Privacy
Infinity private preview · Updated October 30, 2026
Infinity is maintained by Liam at liamcodes.lol. This policy covers the Mac, iPhone and iPad apps, infinity.liamcodes.lol, and the account and sync service. Browsing does not require an account. App builds are currently private.
On your device
The browser library contains regular browsing history, bookmarks, reading lists, saved tabs, preferences, saved setups and a list of remote tabs already opened. It is encrypted with AES-256-GCM using a random device-only Keychain key. Older plaintext libraries migrate only after a successful encrypted write. An unreadable encrypted library is preserved rather than overwritten. Losing the device key can make that local library unrecoverable.
Passwords, account session credentials and sync keys are stored in the operating system’s data-protection Keychain. The vault requires device authentication, locks after two minutes or app deactivation, and fills approved logins only on an exact HTTPS origin. It does not submit forms or capture passwords automatically. Device authentication is handled by Apple; Infinity does not receive biometric templates.
WebKit manages website cookies, cache and other website storage using operating-system protections. These are not covered by Infinity’s additional library encryption. Downloaded files, user-requested bookmark exports, screenshots, system backups and data copied out of the app are ordinary external data. Sensitive copies made with Infinity’s Copy buttons expire after 45 seconds where supported; clipboard managers may retain their own copies.
Websites and search
Websites you visit receive ordinary network requests, your network address, browser information, cookies and anything you submit. Their privacy policies apply. Search terms go to your selected provider. Background search is enabled by default in regular tabs: eligible address-bar text is sent to that provider for suggestions and, where available, public result links. Turn it off in Settings → Completions. Searches are debounced; results are cached in memory for five minutes. Private tabs and inputs identified as full paths, credentials or sensitive addresses are excluded, but detection cannot identify every secret typed as ordinary text.
Local suggestions use bookmarks, history, open tabs and a bundled public-site catalog from Majestic and Kagi. The catalog does not download updates while browsing. Suggestion destinations are not preloaded. Regular tabs may fetch a visited site’s favicon over HTTPS without sending browser cookies. Basic tracker rules reduce some third-party requests; they are not a complete tracking blocklist.
Private tabs
Private tabs use temporary WebKit storage and are excluded from saved history, restoration and sync. Closing the last private tab releases that temporary store. Background search and remote browser control do not operate on private tabs. Bookmarks you deliberately save and files you download remain available. Private browsing does not hide network activity from websites or your network provider and is not anonymity.
Optional username accounts
Accounts use a username and password, with no email address requested. Usernames are case-insensitive. The service stores a random account identifier, username, salted PBKDF2-SHA256 password hash, hashed recovery code, hashed session tokens, device names, session creation/expiry times and control permissions. It never stores your account password in plaintext. Recovery uses your saved code; there are no email password resets. Sessions expire after 30 days or earlier if revoked. An account identifier is not proof of a person’s identity.
Optional encrypted sync
Bookmarks, history, regular tabs and passwords each start disabled. Your devices encrypt enabled categories with AES-256-GCM and a separate random sync key before upload. The server stores ciphertext, revision numbers, timestamps and account/category identifiers, and does not receive that key. Losing it prevents recovery of existing encrypted sync data. An account recovery code restores account access, not encrypted browser records.
Turning a category off stops transfers but retains its cloud copy. Automatic sync runs while Infinity is running, with iPhone/iPad activity limited by foreground execution. If automatic opening is enabled separately, received regular tabs open once per remembered remote tab, preserving your selection, with a 50-tab limit. Closing a local tab does not close the same page on other devices. Device clocks affect merge ordering. Older offline devices may re-upload records they still hold.
Optional browser control
Receiving control starts disabled. On the receiving device, enable it and explicitly approve each controller using device authentication. Both devices must use the same account and sync key. Available commands open a public-looking HTTPS address in a regular tab, go back, go forward or reload. There is no remote desktop stream, keyboard input, JavaScript execution, password access or operating-system control. A receiver with a private tab selected ignores commands.
Commands are encrypted and authenticated with the sender, recipient, account, message ID and expiry bound to the ciphertext. The server knows the device/session identifiers, expiry and permission relationships, but not the command contents. Delivery expires after approximately 55 seconds. Atomic claims prevent repeat delivery; a crash after a claim can lose the command. Revoking a controller cancels pending work. Disabling reception stops execution immediately on that device; if offline, server permission cleanup completes only when the request succeeds. Revoke the session from another connected device if needed. Approve only devices you trust: a permitted controller can cause browsing requests on the receiving network.
Hosting, logs and retention
Cloudflare hosts this site, Worker and D1 database, processes request metadata, and may process data in locations where its infrastructure operates. Its privacy policy applies to its processing. The service does not intentionally log passwords, session tokens, sync keys, request bodies or command contents. Error logs record endpoint paths and error types; infrastructure may retain ordinary request metadata. Hashed network-address and username rate-limit keys enforce abuse limits. Hashing is not a guarantee of anonymity.
Expired sessions and rate-limit records are removed by daily cleanup. Expired commands are removed on subsequent command sends for the account or during daily cleanup, ordinarily within 24 hours after expiry. Sync snapshots remain until replaced, explicitly erased or the account is deleted. Local history retains up to 1,000 live unique addresses plus deletion records. Deletion records may remain for merging. Operational logs and managed backups follow the hosting provider’s configured retention; this preview does not promise immediate backup erasure.
Your controls
You can disable background search, sync, automatic tab opening and remote control; clear history and website data; export bookmarks; remove saved passwords; revoke sessions; sign out; or delete the account and active cloud records from the app. Signing out keeps your local library and saved device sync key but resets sync/control opt-ins. Account deletion removes active account records, sessions, control grants, commands and encrypted snapshots. It does not delete your local library, downloaded files or copies already held by another device. Uninstalling may not remove Keychain items or system backups.
Infinity has no advertising or analytics SDKs, does not sell browser records, and does not use them for targeted advertising. It does not request contacts, precise location or photo-library access. Camera and microphone requests are website-specific and require permission. No age-verification or parental-control service is provided.
Contact and changes
For privacy requests or security reports, email contactliamservices@gmail.com. If you email, your address and message are processed by Gmail and the operator to respond; do not send passwords, recovery codes or sync keys. Account-sensitive requests may require verification without disclosing those secrets.
Material policy changes will be reflected here with an updated date. This preview has not had an independent security audit. No browser or encryption system can guarantee perfect security, protect an already compromised device, or erase copies outside its control.