{"data":[{"slug":"1984-hosting","name":"1984 Hosting","notable":"Icelandic hosting with an explicit free-speech and privacy posture, Monero and Bitcoin accepted, and Tor-friendly access for domains, VPS, and shared hosting.","catch":"Iceland has functioning legal process like any EEA state; the posture is operator policy, not immunity. An email address and payment trail still exist unless the order is placed with the discipline the record notes.","use_case":"Small sites and servers where a privacy-forward operator and crypto payment matter more than scale.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/1984-hosting","citations":{"sources":[{"label":"1984 Hosting site","url":"https://1984.hosting/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"addy-io","name":"addy.io","notable":"addy.io provides open-source email aliasing with unlimited aliases on the free tier, a Securitum security audit, and Monero accepted through NOWPayments for yearly subscriptions.","catch":"Terms are governed by England and Wales law and service data sits on UpCloud servers in the Netherlands; the record notes Nginx and Postfix logs retain IP addresses for three days and can be disclosed when legally compelled.","use_case":"People wanting audited, open-source alias forwarding who accept UK legal process or self-host the software to remove that jurisdiction.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/addy-io","citations":{"sources":[{"label":"addy.io","url":"https://addy.io/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"airvpn","name":"AirVPN","notable":"AirVPN was founded in 2010 by a coalition of hacktivist and digital-rights groups, including the NEXA Centre and the Swedish and Italian Pirate Parties, and the record credits it with dropping Italian users in 2024 rather than complying with the country's Piracy Shield blocking mandate.","catch":"The record places Italy's EU jurisdiction below Five Eyes exposure but still short of the IVPN or Mullvad tier, since Italian courts and EU data directives still apply, and the record names no independent auditor for the service.","use_case":"EU-based privacy VPN use, anti-censorship access and Tor-over-VPN routing, run by an activist collective rather than a conventional company.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/airvpn","citations":{"sources":[{"label":"Official site","url":"https://airvpn.org/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"anonshop","name":"Anon Shop","notable":"Anon Shop proxy-buys from Amazon, eBay and other stores using Monero, offering locker delivery, address delivery or peer-shop order handling.","catch":"The operator's identity is not publicly disclosed and public information about them is limited, and the model requires trusting them with order contents and chat history; locker delivery avoids address disclosure but address delivery necessarily exposes shipping details to the operator.","use_case":"Monero-funded proxy purchases from mainstream retailers where locker delivery is chosen and the buyer accepts trusting an undisclosed, unvetted operator with order details.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/anonshop","citations":{"sources":[{"label":"Official site","url":"https://anonshop.app/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"azirevpn","name":"AzireVPN","notable":"AzireVPN runs RAM-only servers under what it calls Blind Operator 2.0, requiring no personal data at signup and offering WireGuard natively with multi-hop support.","catch":"Sweden's 14 Eyes membership means Swedish courts can still compel disclosure, though the diskless design limits what there is to hand over. The service is now owned by Malwarebytes, and its current public payment information does not confirm the Monero acceptance the feature list still shows, leaving that claim unverified.","use_case":"WireGuard users interested in RAM-only servers, provided they confirm current ownership and payment options directly rather than from the feature list alone.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/azirevpn","citations":{"sources":[{"label":"Official site","url":"https://www.azirevpn.com/"},{"label":"AzireVPN pricing","url":"https://www.azirevpn.com/pricing"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"azteco","name":"Azteco","notable":"Azteco sells Bitcoin vouchers for cash at retail locations across 190+ countries, redeemable to any Bitcoin or Lightning address, with features listing no account requirement and no KYC up to $1,000.","catch":"The company is incorporated in the UK, a Five Eyes jurisdiction, and the record notes that online purchases via card can expose cardholder data, so the no-identity property described depends on paying with cash at a physical vendor rather than on the redemption step itself.","use_case":"Cash-funded Bitcoin purchases at retail counters, or gifting Bitcoin to someone without needing their account details.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/azteco","citations":{"sources":[{"label":"Official site","url":"https://azte.co/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"bando","name":"Bando","notable":"Bando shifted from a consumer no-KYC top-up catalogue to a treasury and stablecoin platform for companies, with compliance handled through Etherfuse entities for services including Stablebonds and MXN/USDC conversion.","catch":"Official terms require Know Your Customer and Know Your Business checks for platform use and related financial services, so this no longer functions as a no-KYC listing.","use_case":"Fits companies that need compliance-managed MXN/USDC treasury rails through Etherfuse, not individuals looking for a no-KYC top-up.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/bando","citations":{"sources":[{"label":"Official site","url":"https://bando.cool/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"basicswap","name":"BasicSwap","notable":"BasicSwap runs atomic swaps directly between chains (BTC, XMR, LTC, FIRO, PART) with no platform fee, built on Particl's decentralized messaging network; Particl Stiftung is described as a Swiss non-profit foundation based in Zug.","catch":"The record discloses that an advisor, Charlie Shrem, has a historical conviction, notes there is no published independent security audit specifically for the BasicSwap code itself, and flags low trading volume and limited liquidity compared to custodial swap services.","use_case":"Fits users prioritizing a no-custodian, no-counterparty swap structure who accept thinner liquidity than custodial alternatives offer.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/basicswap","citations":{"sources":[{"label":"Official site","url":"https://basicswapdex.com"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"bisq","name":"Bisq","notable":"A desktop exchange with no operator: trades run peer-to-peer over Tor with multisig escrow and security deposits, so there is no company to hold funds, records, or a KYC file.","catch":"The fiat leg exposes bank or payment metadata to the counterparty, deposits and confirmation times make trades slower than custodial venues, and liquidity varies by market and payment method.","use_case":"Bitcoin-fiat trades where removing the operator entirely is worth the desktop workflow and slower settlement.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/bisq","citations":{"sources":[{"label":"Bisq site","url":"https://bisq.network/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"bitchat","name":"Bitchat","notable":"Bitchat uses Bluetooth mesh for nearby offline messaging and Nostr relays for wider reach. It requires no account or phone number and keeps identity keys on the device.","catch":"Bluetooth can expose proximity and relay patterns. Nostr relays can observe connection metadata. The app derives a persistent device identifier from its identity key.","use_case":"Nearby messaging without internet access or a central account.","reviewed_at":"2026-08-05","url":"https://cunicula.com/en/provider/bitchat","citations":{"sources":[{"label":"Bitchat official site","url":"https://bitchat.free"},{"label":"Bitchat source code","url":"https://github.com/permissionlesstech/bitchat"},{"label":"Bitchat protocol whitepaper","url":"https://github.com/permissionlesstech/bitchat/blob/main/WHITEPAPER.md"}],"reviewed_at":"2026-08-05","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"bitcoin-depot","name":"Bitcoin Depot","notable":"Bitcoin Depot operates over 15,000 listed cash Bitcoin ATM locations across the US and Canada with buy and sell service.","catch":"Every use requires phone verification and email, larger purchases may require photo ID, and the privacy notice lists biometric and SSN-related data collection under FinCEN/FINTRAC registration, alongside a 15% transaction fee.","use_case":"Cash-to-Bitcoin purchases at a physical machine for users who accept phone, email and potentially photo-ID verification.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/bitcoin-depot","citations":{"sources":[{"label":"Official site","url":"https://www.bitcoindepot.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"bitcoinvoucherbot","name":"BitcoinVoucherBot","notable":"Pseudonymous avatars plus automated Lightning escrow, with no email, phone, or documents; avatar creation costs only an anti-spam Lightning invoice.","catch":"The recorded 5% fee is the highest in its peer group, and fiat settlement runs directly between counterparties over methods that can expose payment metadata.","use_case":"Occasional peer-to-peer purchases where the identity-free flow justifies the premium.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/bitcoinvoucherbot","citations":{"sources":[{"label":"Bitcoin Voucher Bot site","url":"https://bitcoinvoucher.bot/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"bitpay-gift-cards","name":"BitPay Gift Cards","notable":"BitPay's gift-card marketplace sits inside its app and browser extension, letting brand gift cards be bought from a self-custody wallet, and founderIntel records over $70M in institutional funding from Index Ventures, Founders Fund and Aquiline.","catch":"The gift-card page does not surface document KYC directly, but BitPay is a US NMLS/NYDFS licensed virtual-currency business whose legal pages describe identity verification and fraud-prevention checks across its services, with account and device data collected depending on the path taken.","use_case":"US-based buyers already holding crypto in a self-custody wallet who want brand gift cards inside a licensed platform.