Yearly
Best value, save 17%Billed annually, A$69.99 a year
Free NVX isolates cookies, storage and script-set cookies per tab, and it always will. Pro closes the last gaps: the ones that need deeper access to the browser than an extension is normally given.
Priced between Raycast and Bitwarden, deliberately. It is a tool you keep open all day, not a subscription you forget.
Billed annually, A$69.99 a year
Billed monthly, cancel any time
Paid through Polar, the merchant of record. Your key appears on the next page and is emailed to you. Cancel any time from the customer portal. Payments are not refundable except where the law requires or where Pro cannot be made to work for you.
The free build is not a trial and it is not metered. It is the product. Pro exists for one reason: some isolation is genuinely hard, and the part that is hard needs a permission Chrome scrutinises, a debugger path we have to justify, and work that does not end when it ships.
If a feature can be done with declarative rules, it belongs in the free build, and that is where it will stay.
The top group is the product as it stands today, free and unmetered. The middle group is where the free build stops short, disclosed rather than hidden. The last group is the tier declarative rules cannot reach.
| Feature | FreeUnlimited, no account | ProNot available yet |
|---|---|---|
| Free, and staying free7 | ||
| Everything the product is actually for. None of it is metered, and none of it moves behind the paywall later. | ||
| Unlimited sessions | Included | Included |
| Per-tab cookie isolation | Included | Included |
| localStorage and sessionStorage isolation | Included | Included |
| document.cookie isolation, for cookies set by script | Included | Included |
| Fingerprint posture: Mirror and Standardize | Included | Included |
| Third-party control, with per-party allow | Included | Included |
| Journal, blast-radius guardrails, sign-in loop recovery | Included | Included |
| Where free stops short today3 | ||
| Three gaps the free build discloses rather than hides. Pro is what closes them, and the first one has to close before Pro is worth charging for. | ||
| IndexedDB isolation | Detected and named (Partly) | Fully isolated (Yes, included) |
| Behaviour when a tab cannot be isolated | Fails open (Partly) | Fails closed (Yes, included) |
| HTTP cache, which the platform shares between sessions | Shared (Partly) | Opt-in suppression (Yes, included) |
| The deep-isolation work5 | ||
| The tier header rewriting cannot reach. Most of it needs the debugger path, which is why it is opt-in and why it is not free. Where the platform sets a hard limit, the row says so rather than rounding up. | ||
| Exact mode: per-request interception that can withhold a cookie | Not included | Included |
| Work done on background threads, where sign-in sometimes happens | Not included | Best effort, not complete (Yes, included) |
| Persona: a coherent, unlinkable machine per session, on your real OS | Not included | Included |
| Sync your session structure across devices, encrypted end to end | Not included | Included |
| Container-style separate cookie stores | Not included | On the roadmap (Not applicable) |
Its accounts enforce consistency across the whole browser, so mixing a browser-level Google login with session logins can log you out of both. Isolation does not beat a provider that checks. The pattern that holds is to pick one and stay with it, rather than run both at once.
It exists so the accounts you already have stop colliding with each other. It is not built to conceal who you are from anyone, it is not tested against systems that look for that, and we will not imply otherwise in order to sell it.
That is a platform limit, not a to-do: an extension cannot cleanly separate either one. What Pro does for background threads is best effort, and for the cache it offers opt-in suppression rather than a per-session cache. Anyone claiming otherwise is describing something a browser extension cannot do.
A synced session arrives as a shell: its name, colour, pinned domains and posture, with an empty jar you sign into. That is not a shortcut we skipped. Modern sign-in, Google’s device-bound cookies among it, deliberately makes a copied login non-transferable, so a product promising your sessions arrive signed in is either wrong or about to be.
It gives each session a coherent machine that cannot be linked to your others, on the operating system you are actually running. It will not report Windows from a Mac, because the giveaway is never the headline value, it is the twenty other things that quietly disagree with it.
The free extension went to the Web Store first, and Pro was only put on sale once IndexedDB isolation was real, because until then the isolation promise had a hole in it that we had written down. We do not charge for a promise.
Anything else goes to support, which is one person, by email.
No. The free build is not a trial and it is not metered. It is the product. Unlimited sessions stay free, forever, and if a feature can be done with declarative rules, it belongs in the free build.
No, there are no accounts here. Activating a licence sends three things: the key you pasted, a random device identifier, and a coarse label such as “Windows, Chrome”. The privacy policy sets out exactly what is kept.
Yes. A licence follows you from one computer to another while staying one device at a time. The device identifier exists only to say “this seat is in use here”, so a seat can be transferred or released.
Recover it with the email you paid with, and it is sent to that address again.
Payments are not refundable except where the law requires or where Pro cannot be made to work for you: if it does not work on your browser and support cannot fix it within 7 days, that payment is refunded. The free tier is the trial, so try it first. The refund policy has the details.
No drip sequence, no launch countdown, no second email asking whether you saw the first.
Everything above is intent, not commitment. If a feature here turns out to be the wrong thing to build, we will say so on this page rather than quietly drop it.