privacy
Discover, mask, and verify sensitive data in SQL databases — an auditable scan → mask → validate workflow for safe database copies.
Instant chat. Account-free, encrypted, fast and disposable.
Encrypted link-based chat with color identity, no usernames, and room rules you set before anyone joins.
Public DNS resolver from Germany.
A sovereign public DNS resolver that reliably filters out ads, tracking and malware, making the internet safer and faster. All servers are located exclusively in Germany.
Related contents:
From Hidden Flows to Public Insight.
DecryptAds is a programmatic supply chain transparency platform built by Svart Works Inc. We map ads.txt, app-ads.txt, sellers.json, buyers.json, and adagents.json; surface risk across publishers, data brokers, and ad tech intermediaries; and give researchers, operators, and the public tools to investigate what is really happening behind the bid stream.
Related contents:
browser fingerprint bench.
Every measurement a website can take from your browser, run live and shown back to you. This is the same class of signals the tracking and anti-fraud scripts collect — surfaced instead of hidden.
safe and useful user scripts.
User scripts put you in control of your browsing experience. Once installed, they automatically make the sites you visit better by adding features, making them easier to use, or taking out the annoying bits. The user scripts on Greasy Fork were written by other users and posted to share with the world. They're free to install and easy to use.
Related contents:
Gadgetbridge is a free and open source Android application that allows you to pair and manage various gadgets such as smart watches, bands, headphones, and more without the need for the vendor application. So in short, you can use Gadgetbridge instead of relying on your gadget's own proprietary app.
Related contents:
noRecognition AI Adversarial Clothing.
Clothing the cameras cannot see.
A year of research becomes something you can wear. Presented on stage at Black Hat and DEF CON, and dropping at the same moment.
Related contents:
A Control Mechanism for AI Agent.
This document introduces .agentignore, a simple yet powerful way designed to give you precise control over which parts of your codebase AI agents and code assistants can access.
Mobile Verification Toolkit (MVT) is a tool to facilitate the consensual forensic analysis of Android and iOS devices, for the purpose of identifying traces of compromise.
Related contents:
-#537: Espionnage et recherche de compromission dans les environnements mobiles @ NoLimitSecu :fr:.
Stop the tracking circus. Kill the cookie banner!
Tired of misleading cookie banners? The EU Commission has finally proposed a solution: set your privacy preferences in the browser once, and never see another banner. Unfortunately, the tracking industry is pushing back – and so far, they’ve been successful. We need YOUR help to #KillTheCookieBanner!
An egress firewall for untrusted workloads.
iron-proxy is a single-binary egress firewall for workloads you don't fully trust. It enforces an allowlist on outbound HTTP and HTTPS, holds credentials so the workload never sees the real value, and records every request as structured JSON.
The menstrual cycle tracking app that makes period and fertility tracking more secure and more transparent.
Related contents:
Deploy Cloud Native Applications inside Confidential Enclaves Protect containers while they are running using confidential computing and hardware-backed isolation.
Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution Environments to protect containers and data.
Related contents:
Seemingly normal USB drive with a hidden security feature.
Phantomdrive is open source encrypted USB drive with a stealth mechanism to hide its second partition. To decrypt it you must create a file containing your password in the format password:addpasswordhere, this is used to derive AES-XTS keys. The drive automatically unmounts itself, remounts the remaining disk and encrypts and decrypts in place. It uses CH569W SoC, which has USB3, SDIO and an AES hardware block. It is programmable over USB using the wch-ch56x-isp library.
Related contents:
Read, understand and silence the Windows GDID device identifier (the ID that tracked a hacker through a VPN). Verified on a real Win11 VM. Honest: it silences reporting, it does not make you anonymous.
Related contents:
Test with real data. Without the GDPR nightmare. GDPR-aware database cloning for developers.
Clonio CLI clones production-like database data into development, test, staging, and CI while applying anonymization, schema sync, key remapping, and signed audit logs.
Related contents:
Read, style, and share markdown files - privately. Formerly SDocs.
SmallDocs (formerly SDocs) is a lightweight, stateless markdown editor with live styling. Your document lives in the URL hash fragment - browsers never send it to the server.
A privacy-focused iOS app that raises awareness about what native apps can see.