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/bitpay-gift-cards","citations":{"sources":[{"label":"Gift card page","url":"https://www.bitpay.com/gift-cards"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"bitrefill","name":"Bitrefill","notable":"Bitrefill bundles gift cards, mobile top-ups, eSIMs and bill payment into one Lightning-capable checkout, with coverage listed across 170+ countries.","catch":"Terms state that suspicious transactions may trigger KYC on gift-card and top-up purchases, and verified accounts are already required for some bill and card products, so the light-KYC surface can escalate without notice.","use_case":"Everyday gift-card, top-up and eSIM purchases paid in crypto or Lightning where an occasional identity check is an accepted tradeoff.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/bitrefill","citations":{"sources":[{"label":"Official site","url":"https://www.bitrefill.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"boltz","name":"Boltz","notable":"Swaps between Lightning, on-chain Bitcoin, and Liquid settle through hash time-locked contracts, so the operator never takes custody and there is no account or deposit window to freeze.","catch":"Scope is movement between Bitcoin layers, not cross-asset privacy: both legs leave footprints that amount and timing correlation can connect, and Lightning routing has its own metadata.","use_case":"Moving value between Bitcoin layers without an account or custody exposure.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/boltz","citations":{"sources":[{"label":"Boltz documentation","url":"https://docs.boltz.exchange/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"briar","name":"Briar","notable":"Briar routes peer-to-peer encrypted messaging over Tor, Wi-Fi or Bluetooth with no central server, and its privacy policy states message content and metadata are not accessible to the operator.","catch":"The record documents more than $361,100 in Open Technology Fund grants tied to US State Department and USAGM channels, plus Internews and NLnet support, a funding history it flags as relevant to US or EU government threat models.","use_case":"Activists and journalists who want server-less peer-to-peer messaging and are willing to weigh the project's public-interest grant funding.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/briar","citations":{"sources":[{"label":"Briar Project","url":"https://briarproject.org"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"btcpay-server","name":"BTCPay Server","notable":"A self-hosted payment processor: merchants accept Bitcoin and Lightning directly to their own keys, with no fees, no intermediary, and no KYC anywhere in the architecture.","catch":"Self-hosting is the cost: server operations, key management, and uptime fall on the merchant, and using a third-party host reintroduces exactly the intermediary the software removes.","use_case":"Merchants who want direct crypto acceptance and are prepared to run infrastructure for it.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/btcpay-server","citations":{"sources":[{"label":"BTCPay Server documentation","url":"https://docs.btcpayserver.org/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"btcvps","name":"BTCVPS","notable":"KVM VPS from about 4 euros per month, refundable within 15 days, with email-only signup and payment in Monero, Bitcoin and other listed coins. Official terms state no government ID, full legal name, home address, phone, billing address, credit card data or KYC documents are collected, with servers located in the Netherlands and Lithuania.","catch":"Terms state BTCVPS is not bulletproof hosting and complies with Dutch jurisdiction and valid court orders. The privacy policy also notes that default Nginx access logs may include IP address, path, timestamp, user agent and status code for operational and security purposes, even though app-level IP tracking is not used.","use_case":"Suits users who want disclosed EU jurisdiction and crypto-paid VPS signup without submitting identity documents.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/btcvps","citations":{"sources":[{"label":"Official site","url":"https://btcvps.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"cake-pay","name":"Cake Pay","notable":"Cake Pay is built by Cake Labs, the team behind Cake Wallet, and lists 150+ brands for XMR or BTC-funded gift-card and payment-card purchases with instant delivery, funded through Monero CCS grants and Cake Wallet revenue rather than outside VC.","catch":"The record lists jurisdiction as KN even though founderIntel places the company and its CEO in St. Louis, US, and baseline checkout already requires a valid email; terms allow KYC for higher limits and note that issuing merchants or card programs may require personal information for some products.","use_case":"Monero-funded gift-card and payment-card purchases from a small, named team, for buyers willing to provide an email at checkout.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/cake-pay","citations":{"sources":[{"label":"Official site","url":"https://cakepay.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"cake-wallet","name":"Cake Wallet","notable":"Cake Wallet covers XMR, ZEC, BTC and LTC in one self-custodial app, with no account required and a built-in swap that routes through the third-party exchange Trocador rather than a hosted exchange Cake operates itself.","catch":"The built-in swap hands each trade to Trocador, a separate service whose own policies and data handling then apply, and the US-based operator is separately tagged Five Eyes jurisdiction in the record.","use_case":"Multi-coin no-KYC self-custody for holders who want XMR, ZEC, BTC and LTC in a single app.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/cake-wallet","citations":{"sources":[{"label":"Official site","url":"https://cakewallet.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"calyx-institute","name":"Calyx Institute","notable":"Calyx Institute is a US nonprofit running CalyxOS alongside donations, memberships and mobile hotspots, with CalyxOS shipping on Pixel and Motorola devices with microG included and no Google account required.","catch":"The nonprofit operates in US/Five Eyes jurisdiction and received Open Technology Fund (US State Department/USAGM) money for CalyxOS development, and membership, shipping and payment records can be disclosed under lawful orders.","use_case":"A fit for people wanting a de-googled Android build or choosing to fund digital-rights work through membership, within US jurisdiction.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/calyx-institute","citations":{"sources":[{"label":"Official site","url":"https://calyxinstitute.org/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"cashu","name":"Cashu","notable":"Cashu is a Chaumian e-cash protocol on Bitcoin Lightning where the mint cannot link a deposit to a later withdrawal, and tokens act as bearer instruments with no account or identity attached.","catch":"Each mint is a single-sig custodian, so a mint that is hacked or disappears leaves its tokens worthless, and the lead developer's own README discloses not being a cryptographer and states the work has not been reviewed.","use_case":"Suited to Bitcoin users moving small Lightning balances through mints they already trust, not long-term storage.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/cashu","citations":{"sources":[{"label":"Official site","url":"https://cashu.space"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"changehero","name":"ChangeHero","notable":"ChangeHero names CEO Igor Zelenovski and lists dual registration as Herofintechs LIMITADA in Costa Rica alongside a Hong Kong filing per SEC records, with no-KYC marketing for purchases up to 700 EUR and native XMR/ZEC support.","catch":"A Canadian MSB link through MoneyMaple Tech Ltd. brings Five Eyes exposure, and terms reserve AML/KYC checks and document requests for fiat, card, or flagged transactions above the no-KYC threshold.","use_case":"Fits occasional small crypto-to-crypto or card-based swaps where a buyer accepts that larger or flagged transactions can trigger identity document requests.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/changehero","citations":{"sources":[{"label":"Official site","url":"https://changehero.io/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"cheapgpt","name":"CheapGPT","notable":"CheapGPT is a Selly-hosted storefront reselling AI subscription and voucher products, including Perplexity, Grammarly and Picsart bundles, delivered by email.","catch":"No corporate entity is disclosed for the operator, and the record flags it as a gray-market reseller where product legitimacy, warranty and voucher durability depend on the counterparty.","use_case":"Only for buyers willing to accept an unvetted reseller and email-delivered vouchers over a direct subscription.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/cheapgpt","citations":{"sources":[{"label":"Official site","url":"https://cheapgp.selly.store/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"clearswap","name":"ClearSwap","notable":"ClearSwap is marketed as a confidential swap app, but its own privacy policy discloses collection of email, wallet address, device, browser and IP data, and the site loads Google Analytics.","catch":"Trust level is unvetted: no corporate entity or operator is disclosed, legal documents are described as generic templates, and the GB jurisdiction tag sits alongside broad data-collection terms rather than a verified no-KYC policy.","use_case":"Fits users comparing swap frontends who treat this one, tagged unvetted, as a lower-confidence option pending more independent review.