My Hardcore Privacy Stack
📱 Google Pixel with GrapheneOS (no Google account)
🔒 Sandboxed Play Services disabled
🧹 Apps permission-minimized, sensors off by default
🔄 Regular OS & app updates
COMMUNICATION
🗣️ SimpleX, Session, Signal (for non-tech contacts), Element, Threema
🕳️ Cwtch (metadata-resistant groups)
🌐 Garnet (Nostr)
BROWSING
🌐 Tor Browser (default), Vanadium (hardened)
NETWORK PRIVACY
🛡️ Mullvad VPN, IVPN, NymVPN
🧩 InviZible Pro (DNSCrypt + Tor + I2P)
⭕ No captive portal login (disabled)
🔌 Firewall default-deny
EMAIL
✉️ Self-hosted RoundCube
🛡️ Tuta
📬 Own email aliasing
NOTES & DATA
🗒️ Joplin, Nextcloud Notes
📄 OSS Document Scanner
🧱 Cryptomator (encrypted vaults)
FILE SYNC
📁 Syncthing (primary), Nextcloud, DAVx5, LocalSend
PASSWORDS & KEYS
🔑 KeePass2Android (Nextcloud sync)
🔐 Aegis (2FA)
🗝️ OpenKeychain (PGP)
✍️ Amber (Nostr signing)
APPS & STORES
📦 F-Droid, Droid-ify, Aurora Store (anonymous), Obtainium, Accrescent
FINANCE (XMR)
💸 Cake Wallet, Monero com, Monerujo
MEDIA
📺 Grayjay, NewPipe, VLC
📻 Transistor (internet radio), AntennaPod
MAPS & UTILITIES
🗺️ CoMaps (Organic Maps)
🌤️ Breezy Weather
📞 Koler
⌨️ FUTO Keyboard, FUTO Voice Input, Simple Keyboard
📲 PWAs whenever possible
GAMES
🎮 lichess, Sudoku, Antimine
SELF-HOSTED VIA NEXTCLOUD
• Calendar
• Contacts
• KeePass
• Notes
• Joplin
• Files
