de-Googled Chromium · end-to-end encrypted

Surf the
universe.

Surferse is Chromium with no Google telemetry by default, and one switch that stops every Google background connection. Sign in with UniAuth, and sync sealed end-to-end.

v152.0.7977.119 · Chromium 152 · signed by UniAuth Inc.

0 telemetry sent to Google, by default
6 privacy-preserving search defaults
256-bit AES-GCM sealed sync
147 patches on top of Chromium

what makes it Surferse

Everything Chrome can do.
Nothing Google shouldn't.

Same engine, and your extensions run unmodified. No Google telemetry by default, and one switch for every Google background connection.

de-googled

No Google telemetry, by default

Usage metrics have no endpoint compiled in, field-trial seeds are never requested, Google sign-in is gone, and Safe Browsing lookups are proxied through surferse.app. Set Google services to Block all and every Google background connection stops.

one identity

Sign in with UniAuth

Right where Chrome would ask for a Google account, Surferse asks for you. A full PKCE OAuth handshake against your UniAuth identity — no advertising profile waiting on the other end.

aes-256-gcm

Sync only you can read

Bookmarks, open tabs, history, saved addresses and settings are encrypted on your device before they leave, under a key you provide: a sync passphrase, or on desktop your UniAuth Vault master password. The server stores ciphertext it cannot read.

zero relearning

Chromium-fast. Chrome-familiar.

Your extensions, your DevTools, your muscle memory — the whole Chromium platform, minus Google's telemetry.

the receipts

No Google telemetry.
One switch for the rest.

Where stock Chromium talks to Google, here's what Surferse does instead. The default Balanced mode keeps component updates working, plus DRM, web push and Chrome Web Store updates on macOS. Block all stops every Google background connection.

  • Safe Browsing direct to Google proxied via surferse.app
  • Built-in Google Translate offer off by default
  • Sign in with Google Sign in with UniAuth
  • Google-hosted account sync UniAuth end-to-end sync
  • Field trials & usage metrics never sent
  • The Chrome pinwheel, everywhere the Surferse globe

one universal identity

Sign in with UniAuth.

Open a new profile and — right where Chrome asks for a Google account — Surferse asks for you. One identity for the whole UniAuth constellation, over a real OAuth handshake. The browser is Surferse. The account is UniAuth. Everything in between is yours.

  • Right where you'd expect it. Offered at the profile picker and on first run — the exact moment Chrome and Edge reach for their own accounts.
  • PKCE, end to end. A proof-key exchange binds each authorization code to the sign-in that requested it, so an intercepted code is useless on its own.
  • Yours to leave. Sign out any time. Your synced data stays sealed behind your key — we can't read it, and we can't recover it for you.
  1. 01sign-in starts in Surferse
  2. 02uniauth.id/api/oauth/authorize
  3. 03code + verifier exchanged
  4. 04identity reflected

zero-knowledge sync

Sealed between devices.

Your bookmarks cross the void as ciphertext. The relay that carries them cannot read them — and neither can we.

  1. 01Your key, your move. Nothing is shared between devices until you provide a key: a sync passphrase, or on desktop your UniAuth Vault master password. Signing in alone is never enough. Your passphrase, your Vault master password and the key all stay on the device.
  2. 02Sealed before it leaves. Bookmarks, open tabs, history, saved addresses and settings are AES-256-GCM encrypted on-device. The server stores ciphertext it cannot read.
  3. 03Opened only by you. The only thing that can read a synced bookmark is another of your devices holding the same key.

an honest comparison

The good parts of Chromium.
None of the strings.

Brave got a lot right. Chrome got the engine right. Surferse keeps what works — and answers to an identity that works for you, not an ad business.

Capability Surferse Chrome Brave
Chromium engine, extensions run unmodified
No Google telemetry by default —
Sign in with your own identity provider — —
End-to-end encrypted sync, by default passphrase opt-in
No ads, tokens or rewards bolted on —

Defaults, out of the box. Chrome sync becomes end-to-end encrypted only after setting a manual passphrase.

A browser holds your whole life. It should keep your secrets — not harvest them.
why we built Surferse

fair questions

Asked, answered,
on the record.

The claims on this page are checkable. Here's the fine print, minus the fine print energy.

Does Surferse ever talk to Google?

By default, a few features still do, and one switch stops them. In the default Balanced mode, component updates connect to Google on macOS and iOS; on macOS, so do DRM-protected media, web push, and the Chrome Web Store whenever you install or update an extension. Usage metrics have no endpoint compiled in, field-trial seeds are never requested, and Safe Browsing lookups go through surferse.app as 32-bit hash prefixes, never URLs. Set Google services to Block all and every Google background connection stops. On macOS that costs DRM, web push, certificate-list updates and extension updates, including security updates. On iOS it costs offline suggestions, optimization hints and safety tips, a warning about lookalike phishing domains.

Do my Chrome extensions still work?

Yes, on macOS: Chromium extensions run unmodified. Installing and updating them uses the Chrome Web Store, which is a Google service. Under Block all you can still install extensions, but they stop receiving updates, including security updates. Surferse for iOS doesn't support extensions.

Do I need a UniAuth account?

No. You only need to sign in for sync, your device list and account settings. Browsing, bookmarks and history all work signed out, and on macOS so do extensions.

How is this different from Brave?

We share an instinct: take Google's telemetry out of Chromium. We differ on what to add back. Brave layers on an ad network, rewards and a crypto wallet. Surferse adds a sign-in that answers to you and sync that only your devices can read, and nothing ad-supported.

Which platforms does Surferse run on?

macOS 13 or later on Apple Silicon, today. Intel Macs aren't supported. Surferse for iOS is on its way to the App Store, with the same UniAuth account and the same end-to-end encrypted sync.

ready when you are

Bring your web
down to earth.

Free. No account required to start. Sign in with UniAuth and add your sync key whenever you want your universe to follow you.

Download Surferse for macOS 179 MB

v152.0.7977.119 · macOS 13+ · Apple Silicon · signed
sha256  21db a2ea 208b … 7fed 326e b571

checksums & install steps

  • Apple Silicon only
  • signed · UniAuth Inc.
  • Chromium 152
  • iOS — on its way to the App Store