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/clearswap","citations":{"sources":[{"label":"Official site","url":"https://clearswap.io/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"coincards","name":"CoinCards","notable":"CoinCards accepts Bitcoin, Lightning, Litecoin, Monero and Ethereum for gift cards, top-ups and vouchers across Canadian, EU and UK stores, run by a bootstrapped company with no outside venture capital named in the record.","catch":"The privacy policy reserves the right to request identity and address verification, naming passports, driver's licences and national identity cards as acceptable documents, and Canada is a Five Eyes jurisdiction for any data collected.","use_case":"Monero or Lightning-funded gift-card purchases in Canada, the EU or UK for buyers who accept standing ID-verification terms even if rarely invoked.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/coincards","citations":{"sources":[{"label":"Official site","url":"https://coincards.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"coinflip","name":"CoinFlip","notable":"CoinFlip, branded Olliv in parts of its network, offers cash Bitcoin ATM buy and sell service across US locations.","catch":"The record notes that during this review pass the official site redirected to an Italian MiCA-authorized entity page rather than a confirmed US-specific page, so prior phone/ID verification risk is retained and jurisdiction or routing should be rechecked from a US network before stronger claims are made, alongside a 15% fee.","use_case":"Cash Bitcoin ATM transactions for users who accept phone or ID verification and some unresolved uncertainty about which entity currently governs the service.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/coinflip","citations":{"sources":[{"label":"Official site","url":"https://coinflip.tech/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"coingate-gift-cards","name":"CoinGate Gift Cards","notable":"CoinGate's gift-card marketplace lists over 3000 brands and accepts 70+ cryptocurrencies alongside card, Apple Pay, Google Pay and Binance Pay checkout, with a no-account option listed for the purchase flow.","catch":"The operator is a Lithuanian entity registered under EU MiCA/CASP rules, and the record notes that gift-card checkout does not assure no-KYC treatment, since account-level KYC/AML can still apply and payment data can be screened.","use_case":"Buyers who want a wide gift-card catalog under formal EU payment-provider oversight rather than an unregulated marketplace.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/coingate-gift-cards","citations":{"sources":[{"label":"Gift card page","url":"https://coingate.com/gift-cards"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"coinoswap","name":"CoinoSwap","notable":"CoinoSwap operates as a non-custodial rate-comparison aggregator, advertising no-account and no-login swap guides across its partner exchanges.","catch":"CoinoSwap discloses no operator name or corporate entity, and partner exchanges or on-ramps can apply their own KYC thresholds despite the no-KYC framing on its own pages.","use_case":"Useful for comparing swap rates across partners, provided identity checks further down the chain are acceptable.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/coinoswap","citations":{"sources":[{"label":"Official site","url":"https://coinoswap.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"coinsbee","name":"Coinsbee","notable":"Coinsbee lists more than 4000 brands and over 200 accepted cryptocurrencies across 185+ countries, run by a small bootstrapped German GmbH with no outside investors named in the record.","catch":"The official KYC/AML page caps unverified use at 1,000 EUR per order and 10,000 EUR total before Sumsub verification applies, and some products are restricted to verified accounts from the start.","use_case":"Smaller gift-card or top-up orders that stay under the unverified spend ceiling.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/coinsbee","citations":{"sources":[{"label":"Official site","url":"https://www.coinsbee.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"coldcard","name":"Coldcard","notable":"Coldcard is a Bitcoin-only hardware signer from Coinkite that signs PSBTs through MicroSD or QR without a computer connection, and ships with a duress PIN and open source firmware.","catch":"Coinkite is based in Canada, a Five Eyes jurisdiction, and while the device itself holds no user data, a hardware purchase can expose a shipping address unless ordered with privacy-preserving delivery.","use_case":"Matches Bitcoin holders who want air-gapped signing and self-custody and who handle their own purchase and shipping privacy.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/coldcard","citations":{"sources":[{"label":"Official site","url":"https://coldcard.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"crypton-sh","name":"Crypton.sh","notable":"Crypton.sh bundles phone numbers, travel eSIMs, Crypton Mobile and email aliases under a stated no-name, no-email, no-identity-verification policy, operated by Rinzler Labs and registered in Scotland per its privacy policy.","catch":"The operator is pseudonymous and self-funded with no disclosed investment, and the record notes that telecom numbers and eSIMs remain carrier-facing services where payment, login and support flows can still create metadata.","use_case":"Crypto-paying users wanting bundled, identity-free telecom and email services from a small, pseudonymously run operator.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/crypton-sh","citations":{"sources":[{"label":"Crypton.sh","url":"https://crypton.sh/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"cryptorefills","name":"CryptoRefills","notable":"Cryptorefills combines gift cards, mobile top-ups, eSIMs and flight or hotel bookings in one checkout accepting 100+ cryptocurrencies at a 1% fee.","catch":"The homepage markets no KYC, but the terms describe a Tier 3/full KYC path requiring photo ID and a live image once spend limits, travel bookings or risk flags trigger it, so the no-KYC framing only holds below those thresholds.","use_case":"Small routine purchases and top-ups that stay under the tiers which would trigger full verification.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/cryptorefills","citations":{"sources":[{"label":"Official site","url":"https://www.cryptorefills.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"cryptostorm","name":"Cryptostorm","notable":"Token-based access with no accounts at all: a token bought with Monero carries no email or identity, and the service publishes Tor and I2P access paths.","catch":"Operator opacity is the recorded warning: no verified legal entity, and the privacy policy itself states web logs persist up to two weeks. The design is strong; the accountability evidence is thin.","use_case":"Users who weight account-less architecture above operator transparency and accept that trade knowingly.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/cryptostorm","citations":{"sources":[{"label":"cryptostorm privacy policy","url":"https://cryptostorm.is/privacy"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"cyphergoat","name":"CypherGoat","notable":"CypherGoat compares partner exchanges through an open-source, Monero-native aggregator that offers Tor and I2P access plus a no-account, no-email, no-signup homepage claim.","catch":"Official terms note that partnered exchanges may occasionally require KYC for AML purposes and that some partners may log IP addresses, so protection depends on which partner handles a given swap.","use_case":"Aimed at Monero-focused users who want Tor or I2P swap access and accept occasional partner-level checks.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/cyphergoat","citations":{"sources":[{"label":"Official site","url":"https://cyphergoat.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"divestos","name":"DivestOS","notable":"DivestOS was an open-source Android and LineageOS soft fork built from 2014 by a pseudonymous developer who won the FSF 2022 Award for Outstanding New Free Software Contributor.","catch":"The project was discontinued in December 2024 due to funding exhaustion and no longer receives security updates, and the record marks it for historical reference only.","use_case":"Relevant to researchers looking at Android privacy history rather than anyone configuring a device today; the record itself points to maintained alternatives.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/divestos","citations":{"sources":[{"label":"Official site","url":"https://divested.dev/pages/software"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"egifter","name":"eGifter","notable":"eGifter lists hundreds of US brands plus Visa and choice cards, group gifting and a points program, with Bitcoin or crypto accepted as one checkout option alongside card payment.","catch":"The privacy policy documents collection of name, postal address, email, phone number, IP address, date of birth, payment data, order data and third-party fraud-detection data, and an account with email is required for every purchase.","use_case":"Ordinary US gift-card shopping where crypto is just one of several payment options and broad personal-data collection is already part of the terms.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/egifter","citations":{"sources":[{"label":"Crypto checkout page","url":"https://www.egifter.com/crypto"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"eigenwallet","name":"eigenwallet","notable":"Bitcoin-to-Monero atomic swaps inside an open-source Monero wallet, with built-in Tor and no accounts; formerly UnstoppableSwap. The swap protocol removes the intermediary an instant exchanger would be.","catch":"Liquidity depends on independent makers, the record notes a maker-side griefing incident in May 2026 (patched in v4.6.7), and no legal entity or jurisdiction is verified for the project.","use_case":"Acquiring Monero from Bitcoin without any account, for users comfortable with maker-dependent liquidity.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/eigenwallet","citations":{"sources":[{"label":"eigenwallet site","url":"https://eigenwallet.org/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"encryptsim","name":"encryptSIM","notable":"encryptSIM sells global data eSIMs across 138 or more countries with terms stating no identity verification, no account registration and no personal data collection for eSIM purchase or activation, paid in cryptocurrency.","catch":"The service advertises SOC2 Type II certification, but the record lists no verified auditor for that claim. It is incorporated as Lumific Inc. in Delaware with Toolbase AI Private Limited named as IP owner, and its no-logs claim does not extend to the third-party carrier networks that control coverage and compliance.","use_case":"Crypto-paying travelers wanting data-only eSIM coverage without a named account, who accept an unvetted, thinly documented operator.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/encryptsim","citations":{"sources":[{"label":"encryptSIM","url":"https://encryptsim.com"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"exolix","name":"Exolix","notable":"Exolix supports 350+ assets with no account for standard swaps and is integrated directly into the Monerujo Android wallet, which the record notes as a form of community association rather than formal endorsement.","catch":"Company jurisdiction and ownership are not publicly disclosed, and the record recommends small-to-medium swap amounts only until independent security review exists; AML/KYC controls can still trigger identity checks on flagged transactions.","use_case":"Fits Monerujo wallet users making routine XMR conversions who keep individual swaps modest in size.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/exolix","citations":{"sources":[{"label":"Official site","url":"https://exolix.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"feather-wallet","name":"Feather Wallet","notable":"A Monero desktop wallet that routes over Tor by default, ships coin control for power users, and runs on Tails. Free, open source, and focused on doing one chain well.","catch":"Like any light wallet, it reveals what a remote node can see unless paired with an owned node; the Tor default protects the network path, not the node relationship.","use_case":"Desktop Monero management for users who want Tor and coin control without running a full stack.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/feather-wallet","citations":{"sources":[{"label":"Feather Wallet site","url":"https://featherwallet.org/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"filen","name":"Filen","notable":"Zero-knowledge encrypted storage from Germany with open-source clients and end-to-end encrypted collaboration features on top of file sync.","catch":"No crypto payment route was verified in the current review: cards and PayPal name the account holder, which undercuts the anonymous-account angle even though the content encryption stands.","use_case":"Encrypted storage under EU jurisdiction where payment identity is an acceptable trade.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/filen","citations":{"sources":[{"label":"Filen site","url":"https://filen.io/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"fixedfloat","name":"FixedFloat","notable":"FixedFloat supports fixed and floating rate swaps with no account and Lightning Network support; the jurisdiction field lists Marshall Islands, while its legal registration is separately reported as London, UK per Tracxn, with no individual founders named.","catch":"Two 2024 hacks are documented: $26.1M stolen in February and a further $2.8M in April by the same attacker group exploiting third-party hosting; the team cooperated with law enforcement afterward by its own account, but the record still flags user funds as being at elevated risk.","use_case":"Fits users who have weighed the 2024 breach history against the fixed-rate, no-account swap flow before sending funds.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/fixedfloat","citations":{"sources":[{"label":"Official site","url":"https://ff.io/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"flexa","name":"Flexa","notable":"Flexa lets ZEC, XMR and BTC be spent at named retailers including Chipotle, GameStop and Sheetz through the Zashi wallet, with instant settlement at roughly a 1% fee.","catch":"Terms tie each account to a verifiable identity, authorize identity inquiries, and allow Flexa to close, suspend or limit access when required identity information is not obtained, so retail spend is not identity-free even when the coin used is privacy-oriented.","use_case":"Spending ZEC, XMR or BTC at everyday US retailers where the payment network itself, not the coin used, sets the identity requirement.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/flexa","citations":{"sources":[{"label":"Official site","url":"https://flexa.co/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"flokinet","name":"FlokiNET","notable":"VPS and dedicated servers across Iceland, Romania, and Finland with Monero, Zcash, and Bitcoin accepted throughout, under an operator with a documented tolerance for controversial-but-lawful content.","catch":"All three locations are EEA or EU states with functioning legal process; choosing between them shifts exposure rather than removing it, and the hardware answers to wherever it physically runs.","use_case":"Server placement with per-location choice and crypto payment, ordered with the discipline the record notes.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/flokinet","citations":{"sources":[{"label":"FlokiNET site","url":"https://flokinet.is/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"foundation-passport","name":"Foundation Passport","notable":"Foundation Passport signs transactions entirely through QR codes, with no USB or Bluetooth connection at all, and raised a $7M Series A from SV Angel, Ten31 and Lightning Ventures around an open source hardware and firmware design.","catch":"Foundation Devices is a US entity, which the record places in Five Eyes jurisdiction even though the device itself holds no keys or server-side data; the record also lists no named third-party audit and notes a hardware purchase can expose a shipping address.","use_case":"Cold storage and QR-based signing where open source hardware verification matters more than phone-connected convenience.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/foundation-passport","citations":{"sources":[{"label":"Official site","url":"https://foundation.xyz/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"framework","name":"Framework Computer","notable":"Framework Computer makes modular, repairable laptops with hardware kill switches for the camera and microphone, and sells models without a pre-installed proprietary OS for Linux use. The record lists CEO Nirav Patel, previously seven years at Oculus/Meta, and Series A and A-1 funding of $18M and $17M led by Spark.","catch":"Framework is a US company operating in Five Eyes jurisdiction per the record, with its funding coming from Spark and other named venture investors rather than a bootstrapped structure.","use_case":"Suited to Linux users who want repairable, modular hardware with physical kill switches from a US-based, VC-funded maker.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/framework","citations":{"sources":[{"label":"Official site","url":"https://frame.work/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"ghostswap","name":"GhostSwap","notable":"GhostSwap covers BTC, ETH, XMR and more than 1,600 coins through a no-account aggregator, with content supporting Tor browser access and no signup or email requirement for standard swaps.","catch":"Terms disclose automated AML and sanctions screening by licensed processing partners that can block, reject or refund flagged transactions, and no public founder or operating jurisdiction is on record.","use_case":"Fits users making standard no-account swaps across many coins who accept partner-level AML screening as a condition of use.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/ghostswap","citations":{"sources":[{"label":"Official site","url":"https://ghostswap.io/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"godex","name":"Godex.io","notable":"Godex is registered as Godex Foundation Limited under Hong Kong's Companies Ordinance (Registrar #77557945), lists a London address the record identifies as a mail drop, and advertises no email, no registration and a 4.6/5 Trustpilot score.","catch":"Despite no-KYC marketing, Godex publishes an AML/KYC policy that reserves customer verification and government ID requests under risk controls, and no founders are identified behind the Hong Kong entity.","use_case":"Fits users outside the US and sanctioned jurisdictions making routine XMR or ZEC swaps who accept that flagged transactions can trigger ID requests.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/godex","citations":{"sources":[{"label":"Official site","url":"https://godex.io/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"grapheneos","name":"GrapheneOS","notable":"A hardened Android build with verified boot, sandboxed Google Play instead of privileged Play services, and no account anywhere in installation or use. The security work is original engineering, not repackaging.","catch":"It runs only on Pixel hardware, so the base device is Google's, and some apps behave differently under the hardening. The OS cannot fix what the cellular network sees.","use_case":"Phone-level privacy for users willing to buy a Pixel and install an OS to avoid carrier and account linkage.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/grapheneos","citations":{"sources":[{"label":"GrapheneOS features","url":"https://grapheneos.org/features"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"haveno-dex","name":"Haveno","notable":"Peer-to-peer trading with Monero settlement, Tor-only access, and no operator custody: the Bisq model rebuilt around a chain that is private by default.","catch":"The security-deposit model requires holding Monero before the first trade, fiat legs still expose payment metadata to counterparties, and liquidity depends on the network of peers running it.","use_case":"Moving between fiat and Monero without an account, for users past the initial XMR bootstrap.