What Portelon sends. Every server Portelon contacts on its own.
Apart from the sites you and your agents open, Portelon contacts only these, over https wherever it can. None of these requests carries cookies, and only licensing carries credentials.
Portelon
- Licensing, at
api.portelon.com: signing a computer in, then renewing its license daily, or every 15 minutes with a license key. It sends the computer’s credential or key, its name, operating system and version, processor type, Portelon version, and a one-way fingerprint of its identifier. - Updates, at
dl.portelon.com: the list of current versions, shortly after start, every five hours and when you open About Portelon, and the updates Portelon installs itself. - Spell-check dictionaries, at
dl.portelon.com: one your profile needs and doesn’t have, as a new profile does for the browser’s language.
We never receive the pages you or your agents visit, what’s on them, what you type, or your cookies, passwords or downloads (Privacy Policy).
- Security data, from
update.googleapis.com, a minute after start and every five hours: lists of revoked certificates, changes to the trusted root certificates, data for warnings about lookalike sites, and the dictionaries the Password Manager uses to spot weak passwords. Each check names Portelon’s version, the operating system, the processor type and each component. - Features you use get their data the same way: the voices for reading aloud, Live Caption, and, while a screen reader runs, the text recognition that reads scanned PDFs.
- Chrome Web Store extensions, once you install one: Portelon asks Google for their updates at start and every five hours, so Google learns which you have, their versions, and how each was installed.
- Network time, from
clients2.google.com, after a certificate error about dates, to tell a wrong clock from an expired certificate. It goes over plain http, since a wrong clock breaks https, and Google signs the answer. - Web push. When a site you let send notifications subscribes, so that they arrive while it’s closed, Portelon registers it with Google’s push service, as every Chromium browser does, and stays connected to
mtalk.google.comwhile it runs. Google learns which sites subscribed, a random identifier for your profile, and when Portelon is online. The notifications are encrypted end to end. - When you use them: filling in a saved address where a form needs that country’s address rules; using your phone as a security key; DevTools’ documentation and translations; the New Tab page’s wallpaper collections, and the pictures for profile avatars.
Others
- Filter list publishers, and the mirrors uBlock Origin uses on GitHub Pages, Cloudflare Pages and jsDelivr, for the ad blocker’s lists: shortly after start, then hourly.
- Your search engine, DuckDuckGo unless you choose another, gets what you type in the address bar, for suggestions.
- Others a site names: the authority behind its certificate, when the site leaves out part of the chain; a provider it signs you in with; a payment method’s details.
- Your local network, to find Cast devices once you cast, and on Windows from startup, where the firewall allows.
On Windows, the system provides location, spell-checking and the scanning of downloads, under its own settings.
What’s off
Portelon has no Google sign-in or sync, though signing in to Google’s own sites works as in any browser. It sends no usage statistics or crash reports.
Google’s location service, Safe Browsing, password leak checks, Google Lens, Gemini and Google’s content on the New Tab page are off.