Loupe is an iOS and iPadOS app that gives you a hands-on tour of the device fingerprinting surface. It reads real values from public iOS APIs, the same ones any third-party app can call, and shows them to you raw. The point is simple: see what your iPhone quietly exposes, and why each reading helps an app recognize you again.
An LLM-native health app for iOS that turns a cheap Bluetooth "smart ring" (the generic Chinese 56ff BLE ring sold under dozens of brands) into a real, conversational health tracker.
PulseLoop talks to the ring directly over Bluetooth LE — no vendor cloud, no account — and layers an AI Coach on top of your own data. Instead of static charts, you get a coach that can read your metrics, run its own analysis, draw charts, remember context about you, and answer questions about your sleep, heart rate, activity, and recovery.
Related contents:
Privacy proxy for your OpenAI requests.
An intelligent privacy layer for AI APIs. Kiji automatically detects and masks personally identifiable information (PII) in requests to AI services, ensuring your sensitive data never leaves your control.
Related contents:
Data poisoning for your everyday tracking.
Fauxx is an open-source Android privacy tool that poisons data broker and ad-tech profiles by generating continuous, plausible, off-demographic synthetic activity from your device. The goal is simple: make your real behavioral signal statistically indistinguishable from noise.
Related contents:
A standard for respecting user privacy in software.
A single, standard environment variable that clearly and unambiguously expresses a user's wish to opt out.
Force Remove Copilot, Recall and More in Windows 11.
The current 25H2 build of Windows 11 and future builds will include increasingly more AI features and components. This script aims to remove ALL of these features to improve user experience, privacy and security.
encrypted messaging, anonymous email, VPNs, Tor, password managers, secure file sharing, browser privacy, and self-hosted privacy software.
A curated list of the best privacy tools, open-source privacy tools, encrypted messaging apps, anonymous email services, VPNs, Tor tools, password managers, secure file sharing apps, browser privacy extensions, and self-hosted privacy software.
Awesome Privacy Tools helps people find practical tools for private email, encrypted chat, anonymous browsing, password security, data removal, device hardening, and self-hosted alternatives to surveillance-based products.
Firefox extension that automatically rejects cookie consent banners and sends Global Privacy Control (GPC) signals.
Related contents:
An LLM-as-a-judge HTTP proxy to secure agents in production .
Deploy agents. Safely. CrabTrap is an LLM-as-a-judge HTTP proxy to secure agents in production. It intercepts every request your AI agent makes, evaluates it against a policy, and allows or blocks it in real time.
The Conversation That Never Happened.
Peer-to-peer, E2EE messaging with no logs, no accounts, and no server memory. nullroom.io is a zero-trace, ephemeral peer-to-peer messaging app built with Rails, Stimulus, WebRTC, and Web Crypto. Two people share a link, establish a direct encrypted data channel, and exchange messages without message persistence on the server.
Related contents:
A self-hosted, ad-free, privacy-respecting metasearch engine.
Get Google search results, but without any ads, JavaScript, AMP links, cookies, or IP address tracking. Easily deployable in one click as a Docker app, and customizable with a single config file. Quick and simple to implement as a primary search engine replacement on both desktop and mobile.
Offline Hike, Bike, Trails and Navigation.
Organic Maps is a privacy-focused offline maps & GPS app for hiking, cycling, biking, and driving. Absolutely free. No ads. No tracking. Developed with love by the open-source community and the same people, who created MapsWithMe/Maps.Me app. Powered by OpenStreetMap data.
Related contents:
attempting to detect smart glasses nearby and warn you.
Related contents:
Monitor your local neighbourhood's bluetooth activity.
Bluetooth Neighborhood - Track BLE devices in your area and analyze traffic patterns.
Related contents:
App compatibility on de-Googled devices. Crowdsourced de-Googled Android apps status ratings.
Related contents:
CookieViz is a vizualization tool allowing to view cookies impact during your browsing.
CookieViz analyzes the interactions between your web browser and the remote servers and websites. You will be able to know to which other player the site you're visiting sends information.
Related contents:
Together, we can build a people-centered, democratic society!
Help us protect human rights and freedoms in the digital age through a monthly donation.
