1
1
mirror of https://github.com/privacyguides/privacyguides.org.git synced 2026-06-17 07:49:13 +00:00

Compare commits

..

1 Commits

Author SHA1 Message Date
jonah 331d05cda2 update!: Remove ProtonVPN 2026-03-10 14:48:02 -05:00
49 changed files with 477 additions and 2162 deletions
-11
View File
@@ -3118,17 +3118,6 @@
"contributions": [
"doc"
]
},
{
"login": "regions99rockery",
"name": "regions99rockery",
"avatar_url": "https://avatars.githubusercontent.com/u/234068936?v=4",
"profile": "https://github.com/regions99rockery",
"contributions": [
"research",
"maintenance",
"question"
]
}
],
"contributorsPerLine": 5,
-1
View File
@@ -18,7 +18,6 @@
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
# IN THE SOFTWARE.
$schema: https://raw.githubusercontent.com/DavidAnson/markdownlint/v0.40.0/schema/markdownlint-config-schema.json
default: true
line-length: false
ul-indent:
+1
View File
@@ -335,6 +335,7 @@ simple-freebsd
MySudo
Coincards
Redlib
ProxiTok
Yattee
eepsite
proxying
-1
View File
@@ -594,7 +594,6 @@ Privacy Guides wouldn't be possible without these wonderful people ([emoji key](
</tr>
<tr>
<td align="center" valign="top" width="20%"><a rel="nofollow noopener noreferrer" href="https://github.com/blanchardjeremy"><img src="https://avatars.githubusercontent.com/u/32290?v=4" width="100px;" loading=lazy /><br /><sub><b>Jeremy</b></sub></a><br /><a href="https://github.com/privacyguides/privacyguides.org/commits?author=blanchardjeremy" title="Documentation">📖</a></td>
<td align="center" valign="top" width="20%"><a rel="nofollow noopener noreferrer" href="https://github.com/regions99rockery"><img src="https://avatars.githubusercontent.com/u/234068936?v=4" width="100px;" loading=lazy /><br /><sub><b>regions99rockery</b></sub></a><br /><a href="#research-regions99rockery" title="Research">🔬</a> <a href="#maintenance-regions99rockery" title="Maintenance">🚧</a> <a href="#question-regions99rockery" title="Answering Questions">💬</a></td>
</tr>
</tbody>
<tfoot>
+2 -2
View File
@@ -128,7 +128,7 @@ After making any necessary changes, click **Delete data**.
## Clearing Browsing Data on Microsoft Edge
Finally, we will finish this tutorial with Microsoft Edge. Start by launching the browser. On the upper right-hand corner, click on the **three-dots icon**. Next, click **Settings**.
Finally, we will finish this tutorial with Microsoft Edge. Start by launching the browser. On the upper right-hand corner, click on the **three-dots icon**. Next, click **Settings**.
![Screenshot: Edge Home Page](../assets/images/clearing-your-browsing-data/edge2.webp)
@@ -138,7 +138,7 @@ In the settings page, navigate to **Privacy, Search, and Services**
Under **Delete Browsing Data**, click on **Choose What to Clear**.
![Screenshot: Edge Settings](../assets/images/clearing-your-browsing-data/edge4.webp)
![Screenshot: Edge Settings ](../assets/images/clearing-your-browsing-data/edge4.webp)
Modify the time range and data to be deleted. Afterwards, click **Clear Now**.
+1 -1
View File
@@ -409,7 +409,7 @@ There are many ways to help Tor survive and thrive! You can help by:
- [Proton Mail](https://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/)
- [Tor Project](http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion)
---
***
For more in-depth information about Tor, you can consult our [Tor Overview](https://www.privacyguides.org/en/advanced/tor-overview/).
+1 -1
View File
@@ -122,7 +122,7 @@ That being said, if you need advanced features, you might want to [pay](https://
Alternatively, if you do not need any advanced features but would like to support the project, you could use the free plan and [donate](https://keepassium.com/donate/) a fix amount to KeePassium.
### Rent-to-own
#### Rent-to-own
Something interesting about KeePassium Premium's plan is that it offers a "[rent-to-own](https://support.keepassium.com/kb/license-rent-own/)" license. This means that if you pay for a KeePassium subscription for 12 months or more, you will always "own" the features you've paid for, even if you stop paying.
+1 -1
View File
@@ -329,7 +329,7 @@ From the Nginx Proxy Manager browser interface, click **Hosts**, **Proxy Hosts**
| `monerod-rpc.<domain>` | `http` | `<hostname>` | `18089` |
| `monero-lws.<domain>` | `http` | `<hostname>` | `18090` |
For each entry, enable **Block common exploits**. Configure the SSL settings with **Request a new SSL Certificate**, **Force SSL** enabled, and **HTTP/2 Support** enabled.
For each entry, enable **Block common exploits**. Configure the SSL settings with **Request a new SSL Certificate**, **Force SSL** enabled, and **HTTP/2 Support** enabled.
