WHAT IT IS.

You run software on your computer. The software encrypts your files before they leave the machine. The encrypted blobs travel through Tor to a server you have never met. The server holds the ciphertext. You pay in Monero. There are no accounts, no emails, no names, no passwords.

If we ever go offline, your client certificate — a file we let you generate — is the only thing tying you to your data. We have no way to recover it. Neither does anyone else.

WHAT IT IS NOT.

Cloud sync. (Use Syncthing.)
Photo gallery. (Use immich.)
End-to-end “but we still have your email.”
Free.

HOW IT WORKS.

  YOUR MACHINE              THE WIRE                    OUR SERVER
  +------------+            +-------------+             +---------------+
  | restic     |  ciphertext|  tor circuit|  ciphertext |  opaque blobs |
  | encrypts   | ---------> |  (no exit)  | ----------> |  on disk      |
  | locally    |            |             |             |  unreadable   |
  +------------+            +-------------+             +---------------+
       ^                                                       |
       | mTLS via X.509. cert hash IS the account. no login.   |
       +-------------------------------------------------------+

Restic encrypts before it leaves you. We hold ciphertext. Where we put it on disk is a storage problem, not a privacy one — we genuinely cannot decrypt it. Not for you, not for anyone else, not under any circumstance.

THE PROMISES.

NAME	NOT COLLECTED.
EMAIL	NOT COLLECTED.
IP ADDRESS	NOT VISIBLE TO US (TOR).
PAYMENT TRAIL	NOT VISIBLE TO ANYONE (MONERO).
FILE CONTENTS	NOT VISIBLE TO US (RESTIC).
FILE NAMES	NOT VISIBLE TO US (RESTIC).
USAGE ANALYTICS	NOT COLLECTED. NOT EVEN ON THIS PAGE.

PRICE.

Pay-as-you-go in Monero. Top up; balance burns down; refill when needed. No subscription, no commit.

BINARIES.

Static. No installers if we can help it. Reproducible builds. SHA256 sums published with each release.

[ macos.aarch64 ]
[ macos.x86_64 ]
[ linux.x86_64 ]
[ linux.aarch64 ]
[ windows.x86_64 ]
[ windows.aarch64 ]
[ freebsd.x86_64 ]
[ freebsd.aarch64 ]
[ openbsd.x86_64 ]
[ openbsd.aarch64 ]
[ SHA256SUMS ]
[ source.tar.gz — verify the encryption yourself ]

SOURCE.

Clients are open source. Audit them. Build them yourself if you want — the build is reproducible, so your binary should match ours byte-for-byte. The thing protecting you is mathematics, not our reputation.

Install & keep up to date

Every channel below installs the same reproducible, signed binaries. Verify direct downloads against SHA256SUMS; the apt, dnf and pacman repositories are GPG repo-signed with fingerprint 4792 23EA 8405 287A 11FB B12E 02A7 7A1E EDD0 F111.

Any platform — one line

curl -fsSL https://privatearchive.xyz/install.sh | bash

Or download a tarball for macOS, Linux, Windows, FreeBSD or OpenBSD (amd64 + arm64) — and the source — from the latest release.

Debian / Ubuntu — apt

curl -fsSL https://privatearchive.xyz/apt/release-key.asc | sudo gpg --dearmor -o /usr/share/keyrings/privatearchive.gpg
echo "deb [signed-by=/usr/share/keyrings/privatearchive.gpg] https://privatearchive.xyz/apt stable main" | sudo tee /etc/apt/sources.list.d/privatearchive.list
sudo apt update && sudo apt install privatebackup

Fedora / RHEL — dnf

sudo curl -fsSL https://privatearchive.xyz/dnf/privatearchive.repo -o /etc/yum.repos.d/privatearchive.repo
sudo dnf install privatebackup

Arch — pacman

curl -fsSL https://privatearchive.xyz/pacman/release-key.asc | sudo pacman-key --add -
sudo pacman-key --lsign-key 479223EA8405287A11FBB12E02A77A1EEDD0F111
printf '\n[privatearchive]\nServer = https://privatearchive.xyz/pacman\n' | sudo tee -a /etc/pacman.conf
sudo pacman -Sy privatebackup

macOS — Homebrew

brew install https://privatearchive.xyz/brew/privatebackup.rb

Windows — Scoop

scoop install https://privatearchive.xyz/scoop/privatebackup.json