Skip to main content
Cromite provides extensive privacy and security configuration options through built-in settings pages and chrome:// URLs.

​
Chrome Settings Pages

Cromite includes special configuration pages accessible via chrome:// URLs:

chrome://flags

Enable or disable experimental features and Cromite-specific flags.

chrome://adblock

Configure ad blocking filter lists and rules.

chrome://proxy

Set up proxy configuration for network connections.

​
Privacy Settings

​
Core Privacy Features

Cromite enables strong privacy protections by default:
Both Do Not Track (DNT) and Global Privacy Control (GPC) are enabled by default, signaling your privacy preferences to websites.These headers inform websites that you don’t want to be tracked, though compliance is voluntary.
  • Third-party storage partitioning enabled
  • Blink memory cache partitioned
  • Blob URLs partitioned by top frame
  • HSTS cache partitioned by Network Anonymization Key (NAK)
HTTP referrers are removed on cross-origin navigation to prevent tracking across sites.

​
Android-Specific Privacy

Clear Data Between Restarts: Automatically clear browsing data when closing Cromite.Navigate to Settings → Privacy and Security → Clear data on exit.
Don’t Reopen Tabs: Prevent tabs from reopening between sessions.Find this option in Settings → Privacy and Security → Tab behavior.
Disable disk snapshots of pages, including in incognito mode.Navigate to chrome://flags and search for “page snapshots”.
Grant camera, microphone, or geolocation access:
  • Only once (single use)
  • Until page is closed (session-based)
  • Until device is closed
  • Always allow (permanent)

​
Security Settings

​
DNS over HTTPS (DoH)

DoH secure mode is enabled by default for encrypted DNS queries.
Configure DoH settings:
1

Open Settings

Navigate to Settings → Privacy and Security.
2

Security Section

Scroll to Use secure DNS.
3

Configure Provider

Choose your preferred DNS provider or enter a custom DoH URL.

​
Certificate Transparency

Certificate Transparency is enabled by default, validating SSL/TLS certificates against public logs to detect mis-issued certificates.

​
User Certificates

User certificates are disabled by default to prevent unauthorized proxies and man-in-the-middle attacks.
If you need to use custom certificates (e.g., corporate proxies):
  1. Navigate to chrome://flags
  2. Search for “user certificates”
  3. Enable the flag
  4. Restart Cromite

​
HTTPS-Only Mode (Android)

Block all non-HTTPS connections:
1

Open chrome://flags

Navigate to chrome://flags in the address bar.
2

Search for HTTPS-only

Find the “Block non-HTTPS connections” flag.
3

Enable

Enable the flag and restart the browser.
This may break access to HTTP-only websites.

​
Ad Blocking Configuration

​
chrome://adblock

Access the ad blocking configuration page at chrome://adblock.
Cromite uses AdBlock Plus (ABP) implemented in C++ with enhanced features:
  • CNAME uncloaking support
  • Blocking in workers
  • No “acceptable ads” tracking

​
Filter Lists

Cromite uses public filter lists for ad blocking. If ads appear on a website:
1

Check Filter Lists

Navigate to chrome://adblock and verify your active filter lists.
2

Update Lists

Ensure filter lists are up to date.
3

Report Issues

If the issue persists, report it to the appropriate filter list maintainer, not Cromite.
Common filter lists include EasyList, EasyPrivacy, and regional lists.

​
Site Settings

Configure per-site permissions and behaviors:

​
Available Site Settings

JavaScript

Enable or disable JavaScript execution per site.

Cookies

Control cookie access on a per-site basis.

Images

Allow or block image loading.

Autoplay

Control media autoplay behavior.

Ad Blocking

Enable or disable ad blocking per site.

Pop-ups

Block or allow pop-up windows.

​
Accessing Site Settings

1

From Settings Menu

Navigate to Settings → Site settings.
2

From Page Info

Tap the lock icon in the address bar, then Site settings.
3

Configure Permissions

Adjust permissions for the current site or global defaults.

​
Chrome Flags

​
Accessing chrome://flags

Navigate to chrome://flags to access experimental features:
Flags are experimental and may cause instability. Change settings carefully.
Flag: #vibration-apiDisable the Vibration API for privacy and battery saving.Recommendation: Disabled
Flag: #webglWebGL is disabled by default for fingerprinting protection.Recommendation: Keep disabled unless needed for specific sites
Flag: #webrtcWebRTC is disabled by default to prevent IP address leaks.Recommendation: Keep disabled unless needed for video calls
Flag: #save-data-headerSends a Save-Data header to request optimized content.Recommendation: Use with caution (fingerprinting risk)
Flag: #enable-javascript-jitEnable Just-In-Time JavaScript compilation for better performance.Recommendation: Enable per-site via Site Settings (see JIT Configuration)

​
Anti-Fingerprinting Settings

Cromite includes extensive anti-fingerprinting protections:

​
Canvas Fingerprinting

Canvas and Rect API fingerprinting mitigations are enabled by default.

​
Audio Fingerprinting

AudioBuffer and AnalyserNode fingerprinting protections are active.

​
Hardware Information

  • Device memory reported as generic values
  • CPU information obscured
  • Battery API disabled
  • GamePad API disabled by default

​
Custom Timezone

Set a custom timezone or use a random one:
1

Open chrome://flags

Navigate to chrome://flags.
2

Search Timezone

Search for “timezone” flags.
3

Configure

Set a custom timezone or enable random timezone.

​
User Agent Customization

Customize your User Agent string:
1

Access Settings

Navigate to Settings → Privacy and Security.
2

User Agent

Find the “User Agent” option.
3

Enter Custom String

Enter your desired User Agent or choose from presets.
Custom User Agents may break site compatibility or increase fingerprinting risk.

​
History Management

Control how long browsing history is retained:
1

Open Settings

Navigate to Settings → Privacy and Security.
2

History Settings

Find “History number of days” setting.
3

Set Duration

Choose how many days to retain history (or disable entirely).

​
Disabled Features

The following privacy-invasive features are disabled in Cromite:
These features cannot be re-enabled as they require Google APIs or compromise privacy:
  • Google Sync
  • Google Translate
  • Google Safe Browsing
  • Data Saver (Google servers)
  • IP Protection (Google servers)
  • Media Router and Casting (requires Play Store blobs)
  • Push Notifications (requires Google Cloud Messaging)
  • TWA/PWA installation (requires googleapis.com)
  • DRM media playback

​
Desktop-Specific Settings

​
High Efficiency Mode

Enabled by default on desktop to reduce resource usage for inactive tabs.

​
Keyboard Layout API Mitigation

Protects against keyboard layout fingerprinting.

​
ManifestV2 Extension Support

Cromite continues supporting ManifestV2 extensions on desktop.
Access extension settings at chrome://extensions.

Build docs developers (and LLMs) love

Get started for freeTalk to us