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/haveno-dex","citations":{"sources":[{"label":"Haveno site","url":"https://haveno.exchange/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"hodlhodl","name":"Hodl Hodl","notable":"Non-custodial P2P Bitcoin trading with multisig escrow and over a hundred fiat payment routes; the platform never holds the coins, and the FAQ commits to no KYC or AML checks.","catch":"An email account is still required, the current legal entity behind the footer is not clearly verified in the record, and the fiat leg carries whatever metadata the chosen payment method creates.","use_case":"Bitcoin P2P trades where breadth of payment methods matters and multisig escrow is enough operator involvement.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/hodlhodl","citations":{"sources":[{"label":"Hodl Hodl FAQ","url":"https://hodlhodl.com/pages/faq"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"hyperliquid","name":"Hyperliquid","notable":"Hyperliquid is a wallet-connect perpetuals and spot DEX on its own L1, charging a 0.035% fee with no identity-document flow in normal use and no stated daily limit; the jurisdiction field is recorded as US even though the interface itself excludes US persons.","catch":"The official interface excludes US persons, Ontario, and sanctioned or restricted territories, prohibits VPN or proxy circumvention, and the record cautions against treating this as a privacy-preserving no-KYC swap since compliance risk remains for US-facing use.","use_case":"Fits traders outside restricted jurisdictions who want wallet-only perpetuals or spot access and accept a geofenced, compliance-restricted interface.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/hyperliquid","citations":{"sources":[{"label":"Official app","url":"https://app.hyperliquid.xyz"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"i2p","name":"I2P (Invisible Internet Project)","notable":"An overlay network built inward-first: hidden services and peer-to-peer applications inside the network, with every participant relaying traffic through layered encrypted tunnels.","catch":"It is not designed for browsing the ordinary web, the network and therefore the anonymity set are smaller than Tor's, and the privacy properties depend on correct application configuration.","use_case":"Hosting or reaching internal services where the traffic never needs to exit to the clearnet.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/i2p","citations":{"sources":[{"label":"I2P introduction","url":"https://geti2p.net/en/about/intro"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"incognet","name":"IncogNET","notable":"VPS and dedicated server hosting that accepts Monero and Bitcoin, lists a no-logs policy and a DMCA-ignored stance among its features, and is run as an independent, bootstrapped operation without venture capital, with server locations in the Netherlands and Finland despite being a US-registered LLC.","catch":"The record flags Five Eyes jurisdiction directly as a privacy warning since IncogNET is a US-registered LLC, and the kyc note recommends strict operational security, Tor access and Monero payment, rather than relying on the no-KYC claim on its own.","use_case":"Works for users seeking DMCA-resistant VPS or dedicated hosting who are prepared to add their own operational security given US jurisdiction.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/incognet","citations":{"sources":[{"label":"Official site","url":"https://incognet.io/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"infinity-exchanger","name":"Infinity Exchanger","notable":"Infinity Exchanger runs on its own reserve for BTC and XMR swaps, has both clearnet and onion access, and carries a KYCnot guaranteed no-KYC listing scored 9/10 for its no-data-collection policy.","catch":"KYCnot's separate user-rating average sits near 3.2 out of 5 across 11 ratings with limited recent checks, and as an own-reserve exchanger it carries custody and liquidity risk during the transaction window while operators and jurisdiction remain undisclosed.","use_case":"Fits small BTC or XMR test swaps from users who are comfortable with an operator whose identity and jurisdiction are not disclosed.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/infinity-exchanger","citations":{"sources":[{"label":"Official site","url":"https://exchanger.infinity.taxi/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"intercambio","name":"Intercambio","notable":"A swap aggregator from the OrangeFren and Majestic Bank operators that works without JavaScript, publishes Tor and I2P mirrors, claims no IP or timestamp logging, and deletes exchange data after thirty days.","catch":"The executing partner controls the swap: whichever exchange fills the order applies its own risk screening and KYC triggers, whatever the front-end's own posture is.","use_case":"Booking Monero-centric swaps through a minimal, mirror-accessible front-end while accepting partner-level rules.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/intercambio","citations":{"sources":[{"label":"Intercambio site","url":"https://intercambio.app/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"internxt","name":"Internxt","notable":"Internxt is Spanish zero-knowledge encrypted cloud storage that advertises account creation with no identity requirement and post-quantum encryption, with a design the record says has won Spanish data-protection authority awards.","catch":"Its roughly 8.46 million euro raised includes Telefonica/Wayra and Prosegur, which the record flags as a state-aligned telecom investor and a security contractor, and crypto checkout is limited to lifetime plans while annual plans require conventional payment.","use_case":"Users wanting zero-knowledge storage under Spanish and EU law who have weighed the state-aligned and security-contractor names among its investors.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/internxt","citations":{"sources":[{"label":"Internxt","url":"https://internxt.com"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"ivpn","name":"IVPN","notable":"Account creation issues an ID with no email, payment can be made in Monero or Bitcoin, and the no-logging claims carry a Cure53 audit trail rather than only a policy page.","catch":"Incorporation in Gibraltar, a British overseas territory, sits closer to UK legal process than a non-aligned jurisdiction. Paying by card or PayPal attaches a name to the account the signup flow kept clean.","use_case":"Audited multi-hop VPN use where the whole identity surface, signup and payment included, needs to stay empty.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/ivpn","citations":{"sources":[{"label":"IVPN privacy policy","url":"https://www.ivpn.net/en/privacy/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"jmp-chat","name":"JMP.chat","notable":"JMP.chat issues a real US or Canadian phone number for SMS, MMS and calls routed over Jabber and XMPP, with signup that needs no identity documents and payment accepted in Bitcoin or Lightning.","catch":"The service operates under Canadian and British Columbia jurisdiction, and the record flags telephone metadata, carrier and XMPP routing, and lawful requests as ongoing threat-model risks despite the minimal-data design.","use_case":"People who want a real North American number reachable through an XMPP client without identity documents at signup.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/jmp-chat","citations":{"sources":[{"label":"JMP.chat","url":"https://jmp.chat/"},{"label":"JMP.chat credits and source code","url":"https://jmp.chat/credits"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"joinmarket","name":"JoinMarket","notable":"JoinMarket is a decentralized Bitcoin CoinJoin implementation created by pseudonymous researcher Chris Belcher, with no central coordinator and a market structure where makers earn fees for providing liquidity.","catch":"The official joinmarket-clientserver repository was archived and made read-only as of April 2026, so anyone using it needs advanced Bitcoin Core and Tor setup and should verify future maintenance before relying on it.","use_case":"For advanced Bitcoin users running their own node who want leaderless CoinJoin privacy and can manage an archived project's setup.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/joinmarket","citations":{"sources":[{"label":"GitHub repository","url":"https://github.com/JoinMarket-Org/joinmarket-clientserver"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"juicysms","name":"JuicySMS","notable":"JuicySMS offers SMS verification and number rental through a web account and API, accepting cards alongside Bitcoin, Ethereum, Litecoin and Monero.","catch":"JuicySMS discloses little about its operator and sits at an unvetted trust rating, and ordinary use still requires a login, a stored account balance and API activity that its no-document-verification policy does not remove.","use_case":"Developers who want SMS verification through an API and accept an unvetted operator with an unconfirmed jurisdiction.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/juicysms","citations":{"sources":[{"label":"JuicySMS","url":"https://juicysms.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"kemycard","name":"KemyCard","notable":"KemyCard issues virtual and physical Mastercards with multi-currency accounts, Apple Pay and Google Pay support, funded by crypto top-up.","catch":"Full eKYC through Sumsub or Veriff with biometric and ID verification, plus AML monitoring, is required for the main flow. The founders are not publicly named, and founderIntel found no regulatory licenses or MSB registration for the Delaware entity behind a product that charges a 5% fee.","use_case":"Users willing to accept full biometric KYC from an unlicensed, unnamed operator in exchange for a Mastercard-branded crypto card.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/kemycard","citations":{"sources":[{"label":"Official site","url":"https://kemycard.com/en/home"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"kyun","name":"KYUN","notable":"KVM virtual machines and Linux containers from Kyun SRL, a disclosed entity based in Bucharest, Romania, with Monero deposits accepted alongside card payments.","catch":"No identity-document KYC is required, but the privacy policy states Kyun stores account and contact details, service, IP and SSH-key configuration, transaction and Monero deposit history, and Stripe invoice or customer data for card payments; live chat also defaults to an AI assistant unless Ultra Private Mode is turned on.","use_case":"Suits users who want KVM hosting from a named Romanian operator and can accept stored account, configuration and payment metadata in exchange for skipping ID documents.