Optionally assign an access list.
+1 -1
View File
@@ -208,7 +208,7 @@ If you or someone you know is in one of the situations described above, these ad
**Trans Peer Support** :material-arrow-right-bold: [Trans Lifeline Hotline](https://translifeline.org/hotline/) Phone number US: 1-877-565-8860 / Canada: 1-877-330-6366
**Stalking Victim Support** :material-arrow-right-bold: US: [SafeHorizon](https://www.safehorizon.org/get-help/stalking/) / Canada: [The Canadian Resource Centre for Victims of Crime](https://crcvc.ca/wp-content/uploads/2021/09/Cyberstalking-_DISCLAIMER_Revised-Aug-2022_FINAL.pdf)
**Stalking Victim Support** :material-arrow-right-bold: US: [SafeHorizon](https://www.safehorizon.org/get-help/stalking/) / Canada: [The Canadian Resource Centre for Victims of Crime](https://crcvc.ca/wp-content/uploads/2021/09/Cyberstalking-_DISCLAIMER_Revised-Aug-2022_FINAL.pdf)
**Domestic Violence Victim Support** :material-arrow-right-bold: US: [The National Domestic Violence Hotline](https://www.thehotline.org/) Phone number: 1-800-799-7233 / Canada: [Canadian resources by situation and province](https://www.canada.ca/en/public-health/services/health-promotion/stop-family-violence/services.html)
@@ -125,7 +125,7 @@ Continuing this horrifying trend, Match Group has announced this spring they are
If having to scan your official ID to continue using Tinder is *bad*, having to scan your eyeball from a questionable third party app is even *worse*.
This practice will start for Tinder in Japan, but it's likely the verification process could be expanded to all users of Match Group apps in the near future. Soon, the only way to avoid having to share biometric data with the World App to continue using your favorite dating app could be to leave the app entirely.
This practice will start for Tinder in Japan, but it's likely the verification process could be expanded to all users of Match Group apps in the near future. Soon, the only way to avoid having to share biometric data with the World App to continue using your favorite dating app could be to leave the app entirely.
#### Payment information
+1 -1
View File
@@ -58,7 +58,7 @@ XMPP is arguably the best example of this. XMPP allows you to sign up without an
## Closing Thoughts
These three concepts are not necessarily dependent on each other. A secure product does not guarantee privacy, a private product does not guarantee security, and anonymity does not guarantee either. As I said before, there is nothing wrong with valuing one facet over another. It's also okay to use Signal even though it doesn't give you total anonymity. Just be sure you understand how a product is meant to be used and where it both shines and falls short. It would be awful to use Google thinking that it will give your communications total privacy and then your financial details get stolen by a [rogue employee](https://web.archive.org/web/20210729190743/https://nypost.com/2020/09/23/shopify-says-rogue-employees-may-have-stolen-customer-data/). Or if you used a service like Signal to organize protests in a hostile country only to be arrested once your phone number is unmasked. Know the limitations of the services you choose and decide what features are important to you. Its also important to know that privacy and security are sliding scales. This could be an entire blog post on its own. Think of passwords. Any password even “password” - is technically more secure than no password at all. But a 16-character randomly-generated password is even more secure than “password.” Sometimes its okay to find a solution that offers a blend less privacy in one area in exchange for more security in another, or vice versa. Once again, it all comes back to your threat model, your needs, and your resources.
These three concepts are not necessarily dependent on each other. A secure product does not guarantee privacy, a private product does not guarantee security, and anonymity does not guarantee either. As I said before, there is nothing wrong with valuing one facet over another. It's also okay to use Signal even though it doesn't give you total anonymity. Just be sure you understand how a product is meant to be used and where it both shines and falls short. It would be awful to use Google thinking that it will give your communications total privacy and then your financial details get stolen by a [rogue employee](https://web.archive.org/web/20210729190743/https://nypost.com/2020/09/23/shopify-says-rogue-employees-may-have-stolen-customer-data/). Or if you used a service like Signal to organize protests in a hostile country only to be arrested once your phone number is unmasked. Know the limitations of the services you choose and decide what features are important to you. Its also important to know that privacy and security are sliding scales. This could be an entire blog post on its own. Think of passwords. Any password even “password” - is technically more secure than no password at all. But a 16-character randomly-generated password is even more secure than “password.” Sometimes its okay to find a solution that offers a blend less privacy in one area in exchange for more security in another, or vice versa. Once again, it all comes back to your threat model, your needs, and your resources.
---
@@ -86,7 +86,7 @@ Occasionally, these recommendations are coupled with a “review” that is supp
At [Privacy Guides](https://privacyguides.org/), weve developed a set list of criteria, and we make that abundantly clear when you read our list of [recommended VPN providers](https://privacyguides.org/vpn/). We also refrain from using affiliate links. As weve discussed, they are fundamentally flawed ways to market a service, and using them would break the trust our community has in our recommendations.
