Open-source, privacy-first, AI-native web browser — de-googled, built on Ungoogled Chromium.
Principles: no telemetry by default · no ads · no sponsored tabs · no affiliate injection · user-owned data · Chrome-extension compatible · self-hostable.
Website · Releases · PRD · Distribution
curl -fsSL https://tronbrowser.dev/install.sh | shThen use the agent-friendly tron CLI:
tron <url> # open URL(s) in TronBrowser
tron upgrade # update to the latest release (no-ops if current)
tron remove # uninstall (keeps your profile)
tron versionAlso packaged for macOS · Windows · Debian/Ubuntu (.deb) · Fedora/RHEL (.rpm) ·
Arch (AUR) · Gentoo · NixOS · Snap · Flatpak · AppImage · FreeBSD — and arm64
Linux phones (Librem 5 / PinePhone / Ubuntu Touch). See
distribution/.
Status — honest version: the native Ungoogled-Chromium fork binary (own branding/icon) isn't compiled yet (it's a ~50 GB build). Today
tronruns an Ungoogled Chromium / Chromium on your system (never Google Chrome) in an isolated TronBrowser profile, with the de-googling done by the bundled extension. Same install/CLI; the native binary drops in later with no change for users.
- De-googled new tab — TronBrowser page, Xprivo as the default private search (no Google in the omnibox; DuckDuckGo available as an alternative), quick links.
- RSS reader on the new tab — seeded from your OPML; add/remove feeds and import/export OPML in Settings.
- AI sidebar (bring your own keys) — Anthropic, OpenAI, Google/Gemini, DeepSeek, Perplexity, Kimi, Qwen, or local (Ollama/LM Studio/vLLM).
- CoinPay OAuth login (not Google) — anonymous, optional email; settings sync to the cloud SQLite (Turso) or your own self-hosted backend.
- Keeps all Chromium features: extensions, profiles, bookmarks, history, PWAs, DevTools.
| Path | Contents |
|---|---|
apps/ |
desktop (Chromium fork pipeline + launcher + AI-sidebar extension), web (tronbrowser.dev site), mobile (Expo/EAS, Phase 2), docs |
packages/ |
ai-core, model-providers, browser-core, workflow-engine, agent-runtime, auth, payments (x402/CoinPay), sync, storage, sdk, plugins, ui, shared |
services/ |
api, worker, scheduler, sync-server |
distribution/ |
package-manager manifests for every channel |
Requirements: Node 24+, pnpm 9+.
pnpm install
pnpm typecheck && pnpm test && pnpm buildSecrets/env via Doppler (project tronbrowser):
doppler setup then doppler run -- <cmd> injects TRONBROWSER_DB_URL etc.
.env.example documents everything; .env is a gitignored fallback.
Database (Turso/libSQL) uses tracked migrations:
doppler run -- pnpm db:migrate # apply pending migrations
pnpm db:status # applied vs pendingThe Ungoogled-Chromium fork pipeline lives in
apps/desktop/chromium/ (pinned versions, GN args,
branding, patch series, guarded fetch/build scripts). It needs ~50 GB and a
capable machine; see its README and
ADR 0001.
Tag-driven, per-platform CI/CD (one repo, not 50):
pnpm version:set 0.1.4 && git tag v0.1.4 && git push origin v0.1.4release.yml builds linux/macos/windows artifacts (+ .deb/.rpm/AppImage) and
publishes a GitHub Release; submit-packages.yml refreshes the package managers.
| Milestone | Status | |
|---|---|---|
| M0 | Monorepo scaffold | ✅ done |
| M1 | Chromium fork | 🟡 pipeline + launcher + de-googled extension shipped; native binary not yet compiled |
| M2 | AI sidebar | ✅ done (BYOK, streaming, side panel) |
| M3 | Browser agents | ⬜ |
| M4 | Cloud services | 🟡 DB schema + sync client + migrations done; auth/sync API + web login not yet deployed |
| M5 | Mobile (React Native) | 🟡 Expo app linked to EAS (Phase 2 stub) |
| M6 | Plugins | ⬜ |
| M7 | Agent swarms | ⬜ |