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/kyun","citations":{"sources":[{"label":"Official site","url":"https://kyun.sh/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"laso-finance","name":"Laso Finance","notable":"Laso Finance issues disposable virtual cards from a stablecoin voucher system, loading USDT, USDC or DAI across six networks for instant online-spend cards with no personal data collected at signup, per the record.","catch":"The founders are not named anywhere in public records, yet Laso Finance is a US-incorporated, FinCEN-registered money-services business in Texas. That registration means US authorities hold identity information about the operators even though the public does not, leaving independent verification of ownership unresolved despite the compliance signal.","use_case":"Small stablecoin-funded online purchases where the buyer accepts an unnamed operator that is nonetheless registered with US authorities.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/laso-finance","citations":{"sources":[{"label":"Official site","url":"https://laso.finance"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"librewolf","name":"Librewolf","notable":"A Firefox build with telemetry and data collection stripped, uBlock Origin included, and strict tracking protection as the default rather than an option.","catch":"Strict defaults break some sites, and the record notes the fingerprinting trade: heavy customization on a low-population browser can make an instance more distinctive, not less.","use_case":"Daily desktop browsing hardened at the defaults, without the latency of routing through Tor.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/librewolf","citations":{"sources":[{"label":"LibreWolf features","url":"https://librewolf.net/docs/features/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"lnp2pbot","name":"@lnp2pBot","notable":"A P2P Bitcoin marketplace that runs entirely inside Telegram using Lightning hold invoices for escrow, with no registration and open-source code.","catch":"The Telegram account is the identity surface: account and network metadata attach to every trade, and the fiat leg settles between counterparties outside the bot's escrow.","use_case":"Small Lightning-denominated trades inside an existing, already-compartmentalized Telegram identity.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/lnp2pbot","citations":{"sources":[{"label":"lnp2pBot site","url":"https://lnp2pbot.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"lnvpn","name":"LNVPN","notable":"The record describes LNVPN as a Lightning-native reseller offering pay-per-minute VPN access alongside disposable numbers and eSIMs, with no account or email required and Bitcoin, Monero or Zcash payments listed.","catch":"A 2026-07-13 review found that the listed domain now serves a different product called NadaNada. It advertises fixed-duration access priced by the day rather than the pay-per-minute billing described here. No official audit evidence was found for the current service.","use_case":"The domain no longer offers the listed product. Treat this page as historical until the live NadaNada service is reviewed.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/lnvpn","citations":{"sources":[{"label":"Current domain (NadaNada)","url":"https://nadanada.me/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"localcoin-au","name":"Localcoin (AU)","notable":"Localcoin (AU) runs a Toronto-headquartered, bootstrapped ATM network inside Australia for buying and selling BTC, ETH, USDT and USDC with cash, at a 12% fee.","catch":"Official Australia pages require government-issued photo ID and selfie or mobile verification for every user before any transaction, and identity, selfie, phone and cash-transaction data all feed into compliance workflows in a Five Eyes jurisdiction.","use_case":"Cash crypto purchases in Australia for users prepared to complete photo ID and selfie verification upfront.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/localcoin-au","citations":{"sources":[{"label":"Official site","url":"https://localcoinatm.com.au/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"localcoinswap","name":"LocalCoinSwap","notable":"LocalCoinSwap is a P2P marketplace combining escrow, a wallet, cash trades and hundreds of payment methods at a 0.25% transaction fee, with global reach and no stated daily limit.","catch":"Terms reserve the right to require KYC/AML documentation at the platform's sole discretion, and the record notes that P2P payment methods and disputes can expose payment evidence, identity data and counterparty metadata; operator jurisdiction was not verified from official pages in this pass.","use_case":"Fits P2P traders using escrow and local payment methods who accept that a dispute can require submitting identity or payment evidence.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/localcoinswap","citations":{"sources":[{"label":"Official site","url":"https://localcoinswap.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"lokinet","name":"Lokinet","notable":"Lokinet is an onion-routed network supporting TCP, UDP and ICMP traffic natively, built within the Oxen privacy ecosystem and funded through OXEN token staking rewards rather than venture capital.","catch":"The founding CEO has since moved on to the Chainflip project, and Lokinet's foundation operates under Australian law, a Five Eyes jurisdiction where the Assistance and Access Act can compel encryption backdoors under gag orders, though the foundation has publicly criticized that law.","use_case":"Onion routing at the IP layer fits use beyond browser-only traffic, for those who accept the jurisdictional exposure of an Australian-law foundation.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/lokinet","citations":{"sources":[{"label":"Official site","url":"https://lokinet.org/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"machankura","name":"Machankura","notable":"Machankura reaches Bitcoin and Lightning over USSD, SMS, WhatsApp and web for feature phones with no internet connection, covering users across eight African countries in the record's country list.","catch":"The official FAQ describes the wallet as fully custodial, and phone-number and USSD/SMS use creates telecom metadata and SIM-registration exposure that the record says fits small access payments rather than savings or high-privacy custody.","use_case":"Small Bitcoin payments and remittances for feature-phone users without smartphones or mobile data.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/machankura","citations":{"sources":[{"label":"Official site","url":"https://8333.mobi"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"mailbox-org","name":"Mailbox.org","notable":"Mailbox.org offers German-hosted email and workspace software with OpenPGP support, and registration asks for a name the operator states it does not verify, so pseudonymous signup is allowed.","catch":"Cryptocurrency is not accepted, so paid accounts settle by bank transfer, card, PayPal or cash by post, and the record notes real-name billing data may still be needed for invoices or employer reimbursement.","use_case":"German-jurisdiction email for people who want OpenPGP support and pseudonymous signup without needing cryptocurrency payment.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/mailbox-org","citations":{"sources":[{"label":"Mailbox.org","url":"https://mailbox.org"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"mailfence","name":"Mailfence","notable":"Mailfence is a Belgian encrypted email and groupware provider supporting OpenPGP, custom domains and Bitcoin payment, operating outside Five Eyes jurisdiction under Belgian and EU law.","catch":"The record lists no independent security audit, and Belgian law still permits disclosure of account, message-index, payment or anti-abuse data when compelled; end-to-end protection applies only to content handled through OpenPGP.","use_case":"A European, non-Five-Eyes email option for people prepared to apply OpenPGP themselves to content that must stay end-to-end encrypted.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/mailfence","citations":{"sources":[{"label":"Mailfence","url":"https://mailfence.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"meshtastic","name":"Meshtastic","notable":"Meshtastic is open-source LoRa mesh firmware for encrypted text messaging without cellular service or internet, built by a volunteer community alongside a separate Meshtastic Solutions business arm noted in its own documentation.","catch":"Radio transmissions are local and observable by design, and the record flags device IDs, Bluetooth and companion-app metadata, and regional radio-law compliance as OPSEC concerns that the open-source firmware does not remove.","use_case":"Off-grid, internet-independent text communication for users prepared to manage radio-level and app-level metadata themselves.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/meshtastic","citations":{"sources":[{"label":"Meshtastic","url":"https://meshtastic.org"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"monerujo","name":"Monerujo","notable":"The long-standing Android Monero wallet: open source, endorsed by the Monero project, Tor routing through Orbot, and hardware-wallet support, with no account or phone number anywhere.","catch":"The phone is the platform: Android's own telemetry and the choice of remote node sit outside the wallet's control, and Tor routing depends on Orbot being installed and running.","use_case":"Spending and receiving Monero from a phone with the platform risks understood.