Encrypted offsite backups, instrumented end-to-end.

Restic-encrypted ciphertext over Tor. Monero settlement. SHA-anchored audit trail. Zero PII collected, by design.

Ciphertext blobs in-flight (p99)38ms▼ 4ms vs 7d

Active encrypted snapshots14.2kstable

Tor circuit RTT (p50)412ms▲ 18ms

Ingest backlog0qdrained

System architecture

   ╔════════════╗  Tor  ╔═════════════════╗
   ║  client    ║─ 3h ──║   service       ║
   ║  + Restic  ║◄──────║   ciphertext    ║
   ╚════════════╝       ╚═════════════════╝
       │                         │
       │ AES-256-GCM              │ ciphertext only
       │ keys: client-side        │ no plaintext, ever
       │ service holds no keys    │ no decryption path

Client-side AES-256-GCM via Restic. The service receives ciphertext only; where bytes physically reside is not a relevant security parameter because the service has no decryption keys.

Distribution — v0.1.0

OS	Arch	Format	Artifact	SHA256 (12)
macOS	arm64	.dmg	privatearchive-darwin-arm64.dmg	f3a9c12be4d0…
macOS	amd64	.dmg	privatearchive-darwin-amd64.dmg	b81e5d4a7c92…
Linux	amd64	.tar.gz	privatearchive-linux-amd64.tar.gz	2c17e9f30de4…
Linux	arm64	.tar.gz	privatearchive-linux-arm64.tar.gz	9a4b6d827c11…
Windows	amd64	.zip	privatearchive-windows-amd64.zip	71fe8c2b094a…
Source	any	.tar.gz	Source · privatearchive-source-v0.1.0.tar.gz · verify the crypto	d4e7a91c5b03…

Full SHA256SUMS · all builds reproducible from git.privatearchive.xyz

Network observer	PASS
Server compromise	PASS
Disk seizure	PASS
Insider with admin access	PASS
Lost client cert	FAIL — by design
Lost passphrase	FAIL — by design

Encrypted offsite backups, instrumented end-to-end.

System architecture

Tariff

Privacy commitments

Throughput (rolling 30d, anonymised)

Threat coverage

Distribution — v0.1.0