WHAT IT IS.

You run software on your computer. The software encrypts your files before they leave the machine. The encrypted blobs travel through Tor to a server you have never met. The server holds the ciphertext. You pay in Monero. There are no accounts, no emails, no names, no passwords.

If we ever go offline, your client certificate — a file we let you generate — is the only thing tying you to your data. We have no way to recover it. Neither does anyone else.

WHAT IT IS NOT.

Cloud sync. (Use Syncthing.)
Photo gallery. (Use immich.)
End-to-end “but we still have your email.”
Free.

HOW IT WORKS.

  YOUR MACHINE              THE WIRE                    OUR SERVER
  +------------+            +-------------+             +---------------+
  | restic     |  ciphertext|  tor circuit|  ciphertext |  opaque blobs |
  | encrypts   | ---------> |  (no exit)  | ----------> |  on disk      |
  | locally    |            |             |             |  unreadable   |
  +------------+            +-------------+             +---------------+
       ^                                                       |
       | mTLS via X.509. cert hash IS the account. no login.   |
       +-------------------------------------------------------+

Restic encrypts before it leaves you. We hold ciphertext. Where we put it on disk is a storage problem, not a privacy one — we genuinely cannot decrypt it. Not for you, not for anyone else, not under any circumstance.

THE PROMISES.

NAME	NOT COLLECTED.
EMAIL	NOT COLLECTED.
IP ADDRESS	NOT VISIBLE TO US (TOR).
PAYMENT TRAIL	NOT VISIBLE TO ANYONE (MONERO).
FILE CONTENTS	NOT VISIBLE TO US (RESTIC).
FILE NAMES	NOT VISIBLE TO US (RESTIC).
USAGE ANALYTICS	NOT COLLECTED. NOT EVEN ON THIS PAGE.

PRICE.

Pay-as-you-go in Monero. Top up; balance burns down; refill when needed. No subscription, no commit.

BINARIES.

Static. No installers if we can help it. Reproducible builds. SHA256 sums published with each release.

[ macos.aarch64 ]
[ macos.x86_64 ]
[ linux.x86_64 ]
[ linux.aarch64 ]
[ windows.x86_64 ]
[ SHA256SUMS ]
[ source.tar.gz — verify the encryption yourself ]

SOURCE.

Clients are open source. Audit them. Build them yourself if you want — the build is reproducible, so your binary should match ours byte-for-byte. The thing protecting you is mathematics, not our reputation.