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/monerujo","citations":{"sources":[{"label":"Monerujo site","url":"https://www.monerujo.io/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"moon","name":"Moon (Pay with Moon)","notable":"Moon issues crypto-funded virtual Visa cards for US online merchants, funded with BTC or USDC, at a 1% fee through partner financial institutions.","catch":"Moon requires an account and may refuse or cancel it, and the record lists collection of email, name, account identifiers, IP/device data and transaction data even though public legal pages did not expose explicit KYC text.","use_case":"US online purchases funded with crypto where an account-based Visa card, not identity-free spending, is the goal.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/moon","citations":{"sources":[{"label":"Official site","url":"https://paywithmoon.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"mullvad-dns","name":"Mullvad DNS","notable":"A free public encrypted resolver from an audited VPN operator: DoH and DoT endpoints, optional blocking tiers, no account, and a stated no-logging policy for queries.","catch":"Using one operator for both VPN and DNS concentrates the view of traffic and lookups in a single party, and the no-logging statement for the free resolver is policy rather than audited infrastructure.","use_case":"Replacing an ISP resolver without creating an account or configuration profile anywhere.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/mullvad-dns","citations":{"sources":[{"label":"Mullvad encrypted DNS documentation","url":"https://mullvad.net/en/help/dns-over-https-and-dns-over-tls/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"mullvad-vpn","name":"Mullvad VPN","notable":"Numbered accounts replace signup entirely, cash by post is an accepted payment route, and the logging claims have been through repeated third-party audits. There is structurally little to hand over about an account that is only a number.","catch":"Sweden cooperates with EU and Western legal process even though it is outside Five Eyes, and card or PayPal payment re-links a name to the account number the model was designed to avoid.","use_case":"The baseline choice when a VPN account should not exist as an identity record at all.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/mullvad-vpn","citations":{"sources":[{"label":"Mullvad no-logging data policy","url":"https://mullvad.net/en/help/no-logging-data-policy/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"mynymbox","name":"MyNymBox","notable":"Shared hosting, KVM VPS, dedicated servers and domain registration priced from 3.50 euros per month for shared plans and 4 euros per month for VPS, accepting Bitcoin, Lightning, Monero, Litecoin and Zcash, with email-alias signup and Tor, I2P or VPN access allowed per official terms.","catch":"An account tied to an email address is still required even though aliases are accepted, and the privacy policy states IP addresses may be logged in the client portal and service management interfaces for security and abuse handling. The record separately notes Mynymbox is not bulletproof hosting and honors valid legal orders.","use_case":"Fits users who want crypto-paid VPS hosting and privacy-shielded domain registration through a legal entity registered in Nevis, while still creating an email-based account rather than going account-free.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/mynymbox","citations":{"sources":[{"label":"Official site","url":"https://mynymbox.io/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"mysudo","name":"MySudo","notable":"MySudo bundles multiple phone numbers, email aliases and separate Sudo identities with calls, SMS and a private browser in one app, marketed as not requiring a real identity to start.","catch":"The record documents that co-founders Greg Clark and Steve Shillingford previously ran Blue Coat Systems and Solera Networks, both surveillance-technology vendors, and that telephony or virtual-card features can still require government ID, address and date of birth.","use_case":"People weighing a Five Eyes-based provider whose founders previously built surveillance technology before turning to privacy tools.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/mysudo","citations":{"sources":[{"label":"MySudo","url":"https://mysudo.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"nanogpt","name":"NanoGPT","notable":"NanoGPT is a pay-per-use AI platform for chat, image, video and voice across many model providers, with local conversations available without an account and optional sync for enhanced features.","catch":"Prompts and media still route to third-party model providers under those providers' own terms, and card or crypto payment processors can perform KYC, transaction monitoring and sanctions screening.","use_case":"Good for per-query access across multiple AI models without a subscription, for users who accept processor-level payment tracking.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/nanogpt","citations":{"sources":[{"label":"Official site","url":"https://nano-gpt.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"nextdns","name":"NextDNS","notable":"NextDNS is a configurable DNS firewall offering DoH, DoT and DoQ with per-device blocklists and analytics, usable without signup for a trial and payable by card, PayPal or cryptocurrency.","catch":"The resolver is US-incorporated and therefore Five Eyes jurisdiction, and logging ranges from no-logs to long retention depending on configuration, so privacy-sensitive use depends on actively disabling logs rather than a fixed default.","use_case":"People wanting granular per-device DNS filtering who actively configure logging off, given the US jurisdiction and configurable retention.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/nextdns","citations":{"sources":[{"label":"NextDNS","url":"https://nextdns.io"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"nicevps","name":"NiceVPS","notable":"The official homepage states it will never request personal details and accepts Bitcoin, Monero, Dash and Zcash for VPS, hosting, domains, SMTP relay and VPN, run by a pseudonymous operator with no corporate entity publicly disclosed.","catch":"Trust level is recorded as danger: threat intelligence documented in the record ties NiceVPS infrastructure to the Cosmic Lynx Russian business email compromise group and the TeamTNT cryptomining botnet, describing the shared infrastructure as a bulletproof hosting concern for sensitive use.","use_case":"No clear privacy use case. The listed infrastructure has active command-and-control abuse reports and is not a vetted no-KYC hosting option.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/nicevps","citations":{"sources":[{"label":"Official site","url":"https://nicevps.net/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"nighthawk-wallet","name":"Nighthawk Wallet","notable":"Nighthawk Wallet gives Android and iOS users a self-custodial Zcash wallet with shielded support and Unified Addresses, kept running by a small US team through Zcash Community Grants instead of outside investors.","catch":"No third-party auditor is named for the wallet, and development sits with a small team funded through Zcash Community Grants rather than a company; the US-based team carries the same Five Eyes jurisdiction classification.","use_case":"Shielded Zcash on a phone for users who weigh grant-funded, small-team maintenance against a Five Eyes-based operator.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/nighthawk-wallet","citations":{"sources":[{"label":"Official site","url":"https://nighthawkwallet.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"njalla","name":"Njalla","notable":"Domains registered in Njalla's own name on the customer's behalf, which keeps the customer out of the registrant record entirely; signup works over email or XMPP and payment in several cryptocurrencies.","catch":"The design is a deliberate trust shift: Njalla is legally the registrant, so the customer's control rests on the operator honoring the arrangement its FAQ describes. That is stronger privacy and weaker ownership at once.","use_case":"Domains where registrant separation matters more than holding the registration directly.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/njalla","citations":{"sources":[{"label":"Njalla FAQ","url":"https://njal.la/faq/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"nym-vpn","name":"Nym VPN","notable":"Nym VPN scrambles traffic through a decentralized mixnet across as many as five hops using zero-knowledge proofs, an open source design under Swiss jurisdiction priced from $4.49 a month.","catch":"The record's cap-table intelligence names Binance Labs, Fenbushi Capital and HashKey Capital among Nym's investors, each flagged for Chinese-linked ownership or affiliations, and notes two co-founders previously worked on Facebook/Meta's Libra/Diem project before founding Nym.","use_case":"Mixnet-based metadata protection for users evaluating the investor cap table independently of the open source design.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/nym-vpn","citations":{"sources":[{"label":"Official site","url":"https://nymvpn.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"obscuravpn","name":"Obscura VPN","notable":"Obscura splits VPN operation into two independent parties, its own ingress plus a Mullvad exit, logging in with a randomized account number instead of an email, and its no-logs claim carries a Cure53 audit rather than only a policy page.","catch":"A US-incorporated operator caveat remains on record: even with the two-party split, ingress-side account and payment metadata plus mobile app-platform metadata still exist and still matter for the threat model.","use_case":"Split-trust VPN routing, paid in Monero or Bitcoin Lightning, where no single operator holds both identity and traffic.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/obscuravpn","citations":{"sources":[{"label":"Official site","url":"https://obscura.