Separate identities.One private browser.

pub fn data_dir() -> PathBuf {  …  base_dirs().data_local_dir().join(app_name())}pub fn profiles_dir() -> PathBuf {  data_dir().join("profiles")}

$ grep -ciE "sentry|posthog|analytics|telemetry" \    src-tauri/Cargo.toml package.jsonsrc-tauri/Cargo.toml:0package.json:0

pub fn derive_vault_key(password: &[u8], salt: &[u8]) … {  …  Argon2::default()    .hash_password_into(password, salt, &mut key)}pub fn encrypt_bytes(key: &[u8; 32], plaintext: &[u8]) … {  let cipher = Aes256Gcm::new(&aes_key);

services:  donut-sync:    image: donutbrowser/donut-sync:latest    environment:      S3_ENDPOINT: http://minio:9000      …$ docker compose up -d

/// In-memory cache of derived per-profile encryption keyspub fn encrypt_profile_file(  key: &[u8; 32],  …  encrypt_bytes(key, &plaintext)pub fn drop_cached_key(profile_id: &uuid::Uuid) {

Fingerprint spoofing (UA, platform, timezone,language, WebGL, canvas, audio, WebRTC, …)is enforced at the C++ layer

## Features- Proxy support: HTTP, HTTPS, SOCKS4, SOCKS5 per profile, …- VPN support: WireGuard configs per profile

GNU AFFERO GENERAL PUBLIC LICENSEVersion 3, 19 November 2007