DocumentationAccounts and data
Where your data lives
The short version: what a profile’s browser holds stays on your computer; diagnostics, which you can turn off, send us page addresses and the network log. The catalog can be synced on the paid plans. The full account, line by line, is on Data & security.
On your computer only
On every plan, these stay on the computer where the profile was used and are not synced:
- browsing history, bookmarks and downloads;
- passwords saved in the profile’s browser;
- open tabs and sessions;
- the cookies and site data of a profile as it runs, and its cache;
- installed extensions;
- the key of the Local API;
- the history of connection checks.
It follows that a profile opened on a second computer starts with its settings but without its browsing data — see Cloud sync.
In the cloud, on the paid plans
Cloud sync on Pro and Team keeps the catalog on Liminal’s servers:
| What | Includes |
|---|---|
| Profiles | Names, fingerprint settings, and which connection, account, folder and tags each profile has. |
| Connections | Your proxies and VPN configurations, with their credentials. |
| Saved accounts | The cards and their imported cookies. |
| App settings | The theme and the connection settings. |
| Structure | Workspaces, folders, tags, templates and teams. |
Each of the first four can be switched off in Settings › Sync. On the Free plan nothing of this is uploaded: the catalog exists on your computer only.
How secrets are stored
- On your computer, proxy logins and passwords and the Local API key are kept in the system’s credential store — Keychain on macOS, Credential Manager on Windows.
- On the server, proxy passwords and cookie values are encrypted before they are stored. The key is Liminal’s: this protects the data if a database is stolen, not from Liminal itself. There is no end-to-end encryption.
- Your account’s password is stored only as a hash.
The servers are in Frankfurt, Germany.
What the app sends
Settings › General has a switch, Send product analytics — feature usage, without identifiers of your machine and without the content of pages. It is on by default; turn it off there. Send diagnostics sends us crashes, logs, network and fingerprint details so that we can fix problems; it is also on by default, and Data & security says what it records and what it leaves out. Beside them, What the app sends › Show… lists every channel the app talks over and what goes through each.
Export everything
In the app, Settings › Account › Manage Account… opens your account on the site. There, “Export my data” downloads one JSON file: profiles with their fingerprint settings, workspaces and folders, proxies with credentials, saved accounts with cookies, app settings, teams and payments.
Delete
- A profile
- Deleted at once and for good, together with its browsing data on this computer. There is no trash.
- Your account
- On the site, in your account: you type your email to confirm. Deletion is immediate — no grace period, nothing to restore from. What is on your own computers stays there until you remove the app’s data.
Important. An account whose teams have other people in them cannot be deleted: hand your additional teams over or delete them, and remove the members of your own team first — see Teams and roles.
Checked against the released app: October 2026. If the app does something else than this page says, the page is wrong — write to [email protected]. What changed in each version is in the changelog.