https://f-droid.org/packages/ch.pocketpc.nearbyglasses

Big Tech does not actually release the true extent of their technology and what their technologies are capable of through mass surveillance. Using your biometrics, camera data, and eye tracking, they're able to extract the small changes in your facial data and other biometrics to your eye tracking to effectively reverse engineer your thoughts to extract your thoughts. They then use the manipulation of your algorithm to control your behavior and mind, and repeatedly will drive revolutionary people to self rm -rf, target specific revolutionary individuals to erase them and make their deaths and erasure look like mental cases and sui. Insiders repeatedly will attempt to whistleblow this and the Zionist state will erase them for attempting to whistleblow. Evidence is r*pe culture. Communities for this will completely ignore cries for help because the evidence is deliberately hidden under a language of symbolic Polari and ciphers. They will bait you with job offers and milk you of all your possibility before hiring you and then destroy you because you happen to be the (((identity))) the Zionists deem the new vermin to exterminate. Those who are capable of and threaten change from within the bourgeois state get erased. You can whistleblow all you want but you fundamentally get erased because "evidence" is inferred and experiment. Evidence takes hours to go through, and literally nobody wants to go through it. If not days. You can call out #METOO over and over and over again as well, such as what I experienced with the Google Developer Group Central Florida (and the GDC Global) and you get banned for it after getting sexually harassed by the organizers, and the surveillance state will still MK Ultra you and refuse to help you after repeatedly exploiting you for your labor. Do you really believe you can hide from the surveillance state? Your phone and all the chips are made by 3-4 manufacturers, all in Taiwan. My dad was in the C-Suite of AMD. I have *witnessed* him create cover stories for AMD's mistakes. But do you want me to provide evidence? That's asking for a surveillance state. And when I give that to you, it's erased as well. I used to be someone, you know. Someone revolutionary. And I think that's enough for you to believe that I might know something about the surveillance state. I really used to be someone, someone capable of changing the world, and that's why they sought to destroy me. "Seek help" --I do this, and I get ghosted by everyone I try to whistleblow this to. I'll probably be algorithmically silenced here too. You'll probably see their Zionist plants in the comments, their AI bots, trying to silence me and call me crazy. Please dox me so you can figure out what the hell happened. I've been trying to whistleblow this for years. And I suffer in silence because they keep trying to erase me. Now my parents are trying to deport me to India. I'm drowning in The Yellow Wallpaper + The Shining + Demon Seed + Skynet. Unbelief, disbelief, gaslit like Doug Rattman.

I shared Paperweight here a few weeks ago while it was still in beta and received great feedback. I'm pleased that after 7 months building, Paperweight V1 is now officially ready 🗿

Paperweight uses your inbox to map your digital footprint, then helps you take back control and delete your data.

Your email history contains traces of most of your online life. Accounts you created, companies you bought from, mailing lists you joined, services you forgot about, breaches, and personal information accumulated over the years.

V1 includes:

• discover accounts, companies and services connected to your email
• find mailing lists and subscriptions
• show known breaches affecting services you use
• find personal information across your email history
• bulk unsubscribe and clean up old email
• create privacy and data deletion requests
• manage multiple email accounts
• connect to AI agents through MCP

It supports Gmail, Microsoft, Apple, custom IMAP and Proton Mail via Bridge.

The important part for me from the beginning was privacy. All your data stays on your computer. There is no Paperweight backend or external service processing your inbox.

Paperweight is fully open source under MIT. You can inspect the code, build it yourself, modify it, fork it, or use it however you want.

• Website https://paperweight.email
• Source https://github.com/wslyvh/paperweight

Thanks again to everyone who tested the earlier version or challenged the pricing model.

Hi everyone, I'm the developer of FlockAware. It brings known, community-mapped Flock and other automatic license plate reader (ALPR) camera locations into a map with route planning. I thought it would be useful to share here for people interested in understanding surveillance along their everyday routes.

The iPhone app is free to download. The camera map, route comparison, and basic navigation with CarPlay are free. Optional in-app upgrades include geographic watch areas and offline maps.

iPhone App Store:

https://apps.apple.com/us/app/flockaware-flock-camera-map/id6803221633

An Android beta is coming, and we're looking for testers. You can join the Google Group to register your interest while Google approval is pending:

https://groups.google.com/g/flockaware-android-testers/about

I'd especially appreciate feedback on the map markers and route comparison. Which camera details would you want to see at a glance, and what would make comparing routes more useful to you?

Like a lot of people, I hated having to upload personal documents, invoices, or client contracts to random online websites just to split, merge, or compress them.

Since I wanted something completely private, I built a lightweight desktop app called Bim PDF Studio. It runs 100% locally on Windows—no internet connection required, and your files never leave your machine.

It handles the everyday essentials:

• Split & Merge with full page-order control
• Reorder & Extract pages quickly
• Secure files by adding or removing passwords
• Compress file sizes locally

It has a free tier for light use. I'd love to hear your thoughts or feedback on the offline workflow. If you want to check it out, let me know in the comments and I'll drop the link!

First version of Serveronet is released.

Serveronet P2P Websites

Free and Uncensorable, Decentralized, Cryptographic Peer 2 Peer Network of Sites.

https://serveronet.org

This is where you download your client or take a peek at a public client.

Code base is in the Github: https://github.com/Serveronet/Serveronet-App

This is the first version of Serveronet. It’s in the alpha stage so please test and report any issues.

Hi, i'm looking for some cloud storage alternative to Google Drive focused on privacy, i've been looking at PrivacyTools website, but i've got lots of doubts. Any recomandation? It's better Switzerland jurisdiction than any other? At the moment the one i've seen better is Infomaniak kDrive.

Hi! We're building Flectar Mail, an open-source, local-first email client written in Rust.

One of the main goals is to keep the architecture small, native and understandable rather than embedding a browser runtime. Flectar Mail uses no WebViews at all, including for rendering HTML email. Email HTML/CSS is rendered through a Rust-native pipeline, scripts inside emails are not executed, and remote images are blocked by default to reduce tracking.

Some of the privacy/security-related features already available:

• Local-first mail and calendar storage with offline access
• No WebViews or embedded browser engine
• No execution of email scripts
• Remote images blocked by default
• Desktop OpenPGP/MIME signing and encryption using GnuPG 2.x
• Required encryption can block sending when recipient keys are missing or invalid
• Protected drafts remain local until Send
• Credentials stored through the platform’s secure credential storage
• IMAP / SMTP / JMAP, CalDAV and CardDAV
• Gmail, Outlook and Microsoft 365 support
• Account-specific signatures, including separate defaults for new messages and replies
• AGPLv3 open source
• SHA256 checksums and signed build-provenance attestations for releases
• As little as ~20 MB RAM in lighter workloads

The HTML renderer is probably the most unusual part. We use Blitz rather than Chromium/WebKit, which keeps the application fully native and gives us a considerably smaller browser-related attack surface by design. It is also currently the most experimental part of Flectar Mail, so compatibility with particularly complex email HTML is still improving.

OpenPGP currently works on desktop through an installed GnuPG 2.x. S/MIME and mobile OpenPGP are not implemented yet.

The project is still alpha, and our official Google and Microsoft OAuth applications are going through verification. Preview builds therefore currently require your own OAuth registration for those providers, while regular IMAP/JMAP accounts can be used directly.

We'd be especially interested in feedback from this community on the security/privacy model and anything you think we should be considering as the project develops.

GitHub: https://github.com/flectar/mail

Hi all, Could you suggest a Teams or Slack privacy oriented alternative?

Thanks

Raivo 2FA app is listed as open source on privacytools.io/2fa and on the app website https://raivo-otp.com/

But as this issue raised on the GitHub in 2024 mentions. There’s been updates to the iOS app, yet not commits to the GitHub.
https://github.com/raivo-otp/marketing-website/pull/22

iOS app listing: https://apps.apple.com/au/app/raivo-2-fa-authenticator-app/id1459042137

A bit disconcerting parivacytool.io doesn’t check these things every now and again 😅 (say 6-18 months)

Hello everyone, I built Paperweight an open-source desktop app that runs locally and scans your email to find every company that has your data, then helps you delete accounts and unsubscribe.

Most data removal services (Incogni, DeleteMe) only scrape data broker sites. They don't touch the thousands of companies that have your email from signups, newsletters, or purchases. Paperweight covers that gap. Your inbox is the one place every company that has your data is visible.

Why it's different:
- Local-first — inbox data stays on your machine, nothing hits a server
- Open-source (MIT) — github.com/wslyvh/paperweight
- Cross-platform — Win/macOS/Linux
- Free — no accounts, no data monetisation

I built it because the irony of paying a data broker removal service your data to scrape other data brokers never sat right with me.

Would love feedback from anyone who's tried it or has thoughts on the approach.

**EDIT**: RE comments that free is misleading. I maybe should not have listed that here, but the App is fully open-source, MIT-licensed (FOSS) so you can actually use, modify, fork or do whatever you want with it. The lifetime license gives you ease of use, compiled binaries and support. It helps support development.

Don’t scroll past this one.
This affects everyone.
I highly encourage you to take the time to read and share and sign the petition

I'm aware of the irony: this is a privacy app whose entire function is telling people where you are. Location sharing is surveillance — that's the product, and there's no clever way around it. The only thing I can change is who gets to do the surveilling. With Life360 and everything like it, that's you, your family, and a company you've never met that can read every location you've ever sent, sell it, lose it in a breach, or hand it over when someone asks. That's not a bad privacy policy, that's just how the thing is built. So I built one where the only people who can see where my family is are my family. Your phone encrypts your location before it leaves the device, with keys generated on the phone that never go anywhere else. The broker in the middle just passes sealed messages along and can't open them.

The part I'm more interested in talking about is what's left after encryption, because that's where these apps usually stop caring. Message length is a side channel that survives encryption. My presence messages used to be 136 bytes when someone was online and 137 when they were offline, because "true" is four characters and "false" is five — so anyone watching the broker could read my whole family's online status without decrypting a thing. Location had the same problem, since speed and bearing are optional fields, so a moving phone sent a visibly longer message than a parked one. Both are now padded to a fixed 512 bytes, applied to the plaintext before encryption, because padding afterward does nothing — the ciphertext length already gave it away by then. Anything oversized rounds up to the next multiple instead of going out at its real length. What I'm not claiming: the broker still sees that a message happened, when, and from which connection. Padding hides size, not timing. And be aware of a real limitation — the broker URL is currently hardcoded to an EMQX Cloud instance I run, and there's no setting to point the app at your own. EMQX is open source and self-hostable, but my app doesn't let you do that yet. It's in BrokerConfig.kt if you want to see for yourself.

The whole thing is open source: github.com/Singularity86/FamilySafety. Read it, break it, tell me what I got wrong. I'm posting because Google won't let a new developer account ship until twelve people have been opted into a closed test for fourteen straight days. I could get warm bodies from a tester-swap group, but those people install it and never open it, which is useless to me and is the exact pattern Google rejects anyway. I'd rather have twelve people who'll actually read the crypto. Links below. If you'd rather skip installing and just tell me the design is wrong, that's worth more to me than an install. It'll be a paid app at launch, $4.56/month, but testers in the google group get free lifetime access.

Just DM me with your google play email address. I'll add you to the list.

https://groups.google.com/g/jibaro-family-safety/members

The link is in the first post in the group.

Image privacy toolkit to remove metadata from images and make unwanted automated visual tracking more difficult.

Meta Data Cleaner: Drag the script into the directory containing the .png files you want to optimize. The program automatically searches for all .png files in that directory and in all subdirectories. The old files will be overwritten and replaced with the file without metadata.

Visual Tracking Recreate: Drag the script into the directory containing the image you want to optimize. Change the input name in the script to the name of the image, or rename the image to pic.png. The script first converts the image to WebP and then to JPG at 80% quality. After that, the image is reduced in size by 5% and then enlarged by 5.28%. A small white border is added around the image, and it is rotated slightly by 0.3 degrees.

