My Hardcore Privacy Stack

📱 Google Pixel with GrapheneOS (no Google account)

🔒 Sandboxed Play Services disabled

🧹 Apps permission-minimized, sensors off by default

🔄 Regular OS & app updates

COMMUNICATION

🗣️ SimpleX, Session, Signal (for non-tech contacts), Element, Threema

🕳️ Cwtch (metadata-resistant groups)

🌐 Garnet (Nostr)

BROWSING

🌐 Tor Browser (default), Vanadium (hardened)

NETWORK PRIVACY

🛡️ Mullvad VPN, IVPN, NymVPN

🧩 InviZible Pro (DNSCrypt + Tor + I2P)

⭕ No captive portal login (disabled)

🔌 Firewall default-deny

EMAIL

✉️ Self-hosted RoundCube

🛡️ Tuta

📬 Own email aliasing

NOTES & DATA

🗒️ Joplin, Nextcloud Notes

📄 OSS Document Scanner

🧱 Cryptomator (encrypted vaults)

FILE SYNC

📁 Syncthing (primary), Nextcloud, DAVx5, LocalSend

PASSWORDS & KEYS

🔑 KeePass2Android (Nextcloud sync)

🔐 Aegis (2FA)

🗝️ OpenKeychain (PGP)

✍️ Amber (Nostr signing)

APPS & STORES

📦 F-Droid, Droid-ify, Aurora Store (anonymous), Obtainium, Accrescent

FINANCE (XMR)

💸 Cake Wallet, Monero com, Monerujo

MEDIA

📺 Grayjay, NewPipe, VLC

📻 Transistor (internet radio), AntennaPod

MAPS & UTILITIES

🗺️ CoMaps (Organic Maps)

🌤️ Breezy Weather

📞 Koler

⌨️ FUTO Keyboard, FUTO Voice Input, Simple Keyboard

📲 PWAs whenever possible

GAMES

🎮 lichess, Sudoku, Antimine

SELF-HOSTED VIA NEXTCLOUD

• Calendar

• Contacts

• KeePass

• Notes

• Joplin

• Files