Open-source, privacy-first, AI-native web browser — de-googled, built on Ungoogled Chromium.

Principles: no telemetry by default · no ads · no sponsored tabs · no affiliate injection · user-owned data · Chrome-extension compatible · self-hostable.

Website · Releases · PRD · Distribution

curl -fsSL https://tronbrowser.dev/install.sh | sh

Then use the agent-friendly tron CLI:

tron <url>        # open URL(s) in TronBrowser
tron --tor [url]  # route through Tor (hides your IP, reaches .onion) — see note
tron upgrade      # update to the latest release (no-ops if current)
tron remove       # uninstall (keeps your profile)
tron version

--tor is a convenience feature, not anonymity. It hides your IP and lets you reach .onion sites from your everyday browser, using a separate wiped profile. It is not Tor-Browser-grade: Chromium's fingerprinting surface isn't hardened. If your safety depends on it, use the real Tor Browser — it's much safer. Requires the tor daemon installed. Details: docs/tor-onion-mode.md.

🤘 Pit in the AI sidebar resolves Moshpit names (.eggs, .moshpit, …) for the current session with one click — no root, nothing on the machine changes, clearnet names untouched. For every app on the box run moshcode dns enable instead. Details: docs/moshpit-pit-toggle.md.

Also packaged for macOS · Windows · Debian/Ubuntu (.deb) · Fedora/RHEL (.rpm) · Arch (AUR) · Gentoo · NixOS · Snap · Flatpak · AppImage · FreeBSD — and arm64 Linux phones (Librem 5 / PinePhone / Ubuntu Touch). See distribution/.

Status — honest version: the native Ungoogled-Chromium fork binary (own branding/icon) isn't compiled yet (it's a ~50 GB build). Today tron runs an Ungoogled Chromium / Chromium on your system (never Google Chrome) in an isolated TronBrowser profile, with the de-googling done by the bundled extension. Same install/CLI; the native binary drops in later with no change for users.

• De-googled new tab — TronBrowser page, pit.world as the default search in both the address bar and the new tab (no logs, no cookies, resolves Moshpit names; DuckDuckGo, Kagi, NeoSearch and Xprivo available with tron search <engine>), quick links.
• RSS reader on the new tab — seeded from your OPML; add/remove feeds and import/export OPML in Settings.
• AI sidebar (bring your own keys) — Anthropic, OpenAI, Google/Gemini, DeepSeek, Perplexity, Kimi, Qwen, or local (Ollama/LM Studio/vLLM).
• CoinPay OAuth login (not Google) — anonymous, optional email; settings sync to the cloud SQLite (Turso) or your own self-hosted backend.
• Keeps all Chromium features: extensions, profiles, bookmarks, history, PWAs, DevTools.
• tron automate — an MCP server for agents: Obscura renders pages first (fast, light), the Chromium session takes over for full-JS pages and bot walls. Stdio for a local host, HTTP with an OpenMCP descriptor for a catalog. The same relay runs hosted at tronbrowser.dev/mcp/tron (keyless fetch_page + screenshot_page, listed on openmcp.logicsrc.com). See docs/mcp.md.

Requirements: Node 24+, pnpm 9+.

pnpm install
pnpm typecheck && pnpm test && pnpm build

Secrets/env via Doppler (project tronbrowser): doppler setup then doppler run -- <cmd> injects TRONBROWSER_DB_URL etc. .env.example documents everything; .env is a gitignored fallback.

Database (Turso/libSQL) uses tracked migrations:

doppler run -- pnpm db:migrate    # apply pending migrations
pnpm db:status                    # applied vs pending

The Ungoogled-Chromium fork pipeline lives in apps/desktop/chromium/ (pinned versions, GN args, branding, patch series, guarded fetch/build scripts). It needs ~50 GB and a capable machine; see its README and ADR 0001.

Tag-driven, per-platform CI/CD (one repo, not 50):

pnpm version:set 0.1.4 && git tag v0.1.4 && git push origin v0.1.4

release.yml builds linux/macos/windows artifacts (+ .deb/.rpm/AppImage) and publishes a GitHub Release; submit-packages.yml refreshes the package managers.

MIT © Profullstack, Inc.