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"offline-protocol","name":"Offline Protocol","notable":"Offline Protocol combines mesh messaging, an OfflineID identity layer and peer-to-peer payments in one offline-first stack, with 1.1 million dollars raised toward what its own materials call the Sovereign Stack.","catch":"The codebase is currently closed-source and investors are undisclosed, and the record notes the identity and reputation layer plus token incentives require trusting the provider and a still-maturing SDK rather than independent verification.","use_case":"Early adopters of offline mesh identity and payments who accept a closed-source, unaudited stack with a recorded light identity exposure.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/offline-protocol","citations":{"sources":[{"label":"Offline Protocol","url":"https://www.offlineprotocol.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"orangefren","name":"OrangeFren","notable":"A comparison front-end for no-KYC exchanges and services with recorded no-tracking claims: rate tables across venues without creating an account anywhere.","catch":"It is a listing and routing layer, not a venue: execution, custody, and any KYC trigger belong to the partner the user selects from the table.","use_case":"Rate-shopping across no-KYC venues before committing an order to any one of them.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/orangefren","citations":{"sources":[{"label":"OrangeFren site","url":"https://orangefren.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"orangewebsite","name":"OrangeWebsite","notable":"Freedom of speech hosting brand based in Iceland, currently operated under IceNetworks Hong Kong Ltd per official terms, offering VPS and web hosting from about 3 dollars per month with Bitcoin, Litecoin, Ethereum, Bitcoin Cash and Monero accepted through BitPay or CoinPayments.","catch":"The operating entity has changed under current terms, and the privacy policy can collect name, address, phone, email, and service or payment history depending on which service, support or payment path is used; domain registration and support flows can require additional personal or registrar data.","use_case":"Matches offshore website or VPS hosting needs under Icelandic content law, in cases where domain registration or support still calls for standard personal details.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/orangewebsite","citations":{"sources":[{"label":"Official site","url":"https://orangewebsite.com"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"payylink","name":"Payy","notable":"Payy (payylink) is a stablecoin wallet and card platform by Zeplo, Inc., offering Payy Wallet, Payy Card, Cash Links and developer infrastructure, with a $6M seed round led by FirstMark and backers including Circle and Visa.","catch":"The homepage frames its own traction in KYC users and businesses, and the record marks this as a comparison or warning listing rather than a no-KYC recommendation.","use_case":"For people comparing custodial, VC-backed stablecoin card products rather than searching for a no-KYC card.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/payylink","citations":{"sources":[{"label":"Official site","url":"https://payy.network/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"peachbitcoin","name":"Peach Bitcoin","notable":"A Swiss P2P Bitcoin app whose recorded posture is no personal identification at registration, operating openly under PolyReg self-regulatory membership rather than avoiding the framework.","catch":"The SRO membership means Swiss AML rules formally apply to the service, the app flow ties trades to a device, and fiat legs expose counterparty payment metadata as on any P2P venue.","use_case":"Mobile-first Bitcoin P2P in and around the EU with a regulated-but-no-ID posture.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/peachbitcoin","citations":{"sources":[{"label":"Peach Bitcoin site","url":"https://peachbitcoin.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"pegasusswap","name":"PegasusSwap","notable":"PegasusSwap's privacy policy states it does not collect, request, or verify identity-related information under any circumstances, pairing that language with a KYCnot guaranteed no-KYC listing scored 9/10 and Monero support at fixed or floating rates.","catch":"Operator identity and jurisdiction are not disclosed anywhere in the record, and the terms note refunds depend on technical feasibility rather than a guarantee, so the record recommends small test swaps before larger amounts.","use_case":"Fits users running a small first swap to evaluate a KYCnot-listed exchanger before committing larger XMR amounts.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/pegasusswap","citations":{"sources":[{"label":"Official site","url":"https://pegasusswap.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"phoenix-wallet","name":"Phoenix Wallet","notable":"Self-custodial Lightning with the channel management automated away by ACINQ: a 12-word seed, no account, and a working Lightning experience without node operation.","catch":"ACINQ routes the payments as the Lightning service provider, which gives it timing and amount metadata (though not destinations or identity), and the automation is paid for through liquidity fees.","use_case":"Self-custody Lightning payments for users who want the seed without the node.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/phoenix-wallet","citations":{"sources":[{"label":"Phoenix site","url":"https://phoenix.acinq.co/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"phreeli","name":"Phreeli","notable":"Phreeli is a US mobile carrier whose eSIM signup needs only a ZIP code and payment, accepting Monero and Zcash, with its privacy policy stating username, ZIP and payment data are kept separate from phone usage.","catch":"The carrier is a Delaware corporation running on upstream infrastructure the record names as T-Mobile and MVNO Connect, so IMEI or ICCID identifiers can still link to issued numbers, and physical SIM delivery, e911 or Wi-Fi calling can require address information beyond the ZIP-only signup.","use_case":"US mobile service for people who accept ZIP-code-only signup as the privacy baseline rather than full anonymity from upstream carriers.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/phreeli","citations":{"sources":[{"label":"Phreeli","url":"https://www.phreeli.com"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"pikasim","name":"PikaSIM","notable":"PikaSIM sells travel eSIMs across 190 or more countries with no account, email or identity required, paid through BTCPay-processed Bitcoin, Lightning or Monero on infrastructure the description locates in Finland.","catch":"The operators are unidentified and the service is unvetted with no disclosed funding, so the crypto-only checkout is the private path while card or Stripe payment would attach email and payment metadata.","use_case":"Travel data users prioritizing a crypto-only, no-account purchase flow who accept an unidentified, unvetted operator.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/pikasim","citations":{"sources":[{"label":"PikaSIM","url":"https://pikasim.com/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"pintopay","name":"Pintopay","notable":"Pintopay offers a Telegram Mini App crypto card with Apple and Google Pay support, ATM withdrawal on the physical card, and USDT top-ups, at a 3% fee.","catch":"The homepage advertises an AML/KYC secure platform with 3D Secure, so this is a light-to-medium KYC card rather than a no-KYC one, and founderIntel found no formal regulatory licensing for the Delaware LLC and UAE operating structure behind it.","use_case":"USDT-funded everyday card spending for users who accept upfront AML/KYC checks and an unlicensed, early-stage operator.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/pintopay","citations":{"sources":[{"label":"Official site","url":"https://pintopay.me/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"posteo","name":"Posteo","notable":"A one-euro mailbox built so that payment cannot be linked to the account: cash by mail is accepted and the recorded design keeps payment data separated from mailbox identity, with no IP logging.","catch":"German jurisdiction is the recorded caveat: lawful orders can compel whatever data exists, so the protection comes from the data-minimizing design rather than from legal immunity. Custom-domain use is not the product's focus.","use_case":"A paid mailbox where anonymized payment and data minimization matter more than features.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/posteo","citations":{"sources":[{"label":"Posteo site","url":"https://posteo.de"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}},{"slug":"ppq-ai","name":"PayPerQ","notable":"PayPerQ (ppq.ai) is a pay-per-prompt AI service with no required signup, local conversation storage, and support for XMR and BTC payment across multiple models.","catch":"Prompts still pass through downstream AI model providers, and choosing an optional account or card-payment deposit adds account and payment metadata that crypto or no-account use avoids.","use_case":"Aimed at users who want prompt-level AI access paid in crypto without an account, accepting that prompts reach third-party model providers.","reviewed_at":"2026-07-16","url":"https://cunicula.com/en/provider/ppq-ai","citations":{"sources":[{"label":"Official site","url":"https://ppq.ai/"}],"reviewed_at":"2026-07-16","basis":"Editorial reading of the cited sources on the review date. Judgement, not measurement, and the provider may have changed since."}}],"meta":{"total":100,"api_version":"1.2","powered_by":"cunicula.com","documentation_url":"https://cunicula.com/en/api-docs","machine_index_url":"https://cunicula.com/llms.txt","license":"LicenseRef-Cunicula-Attribution-1.0","license_url":"https://cunicula.com/en/cite","attribution":"Cunicula, \"{name}\", cunicula.com, reviewed {reviewed}, retrieved {retrieved}, {url}","cite_guide_url":"https://cunicula.com/en/cite","dataset_url":"https://cunicula.com/api/v1/dataset","schema_version":"1.1.0","analysed":163,"listed":176,"filters":{"limit":100},"scope":"What Cunicula editors make of each provider: what stands out, what the catch is, and who it suits. These are opinions formed from the cited sources on the stated review date, not test results or scores, and a provider with no entry has simply not been written up rather than been judged and found wanting. Read the sources and disagree where the reading looks wrong."}}