, under their own privacy policies. Downloads are served by GitHub.
5. Children
Kakangkung is a general-purpose browser and is not directed at children under 13. We do not knowingly collect data from children; in fact we collect no personal data at all.
6. Your rights
Because we do not hold your personal data, there is nothing for us to access, correct or delete on our side. Everything is on your PC or in your Google account, under your control, as described above.
7. Changes
If this policy changes, we will update this page and its effective date. Material changes to how Google user data is used will be announced in the release notes before they take effect, and will ask for your consent again if required.
8. Contact
Questions about privacy: open an issue at github.com/revanapriyandi/kakangkung/issues. For security reports, use private vulnerability reporting.