Flux Firefox extension privacy policy — 25 October 2026

Flux is a free, open-source browser companion for the local Flux desktop download manager. No Flux cloud account or analytics endpoint is used.

LOCAL TRANSFERS
After you enable local transfer in the Firefox extension, selected download URLs, originating page URLs, media titles, quality/format information and bounded HLS/DASH manifest text can be sent through Native Messaging to Flux on your computer. Source-scoped cookies, authorization headers or other request headers may be passed when needed to download the selected source using your existing access. This information is used for that transfer and is not sent to a Flux analytics or cloud service.

LOCAL STORAGE
The extension stores preferences, consent, pending transfers and cached release information locally. Captured session headers use session storage. Credentials attached to durable pending transfers are protected through the native application before persistent storage. The desktop application keeps its local task database and the credentials needed to continue approved transfers. Private values are omitted from public task responses.

EXTERNAL CONNECTIONS
Opening the popup may check GitHub release metadata, normally with a six-hour cache and offline retry backoff. That check does not include page URLs, download history, browser session cookies or authorization headers captured from websites. GitHub receives normal connection information such as the IP address needed to serve the request, under its own privacy policy. The desktop application separately checks GitHub for updates. Actual downloads contact the chosen source servers; torrent tasks contact peers, trackers and DHT, and optionally enabled Debrid services receive the requests needed for their selected transfers.

CONTROL
You can disable local transfer in the extension settings, disable optional browser-download handoff, adjust site access in Firefox, or uninstall the extension. These controls do not delete files already downloaded by the desktop application.

Broad HTTP/HTTPS access is used for automatic media discovery across websites, selected link capture and required source credentials. It is not used for advertising, cross-site analytics or selling browsing history.

Contact: rizaa.altiner@gmail.com
Source and issues: https://github.com/Hactor00/Flux
GitHub privacy: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement