v0.1.3362 Oct 2026·Privacy & Shields, Tabs & interface

Site controls that do what they say: permissions that really ask, and Shields per site

Every site now has one card, at the left of the address, with everything about it: the connection, your history with it, what it keeps on your device and every permission it can ask for. Ask now really asks: the system web view used to hand your camera and microphone to any site once your Mac allowed Floati, and now Floati asks first, with a live preview of what the site would see. Blocking stops a camera or microphone at once, the address bar shows what a site is using, and Shields can be set per site, with controls few browsers have.

Parity with the reference browser

74overall, as of v0.1.343

Web APIs / DOM surface42

Security architecture66

GPU / graphics acceleration68

DevTools / extensions72

Networking85

Media85

Accessibility85

Real-world site compatibility99

HTML parsing100

CSS parsing + selectors100

Layout: block / flex / grid / tables / writing-modes100

Paint + visual100

JavaScript language100

JavaScript performance (JIT)100

HTML parsing100

What changed 13 changes

Privacy & Shields	Ask really asks. On system web view tabs, macOS hands a site the camera and microphone silently once Floati itself is allowed. Floati now holds every camera, microphone, location, screen sharing, notification and MIDI request it has no answer for and shows its own prompt. Only the browser can answer it: each request carries a one-time secret the page never sees, so a site cannot click Allow for you.
Privacy & Shields	The prompt does not ask blind. Camera requests show a live preview of what the site would see (only you see it) and the camera's name; microphone requests show a level meter; and it tells you whether the connection is secure, how often you have been there, and whether any site already has your camera. If your Mac is the one refusing, it says so and opens the right setting, instead of the site failing mid-call.
Privacy & Shields	Allow for 1 hour, then it asks again on its own, for the one-off call or map lookup that should not leave a site allowed forever. Always, Only this time (this page only) and Never are there too. An hour running out never cuts a call in progress; only you can do that.
Privacy & Shields	Block stops it now. Switching a site to Block stops its camera, microphone, screen sharing or location tracking at once (the camera light goes off and the site sees the device end, as when a webcam is unplugged), not at its next request.
Tabs & interface	The address bar shows what a site is using: the site button turns into a camera, microphone, screen or location icon with a red dot while it is live, and a struck-through icon when you blocked it on that page. One click: Unblock and reload.
Privacy & Shields	Every permission a site can ask for, in one short card: camera, microphone, location, screen sharing, MIDI, notifications, pop-ups, sound (Block plays media muted), keeping the screen awake, reading your clipboard, and its data inside other sites. The card lists only what a site has a decision for, with All permissions one tap away; what the system web view never gives any site (USB, Bluetooth, serial, HID, VR and AR) is stated, not shown as switches that do nothing.
Tabs & interface	Test that it works, from the card: camera (live preview, resolution, pick a camera), microphone (level meter, pick a microphone), location (where you are and how accurately), notifications (a real test notification) and speakers (a chime, then: did you hear it?). A failure says why in plain words: the Mac refused, no device, or another app has it.
Privacy & Shields	The site card also shows your history with the site (visits, pages, first and last visit, from your own history, never sent anywhere), what it stores on this device with one-tap Clear, and Forget this site: history, data, permissions and Shields settings in one action.
Privacy & Shields	Shields per site, with more control than usual. The Floati tile at the right of the address shows what was blocked the moment the page settles (it used to wait for a second capture, about 20 seconds on a developer-docs site) and follows your accent colour and light or dark theme. Each site can have its own trackers and ads level (aggressive, standard, off), HTTPS upgrade (strict shows a warning page instead of loading over plain http), cookie blocking (all, cross-site, none), fingerprinting protection (canvas reads get per-site noise), and script blocking.
Privacy & Shields	Going further: block third-party scripts and frames for one site, block or allow a single domain on one site from the blocked-requests list, lower Shields for just this visit (undone when you close the site), and see how much was never downloaded.
Tabs & interface	Settings lists every site you changed, newest first, in a fixed-height list with search, inline editing, add a site by name, and reset one or all, so a hundred custom sites never become an endless scroll.
Privacy & Shields	Fixed: pages on shared hosts (shared hosting addresses where each subdomain is someone else's site) were treated as one site, so every user's pages shared cookies, Shields and permissions. Each is its own site now.
Privacy & Shields	Canvas toDataURL returns the real image (it was a 1x1 placeholder), with fingerprint noise when protection is on.