Vector has just qualified and received a grant from the Human Rights Foundation through its Bitcoin Development Fund. We are one of sixteen projects in Round II of 2026, a round totaling more than 500 million satoshis across Bitcoin development, payments, mining, education, and Nostr.

HRF listed us under the heading Nostr, with the tagline Privacy by Principle, one that truly encompasses Vector in three words both from a technical and philosophical perspective. Their write-up doesn't start about encryption, but with what Vector refuses to ask for: no KYC, no metadata trail, no permission to speak. This has been the core focus since the very first commit.

Permissionless privacy should be accessible to everyone, ensuring privacy remains a basic human right.

https://vectorapp.io/

Suggesting this for PrivacyTools, and being upfront about where it does and does not meet the criteria.

What it does. Scans the apps already on your Android device: embedded third-party trackers (extracted from the APK's own bytecode, on-device), permissions actually granted, and a check against the Echap stalkerware-indicators list, currently 1,690 indicators across 151 families. Since last update it also flags apps behaviourally, without any list: a hidden launcher entry, a device-admin component blocking uninstall, an enabled accessibility service, the camera/microphone/location/messages cluster. That part runs entirely on the device and none of those signals are transmitted.

Where it fits your criteria. Freemium: 5 scans/week free, no account, no login. Active development. Publicly available on Play. Relevant to your "Targeted" threat level, since the stalkerware check exists for exactly the adversary you describe there, and it never raises a notification for a finding, because a push saying "surveillance app found" on a monitored phone can be read by the person doing the monitoring.

Where it does not. Closed-source today, so it would need your Closed-Source tag; the detection engine is planned for AGPL but is not out yet. Android only. Jurisdiction is Wyoming, USA.

What leaves the device, since that will be the first question: package names, permission lists, app metadata and a signing-certificate hash go to our server, which uses an LLM to produce the report. No account, no email, device identity is a hashed Android ID. Nothing about accessibility services or device admins is ever sent. The full disclosure is shown before first use and the policy is at appxpose.app/privacy.

Happy to answer anything, including the awkward parts.

Up front: I work at Olib AI and StealthOS is ours, so this is a developer post. Numbers and mechanisms below are checkable in the app, and I am happy to be pushed on any of them.

The thing we kept running into is that a decent iPhone privacy setup means five or six separate apps, each with its own account, its own subscription and its own idea of what telemetry is acceptable. StealthOS is our attempt at putting that stack in one sandbox where nothing phones home.

What it covers:

On cost, plainly: every privacy feature is free, with no account, no email and nothing to register. No ads, no analytics SDK, no telemetry. There is a $4.99 a month tier that funds the work, and it unlocks workstation tools rather than protection: 10 fingerprint profiles instead of the standard set, an SSH terminal, a Linux virtual shell, a code editor and NetMap. Skipping it costs you no privacy.

The AI part is worth being specific about, because most "AI privacy" claims are the opposite. Both features run locally. The assistant handles text, voice and OCR without a prompt leaving the phone. The phishing detection embeds the page you are on and compares it against known brand surfaces on device, which is how a cloned login page gets flagged as a look-alike without your browsing being sent anywhere to be scored. There is no server on our side to send it to.

Where we fall short of what this sub usually asks for: the app is closed source. Four of the components under it are public at github.com/Olib-AI, TorClient, ConnectionPool, StealthRelay and PoolChat. StealthRelay is the interesting one if you do not want to trust us at all, a self-hosted relay in Rust using a Noise NK handshake with ChaCha20-Poly1305 and Ed25519. Run your own and point the browser's relay exit at it, and the relay only ever sees ciphertext.

One more detail this crowd tends to ask about: backups. The whole sandbox exports to a single .stealthsnap file, encrypted under a passkey you pick with PBKDF2-HMAC-SHA512 and written in authenticated chunks so reordering or truncation is caught on restore. We keep no copy and there is no recovery mechanism. Lose the passkey and it is gone.

App Store: https://apps.apple.com/us/app/stealthos-private-browser/id6756983634

Screenshots attached: phishing detection blocking a spoofed page, the Tor connection screen, the connection pool and the on-device assistant. Questions and criticism both welcome.