Privacy and security hardening for stock Chromium without recompiling.

The root privacy.json and chromium-flags.conf are the default profile and mirror profiles/privacy-max.

• privacy-max: maintainer-preferred default; maximum privacy, Safe Browsing disabled, component updates disabled, Manifest V2 workaround enabled.
• privacy-max-no-mv2: same as privacy-max, without the Manifest V2 workaround.
• balanced: telemetry/cloud/AI/autofill/sync still disabled, but Standard Safe Browsing and component updates are allowed.

See profiles/README.md for the exact differences.

Manual install of the default profile:

cp chromium-flags.conf ~/.config/chromium-flags.conf
sudo mkdir -p /etc/chromium/policies/managed
sudo cp privacy.json /etc/chromium/policies/managed/privacy.json

Install a named profile:

./install.sh privacy-max
./install.sh privacy-max-no-mv2
./install.sh balanced

Restart Chromium, then check:

• chrome://version flags in the Command Line section
• chrome://policy applied policies

CC0