The most privateanti-detect browser.
- Zero app telemetry
- No account needed
- Profiles stored on your disk
- Optional E2E encrypted sync
- Open-source app, AGPL-3.0
- A fingerprint per profile
- A proxy or WireGuard VPN per profile
- WebRTC leak protection
- DNS through the profile's proxy
- Timezone and language match the exit IP
- Password-locked profiles encrypted at rest
- Ephemeral profiles in RAM
- Deleted profiles overwritten
- Self-hostable sync server
- Unlimited local profiles
- Clear data on close
- DNS blocklists
- Cookie import & export
- Profile groups
- Local API on 127.0.0.1
Your profiles stay on your disk.
Cookies, history, fingerprints and proxy logins are stored on your computer. Sync is off by default. With optional E2E encrypted sync, the key comes from your password and stays on your device.
Every profile is a separate world.
Each profile has its own fingerprint, cookies, and proxy or WireGuard VPN, with WebRTC leak protection and DNS through the same route. Timezone and language follow the proxy's exit IP, and a mismatch blocks the launch.
Explore profile isolationRun your AI agent in a private profile.
Give each agent an isolated profile with its own fingerprint, cookies and proxy. Donut has no AI model of its own and sends nothing to model providers. Page content goes to the agent you connect.
Browser profiles for AI agentsSimple to use. Private by default.
Try it right here. Every button works, and nothing you do leaves this page.
| Launch | Status | Tags | Note | Proxy / VPN | EXT | DNS | Sync | Profile Details | ||
|---|---|---|---|---|---|---|---|---|---|---|
| Disabled | ||||||||||
| E2E Encrypted Sync: Synced | ||||||||||
| Disabled | ||||||||||
| Disabled | ||||||||||
| Disabled | ||||||||||
| Regular Sync: Synced | ||||||||||
| Disabled | ||||||||||
| Regular Sync: Synced |
- Profiles stored on this device
- 8
- Profiles with sync off
- 5
- Synced with E2E encryption
- 1
- App telemetry sent
- 0 B
Your accounts never meet.
Websites tie accounts together when they come from the same device, and one ban then takes them all. In Donut, each account runs in its own profile, so every site sees a different device.
Your accounts
What sites see
- Store A
- Store B
- Ads account
- Brand page
- Win32America/New_York198.51.100.24 Win32America/New_York198.51.100.24
- MacIntelEurope/Berlin203.0.113.71 Win32America/New_York198.51.100.24
- Linux x86_64Asia/Tokyo192.0.2.118 Win32America/New_York198.51.100.24
- Win32America/Sao_Paulo203.0.113.201 Win32America/New_York198.51.100.24
What the site concludes
LinkedNot linked
One person runs all four accounts.Four different people.
One ban takes down all four.A ban stays with one account.
Your browser. At your scale.
Start free with unlimited local profiles. Add only what your work needs.
Your profiles, backed up.
Encrypted cloud backup, a scheduled Cookie Bot and remote MCP for AI agents, for one person.
Explore SoloProPut your browser to work.
API, browser control for your own AI agent, and remote browsers for repeat tasks.
Explore ProTeamSeparate access. Shared work.
Share profiles with your team. Keep control of who can use them.
Explore TeamDownload Donut.
Free forever, no account needed. Pick your platform and architecture below: direct download from the latest GitHub release.
M1, M2, M3, M4 and newer
Universal DMG. Best for any Mac shipped since late 2020.
Intel-based Macs
For Macs released before the Apple Silicon transition.
Install via package manager
Auto-updates with brew upgrade.
brew install --cask donutWhat people are saying.
Real reactions from Hacker News and Product Hunt.
"Being able to set different profiles with their own proxies and cookies is super useful for automating daily processes."
"Looks great! Useful for privacy but also to keep work and private life separated."
"Amazing. I thought about that years ago, but since I never saw anyone do it I thought something must be wrong if nobody does it."
Questions, answered.
Keep every identity private.
Free to start. No profile limit. No account needed.
