PRIVATE ARCHIVE
privatearchive.xyz / encrypted offsite backup

YOUR DATA
IS NOT THEIR
ARCHIVE.

Private Archive is encrypted offsite backup built on the principle of data minimisation. Your files are encrypted on your device before they leave it. We hold ciphertext, nothing else. We do not collect what we do not need — and what isn’t collected cannot be lost, leaked, or sold.

DOWNLOAD THE CLIENT READ THE MANIFESTO
  • RESTIC ENCRYPTION ON-DEVICE
  • ROUTED OVER TOR
  • PAID IN MONERO
  • mTLS — NO PASSWORDS
  • OPEN SOURCE · REPRODUCIBLE BUILDS
01

WHAT WE DO NOT COLLECT.

The omissions are the product. Each item we do not collect is one less thing to lose in a breach, one less detail to be sold to a broker, one less piece of you that exists outside your own machine.

  • Your name.

    We never ask. There is no field for it. There is no place to put it.

  • Your email.

    No address on file. No newsletter. No password reset. No way back in if you lose your key — this is the trade.

  • Your IP.

    You arrive over Tor. We see an exit relay, not a person, not a city, not a habit.

  • Your card.

    Payment in Monero. No card vault for an attacker to drain, no merchant ledger for anyone to inherit.

  • Your files.

    Restic encrypts before the bytes leave your machine. We hold ciphertext. We cannot decrypt it — not for ourselves, not for any successor company, not for anyone with access to the storage.

  • Your behaviour.

    No analytics on this page. No telemetry in the client. No experiments running on what you click.

02

A SHORT MANIFESTO.

Backup, like every other utility on the network, has been quietly conscripted into the surveillance economy. The default arrangement is dragnet: collect everything, retain by default, and reason about the harms later. We do not accept this as the price of keeping a copy of your photographs.

So we built the inverse. The client encrypts on the machine you trust, with a key we will never see. The transport hides the route. The payment hides the wallet. The credential is a certificate, not a name. Sovereignty over your own data is not a setting we offer; it is the only mode we ship.

This is not a product feature. It is a posture. A backup service that does not collect customer identities cannot leak them in a breach, cannot sell them to a broker, cannot pass them to whichever company buys this one in ten years. A service that stores ciphertext cannot be the source of plaintext. A service that keeps no logs has nothing to leak.

We are aware that absolute security is a fiction. What we offer is principled design and the discipline to keep saying no — to features that would weaken it, to data we do not need, to convenience purchased with your dignity.

— The Private Archive project

03

HOW IT WORKS.

  1. 1

    ENCRYPT ON YOUR MACHINE.

    The Private Archive client wraps Restic. Files are deduplicated, compressed, and encrypted on-device with a key only you possess. We never receive the key. We never receive plaintext.

  2. 2

    SEND THROUGH TOR.

    The encrypted blocks travel over Tor to a server you have authenticated to with an X.509 client certificate. mTLS handshake; no password, no recovery question, no second factor. The certificate is the account.

  3. 3

    WE HOLD CIPHERTEXT.

    We encrypt before your data leaves your machine. We hold ciphertext. Where we put it is not part of this conversation, because no one who has it can read it. That is the only fact about our storage that should ever matter to you.

04

YOU PAY. WE FORGET.

Pay in Monero. Balance burns down by the second. Top up when you choose. No subscription, no card.

No tiers. No enterprise upsell. No discount in exchange for your data.

05

DOWNLOAD THE CLIENT.

Verify the archive against SHA256SUMS. Build it yourself if you prefer — the source is public and the builds are reproducible.

macOS arm64 · Apple Silicon .tar.gz macOS amd64 · Intel .tar.gz Linux amd64 .tar.gz Linux arm64 .tar.gz Windows amd64 .zip Windows arm64 .zip FreeBSD amd64 .tar.gz FreeBSD arm64 .tar.gz OpenBSD amd64 .tar.gz OpenBSD arm64 .tar.gz Source audit the encryption yourself do not trust us, verify SHA256SUMS verify everything checksums

Install & keep up to date

Every channel below installs the same reproducible, signed binaries. Verify direct downloads against SHA256SUMS; the apt, dnf and pacman repositories are GPG repo-signed with fingerprint 4792 23EA 8405 287A 11FB B12E 02A7 7A1E EDD0 F111.

Any platform — one line

curl -fsSL https://privatearchive.xyz/install.sh | bash

Or download a tarball for macOS, Linux, Windows, FreeBSD or OpenBSD (amd64 + arm64) — and the source — from the latest release.

Debian / Ubuntu — apt

curl -fsSL https://privatearchive.xyz/apt/release-key.asc | sudo gpg --dearmor -o /usr/share/keyrings/privatearchive.gpg
echo "deb [signed-by=/usr/share/keyrings/privatearchive.gpg] https://privatearchive.xyz/apt stable main" | sudo tee /etc/apt/sources.list.d/privatearchive.list
sudo apt update && sudo apt install privatebackup

Fedora / RHEL — dnf

sudo curl -fsSL https://privatearchive.xyz/dnf/privatearchive.repo -o /etc/yum.repos.d/privatearchive.repo
sudo dnf install privatebackup

Arch — pacman

curl -fsSL https://privatearchive.xyz/pacman/release-key.asc | sudo pacman-key --add -
sudo pacman-key --lsign-key 479223EA8405287A11FBB12E02A77A1EEDD0F111
printf '\n[privatearchive]\nServer = https://privatearchive.xyz/pacman\n' | sudo tee -a /etc/pacman.conf
sudo pacman -Sy privatebackup

macOS — Homebrew

brew install https://privatearchive.xyz/brew/privatebackup.rb

Windows — Scoop

scoop install https://privatearchive.xyz/scoop/privatebackup.json