Related contents:
Orion is a free, lightning-fast, privacy-focused, WebKit-based browser for Mac, iOS, and soon Linux that blocks ads and trackers by default.
Understand Privacy & Legal Terms. Plain-language analysis of Terms & Conditions. Know what you're agreeing to before you sign up.
Related contents:
paranoid-grade rust-based encryption utility + cross-platform GUI.
Related contents:
A local AI-powered DLP solution.
PrivacyFirewall is a local-first PII and secrets firewall for AI tools like ChatGPT, Claude, and Gemini.It blocks risky paste events, warns as you type, and (optionally) uses a lightweight on-device Transformer model for deeper PII detection.
What Your Browser Reveals About You.
This is the data your browser hands out automatically, every time! Discover all the information your browser shares automatically. This project demonstrates the data your browser exposes by default.
Bypass DPI. Implementation of some DPI bypass methods. The program is a local SOCKS proxy server.
Related contents:
An Android application that locally runs ByeDPI and routes all traffic through it.
For stable operation, you may need to adjust the settings. You can read more about different settings in the ByeDPI documentation.
This application is not a VPN. It uses Android's VPN mode to route traffic but does not transmit anything to a remote server. It does not encrypt traffic or hide your IP address.
Related contents:
Related contents:
An open-source time-tracking tool for monitoring your productivity with privacy-first approach. Own your hustle, optimize those "grind sessions," and uncover inefficiencies. Built with Rust, Ratatui and Postgres.
Related contents:
In August 2025, Google announced that starting next year, it will no longer be possible to develop apps for the Android platform without first registering centrally with Google.
deGoogled unGoogled smartphone operating systems and online services - your data is your data. We build desirable, open source, privacy-enabled smartphone operating systems.
Related contents:
Private, fast, and honest web browser.
The Chromium-based web browser made for people, with love. Best privacy by default, unbiased ad-blocking, no bloat and no noise.
Related contents:
Your AI.Your Data. Zero Cloud. Offline ChatGPT alternative: open-source, on-device, and 100% private.
By connecting to Ollama local LLMs, NativeMind delivers the latest AI capabilities right inside your favourite browser — without sending a single byte to cloud servers.
Related contents:
the everything app for those who celebrate trust & autonomy.
Anytype is an encrypted, local-first alternative to the cloud-based Internet. With Anytype, you can build digital Spaces around your interests. These spaces can be personal - for diaries, ideas and drafts, or shared - with your family, small communities, teams, neighbors and people with similar interests.
Related contents:
Uncensorable Peer-to-Peer. Where Friendship Meets Freedom. Decentralized application with Friend-to-Friend technology.
Xeres allows you to interact with people in a fully decentralized way. No server or account required, which means: nobody can censor you.
Related contents:
A libre front-end for Quora.
Quetre is an alternative front-end to Quora. It enables you to see answers without ads, trackers, and other such bloat.
Receive and send emails anonymously. Open source anonymous email service.
With email aliases, you can be anonymous online and protect your inbox against spams and phishing. Open source. Based in Switzerland.
the private and secure mobile OS.
The private and secure mobile operating system with Android app compatibility. Developed as a non-profit open source project.
Related contents:
Tails is a portable operating system that protects against surveillance and censorship.
Tails uses the Tor network to protect your privacy online and help you avoid censorship.
Paralegal is a static analyzer for Rust code that enforces privacy and security policies on programs.
Related contents:
Private front-end for Reddit. An alternative private front-end to Reddit, with its origins in Libreddit.
Redlib hopes to provide an easier way to browse Reddit, without the ads, trackers, and bloat. Redlib was inspired by other alternative front-ends to popular services such as Invidious for YouTube, Nitter for Twitter, and Bibliogram for Instagram.
Related contents:
Sortez couvert·es est un site qui donne des conseils juridiques et des rappels légaux sur l’usage du numérique, dans l’optique de protéger ses utilisateurices dans des situations d’urgence, de stress, comme nous pouvons les vivre au moment de grèves ou de manifestations.
Related contents:
Lock a device and wipe its data on emergency.
You can use PanicKit, tile, shortcut or send a message with a secret code. On trigger, using Device Administration API, it locks a device and optionally runs wipe (factory reset). Or it can send a broadcast message instead of the wipe.
Related contents: