Skip to content
CUNICULA

Privacy Tools

Operating systems, browsers, networks, and self-hosted infrastructure. Pick by the risk being addressed.

36 zero KYC · 11 light KYC · 3 full KYC

50 services
50 providers found
addy.ioaddy.io
Email
94Verified evidence
No KYC
GBHigh confidence
caution
2026-06-22
Email aliasing, self-hostable, crypto accepted.
Email!
Bandobando.cool
Privacy Tools
94Verified evidence
Full
MXHigh confidence
caution
2026-06-22
Stablecoin treasury platform for companies.
Privacy Tools!
Bitchatbitchat.free
Comms
100Verified evidence
No KYC
??Opaque basis
caution
2026-08-05
Bluetooth mesh messaging with Nostr relays.
Comms!
Briarbriarproject.org
Comms
94Verified evidence
No KYC
??Opaque basis
caution
2026-08-09
Peer-to-peer messaging over Tor and Bluetooth.
Comms!
BTCPay Serverbtcpayserver.org
Merchants
59Partial evidence
No KYC
JPInferred basis
standard
2026-07-05
Self-hosted Bitcoin and Lightning payments.
Merchants
Calyx Institutecalyxinstitute.org
Privacy Tools
94Verified evidence
Light
USHigh confidence
caution
2026-06-22
US nonprofit privacy tools and hotspots.
Privacy Tools!
Cashucashu.space
Privacy Tools
94Verified evidence
No KYC
UnknownOpaque basis
caution
2026-06-22
Chaumian e-cash on Bitcoin Lightning.
Privacy Tools!
CheapGPTcheapgp.selly.store
Privacy Tools
66Partial evidence
Light
??Opaque basis
caution
2026-06-22
Storefront for AI subscriptions and vouchers.
Privacy Tools!
CoinoSwapcoinoswap.com
Swap
66Partial evidence
Light
USOpaque basis
caution
2026-06-22
Non-custodial swap rate comparison site.
Swap!
Coldcardcoldcard.com
Wallet
94Verified evidence
No KYC
CAHigh confidence
High
2026-06-22
Bitcoin-only air-gapped hardware signer.
Wallet!
Cryptomatorcryptomator.org
Privacy Tools
100Verified evidence
No KYC
DEHigh confidence
standard
2026-08-07
Local vault encryption for any cloud, no account.
Privacy Tools
CypherGoatcyphergoat.com
Swap
94Verified evidence
Light
??Opaque basis
standard
2026-06-22
Monero-native open-source swap aggregator.
Swap
DivestOSdivested.dev
Privacy Tools
94Verified evidence
No KYC
USInferred basis
High
2026-06-22
Discontinued hardened Android fork.
Privacy Tools!
Privacy Tools
72Partial evidence
No KYC
USInferred basis
standard
2026-08-06
Modular repairable laptops with kill switches.
Privacy Tools
FreeSocksfreesocks.org
Privacy Tools
72Partial evidence
No KYC
USHigh confidence
caution
2026-08-17
Free and paid Xray access for censorship circumvention.
Privacy Tools!
GhostSwapghostswap.io
Swap
94Verified evidence
Light
UnknownOpaque basis
caution
2026-06-24
Swap aggregator covering 1,600+ coins.
Swap!
GrapheneOSgrapheneos.org
Privacy Tools
94Verified evidence
No KYC
CAInferred basis
standard
2026-08-09
Hardened Android OS for Pixel devices.
Privacy Tools
Intercambiointercambio.app
Swap
94Verified evidence
No KYC
??Opaque basis
standard
2026-06-22
Account-less swap aggregator.
Swap
JoinMarketgithub.com
Privacy Tools
94Verified evidence
No KYC
??Opaque basis
caution
2026-06-22
Bitcoin CoinJoin with a maker-taker market.
Privacy Tools!
KeePassXCkeepassxc.org
Privacy Tools
100Verified evidence
No KYC
??Opaque basis
standard
2026-08-07
Offline password vault, no account, no cloud.
Privacy Tools
Librewolflibrewolf.net
Privacy Tools
94Verified evidence
No KYC
??Opaque basis
standard
2026-06-22
Firefox fork with telemetry removed.
Privacy Tools
Lokinetlokinet.org
Privacy Tools
59Partial evidence
No KYC
AUInferred basis
standard
2026-07-05
Onion-routed network for any IP protocol.
Privacy Tools
Meshtasticmeshtastic.org
Comms
94Verified evidence
No KYC
USOpaque basis
standard
2026-06-22
LoRa mesh texting without cell service.
Comms

Privacy, evidence, and risk are separate. See the published method.

Showing 24 of 50
Change ranking

Choose how to order services. Scores do not change.

How to choose

This is the widest category in the directory: amnesic operating systems, hardened browsers, overlay networks, self-hosted payment processors, and removal tooling. The common thread is that each addresses a specific observation point, and they are not interchangeable. An operating system that forgets its session addresses device seizure; a browser addresses fingerprinting; an overlay network addresses traffic observation; a self-hosted processor keeps payment data out of third-party hands.

The practical order is risk first, tool second. The threat-model page maps common situations to categories, and each record states what the tool covers and what it does not. Open source is recorded because it makes claims inspectable rather than because it settles them, and hosted tools trade convenience for a party that holds data while self-hosted tools trade the reverse.

Check first
  • The specific risk the tool addresses, stated on its record.
  • Open-source status and audit history where recorded.
  • Hosted or self-hosted, and who ends up holding the data.
  • Whether the tool composes with the rest of the setup; the stacks page documents combinations.

Frequently Asked Questions

Where should a newcomer start?

With the risk rather than the tool list. The threat-model page maps situations to categories, and the stacks page shows documented combinations that work together.

Does open source mean private?

It means the claims can be inspected and the builds compared against source. Privacy still depends on the design, the defaults, and what the operator of any hosted component retains.

Hosted or self-hosted?

A hosted tool is easier to run and gives its operator a copy of whatever it processes. A self-hosted tool moves that data and its maintenance burden to the person running it. The records note which model each listing uses.

Do more tools mean more privacy?

Not by themselves. A tool outside the actual threat adds complexity and new failure surface. Composition is documented on the stacks page.