Candy Browser

A gesture-first browser with selectable GeckoView and Android System WebView engines, an iOS WKWebView and Liquid Glass target, and local privacy tools.

Features

Firefox extensions

- GeckoView by default, with support for Mozilla-signed Firefox extensions. - A fresh Gecko profile comes with uBlock Origin and I still don't care about cookies. - Extension actions, popups, options, permissions, updates, and enable or disable controls stay inside Candy's browser chrome.

Private by design

- Filtering, history, favourites, profiles, and privacy telemetry stay local. - Self-hosted end-to-end encrypted sync: the server never sees tab contents in plaintext.

Cross-device sync

- Candy Sync turns every connected Android, Chromium, or Firefox device into a writable profile. - Inspect live tab lists, open tabs, navigate, pin, reorder, or close them from your phone. - Small tab changes flow back to every connected client instead of re-uploading the full browser state.

Choose your engine

- GeckoView for Mozilla-signed Firefox extensions. - Android System WebView for Android's system-managed runtime, keeping Toppings and Candy protection.

Browsing and gestures

- Floating chrome over edge-to-edge content with configurable actions and a docked edge mode. - Pull to refresh, direct URL navigation, QR scanning, and optional provider-backed search suggestions, disabled in private tabs. - Multiple search engines, including Google, DuckDuckGo, Bing, Brave, Ecosia, Startpage, Qwant, Kagi, Perplexity, ChatGPT, and configurable SearXNG. - Address commands with > for tab, profile, cache, cookie, and navigation actions. - Candy Recall: optional, profile-scoped local full-text search across visited pages. - Link Peek: long-press a link to inspect it in a live, disposable preview. - External Link Preview: open links from other apps in a temporary preview instead of a new tab.

Tabs, profiles, and journeys

- Persistent tabs with saved previews, favicons, pinning, reordering, and automatic cleanup. - Coverflow, compact grid, and preview-free list layouts. - Candy Stacks: group tabs by name and colour. - Tab snoozing with scheduled returns and a dedicated manager. - Per-profile storage isolation, with private sessions kept in memory. - Candy Trails: persistent branching navigation graphs. - Site Capsules: profile-bound home-screen shortcuts.

Reading and page tools

- Reader Studio: local article extraction with typography, alignment, paper and night themes, offline saves, and text-to-speech. - Find in page with live match counts. - Toppings: bounded userscripts that customise matching pages without privileged browser APIs. - Per-domain mute controls and optional video autoplay prevention.

Media and picture-in-picture

- Native fullscreen for HTML5 and YouTube video. - Automatic Android picture-in-picture when leaving Candy with an active video. - Google Cast for compatible HTML5 MP4, WebM, HLS, and DASH video. - Draggable in-app mini-player and background audio playback. - Private-tab media stays transient and never enters picture-in-picture or system controls.

Local protection

- EasyList and EasyPrivacy hosts and cosmetics. - Third-party cookie blocking and cosmetic cookie-banner hiding. - Privacy X-Ray: live per-tab block counts, categories, and domains. - Permission Radar: per-site camera, microphone, and location activity. - Filter Studio: global or profile rules, import and export, and HTTPS subscriptions. - Safe Browsing, TLS failure handling, and blocked unsafe schemes.

Appearance

- System, light, dark, and AMOLED themes with Material You, Candy, or neutral palettes. - Clear or frosted surfaces, with adjustable live background blur.

Languages

English, French, German, Portuguese, Spanish.

License

Mozilla Public License 2.0