My Hardcore Privacy Stack

📱 Google Pixel with GrapheneOS (no Google account)
🔒 Sandboxed Play Services disabled
🧹 Apps permission-minimized, sensors off by default
🔄 Regular OS & app updates

COMMUNICATION
🗣️ SimpleX, Session, Signal (for non-tech contacts), Element, Threema
🕳️ Cwtch (metadata-resistant groups)
🌐 Garnet (Nostr)

BROWSING
🌐 Tor Browser (default), Vanadium (hardened)

NETWORK PRIVACY
🛡️ Mullvad VPN, IVPN, NymVPN
🧩 InviZible Pro (DNSCrypt + Tor + I2P)
⭕ No captive portal login (disabled)
🔌 Firewall default-deny

EMAIL
✉️ Self-hosted RoundCube
🛡️ Tuta
📬 Own email aliasing

NOTES & DATA
🗒️ Joplin, Nextcloud Notes
📄 OSS Document Scanner
🧱 Cryptomator (encrypted vaults)

FILE SYNC
📁 Syncthing (primary), Nextcloud, DAVx5, LocalSend

PASSWORDS & KEYS
🔑 KeePass2Android (Nextcloud sync)
🔐 Aegis (2FA)
🗝️ OpenKeychain (PGP)
✍️ Amber (Nostr signing)

APPS & STORES
📦 F-Droid, Droid-ify, Aurora Store (anonymous), Obtainium, Accrescent

FINANCE (XMR)
💸 Cake Wallet, Monero com, Monerujo

MEDIA
📺 Grayjay, NewPipe, VLC
📻 Transistor (internet radio), AntennaPod

MAPS & UTILITIES
🗺️ CoMaps (Organic Maps)
🌤️ Breezy Weather
📞 Koler
⌨️ FUTO Keyboard, FUTO Voice Input, Simple Keyboard
📲 PWAs whenever possible

GAMES
🎮 lichess, Sudoku, Antimine

SELF-HOSTED VIA NEXTCLOUD
• Calendar
• Contacts
• KeePass
• Notes
• Joplin
• Files