// non-custodial · trust-minimised · sovereign-by-default

Backups you custody.
Bytes we can’t read.

Restic-encrypted, Tor-routed, XMR-settled. Your client cert is your account. No KYC, no email, no recoverable identity. We hold opaque ciphertext; you hold every key that matters.

$ get the binary read the stack

● no custodian · ● no chain analytics on this page · ● open-source clients

// THE STACK

Each layer is something you would have picked anyway.

Restic

client-side AES-256-GCM

Encrypts before transit. Open source since 2014. Multiple independent reviews. Keys generated on your hardware, never leave it.

Tor

onion-routed, hidden service

Three-hop transport. We never see your IP. You never need ours. Both endpoints are .onion.

mTLS / X.509

your cert = your account

SHA-256 of your cert is your only ID. No password. No recovery flow. Lose it, lose access.

Monero

subaddress per client

Stealth addresses, ring signatures. We only see the subaddress mapped to your cert. The chain shows nobody who paid whom.

Reproducible builds

don’t trust, verify

Every release is reproducible. SHA256 sums published. Build it yourself if you don’t want to take our word. Audit the crypto end-to-end.

0 custodial wallets held
on your behalf

0 PII fields
collected

∞ retention
(while balance > 0)

∞ keys you keep
yourself

// QUICKSTART

Run a node. Push some blobs. Forget about us.

$ curl -L https://privatearchive.xyz/releases/latest | sh
[+] privatearchive v0.1.0 installed.

$ privatearchive init
[+] generating ed25519 client cert > ~/.privatearchive/client.pem
[!] BACK THIS UP. there is no recovery.

$ privatearchive pay
[+] send XMR to:
    8B5cBK29...e2NM (subaddress, yours)
[+] balance burns down by the second. top up when needed.

$ privatearchive backup ~/wallets ~/keys ~/.local/share/electrum
[+] restic snapshot abcd1234 encrypted client-side, routed via tor.
[+] service holds opaque ciphertext. only you can read it back.

// STORAGE

Client-side encryption. Opaque ciphertext. Sovereignty by construction.

Restic encrypts every byte on your hardware before it touches the wire. The service holds opaque ciphertext — nothing else. You don’t need to know where it lives, because nobody who does can read it. Pay-as-you-go in XMR. Subaddress per client. Balance burns down by the second. Top up when needed. No subscription, no commit, no minimum.

// BINARIES

Verify. Run.

OS	Arch	Format	SHA256 (truncated)
macOS	arm64	.dmg	`f3a9c12be4d0…`	↓ download
macOS	amd64	.dmg	`b81e5d4a7c92…`	↓ download
Linux	amd64	.tar.gz	`2c17e9f30de4…`	↓ download
Linux	arm64	.tar.gz	`9a4b6d827c11…`	↓ download
Windows	amd64	.zip	`71fe8c2b094a…`	↓ download
source	any	.tar.gz	`a1b2c3d4e5f6…`	↓ source · audit the crypto

Full SHA256SUMS. Sources at git.privatearchive.xyz. Build it yourself; don’t trust us.

Backups you custody.Bytes we can’t read.