We do have a sponsorship program, but all of our finances are handled in an incredibly transparent fashion. As a non-profit organization, the funding we receive cannot be used for private profit, and our community can see both where we receive money from and how it is being spent thanks to [Open Collective.](https://opencollective.com/privacyguides) Additionally, the recommendations on our site are handled by an entirely separate team of editors and contributors than the administrative team such as myself that handles the sponsorships and finances. The editors have sole control over our recommendations and operate entirely independently and on a volunteer-basis to ensure the choices we make are for the benefit of the privacy community over one individual.
We do have a sponsorship program, but all of our finances are handled in an incredibly transparent fashion. As a non-profit organization, the funding we receive cannot be used for private profit, and our community can see both where we receive money from and how it is being spent thanks to [Open Collective.](https://opencollective.com/privacyguides) Additionally, the recommendations on our site are handled by an entirely separate team of editors and contributors than the administrative team such as myself that handles the sponsorships and finances. The editors have sole control over our recommendations and operate entirely independently and on a volunteer-basis to ensure the choices we make are for the benefit of the privacy community over one individual.
Ultimately, as a matter of policy our sponsors have no say over our recommendations, or whether they are recommended or a competitor is removed. We have given our community vast access to our website and internal workings to keep us in check and ensure were staying true to our word. This separation of management and editors is a strategy that has served the media industry well for decades, and makes all of our team and organization a more credible and trustworthy source of information.
@@ -98,4 +98,4 @@ Review sites should make it abundantly clear when their reviews are paid for by
VPN providers should consider spending less money on paid reviews, and more money on securing and validating their infrastructure. Regular security audits are one fantastic way for companies to demonstrate their dedication to keeping their users secure. We strongly believe VPN services should consider our criteria, especially in regard to the ownership of their organization. Your VPN provider should not be hiding away in Panama controlled by anonymous leadership. While you *as a user* deserve privacy, transparency should be *required* of providers if you are expected to trust them. I would not give my money to some anonymous overseas investor, why would I give all of my internet traffic to some anonymous overseas administrator?
Finally, when youre choosing a VPN provider, do your own research. [Understand what a VPN actually does for you](https://www.jonaharagon.com/posts/understanding-vpns/). [Understand what it is a security audit proves](https://www.pcmag.com/article/371839/what-does-a-vpn-security-audit-really-prove), find out who owns and operates the VPN service you want to use, and make sure their policies and technologies reflect your values. [Ultimately gathering the information yourself](https://www.jonaharagon.com/posts/choosing-a-vpn/) and making an informed decision is the only way to make sure your privacy is being respected.
Finally, when youre choosing a VPN provider, do your own research. [Understand what a VPN actually does for you](https://www.jonaharagon.com/posts/understanding-vpns/). [Understand what it is a security audit proves](https://www.pcmag.com/article/371839/what-does-a-vpn-security-audit-really-prove), find out who owns and operates the VPN service you want to use, and make sure their policies and technologies reflect your values. [Ultimately gathering the information yourself](https://www.jonaharagon.com/posts/choosing-a-vpn/) and making an informed decision is the only way to make sure your privacy is being respected.
+2 -2
View File
@@ -385,7 +385,7 @@ Click on the "Change PUK" button and a section will pop up. Enter a new PUK numb
#### 7.4. Change the default Management key
Click on the "Management key" button and a section will pop up. Enter or generate a "New management key" with a maximum of 64 characters. You can also change the encryption algorithm to "TDES", "AES128", "AES192", or "AES256" and add a pin protection by clicking on "Protect with PIN". Then click "Save".
Click on the "Management key" button and a section will pop up. Enter or generate a "New management key" with a maximum of 64 characters. You can also change the encryption algorithm to "TDES", "AES128", "AES192", or "AES256" and add a pin protection by clicking on "Protect with PIN". Then click "Save".
![Screenshot of the Yubico Authenticator application showing a Change management key popup.](../assets/images/yubikey-reset-and-backup/yubikey-17-config-certificateskey.webp)
@@ -809,7 +809,7 @@ addkey
When prompted with "Please select what kind of key you want" type `8`.
You will be asked to toggle on or off some subkey options. Here, we will generate all 3 subkeys at once, but adjust this step to your required usage. You might also need different encryption algorithms for different subkeys (see options available from the previous **`gpg`** program question).
You will be asked to toggle on or off some subkey options. Here, we will generate all 3 subkeys at once, but adjust this step to your required usage. You might also need different encryption algorithms for different subkeys (see options available from the previous **`gpg`** program question).
<div class="admonition tip" markdown>
<p class="admonition-title">To generate subkeys separately</p>
+1 -3
View File
@@ -19,12 +19,10 @@ When [regulations keep attacking](https://www.privacyguides.org/articles/2025/09
==For privacy to become a valued and respected human right, we must work together== to defend privacy rights as a community.
This section will progressively grow with more tools to support the community in its privacy advocacy and activism effort. The Privacy Activist Toolbox and the DPA Directory are the first parts of this new development.
This section will progressively grow with more tools to support the community in its privacy advocacy and activism effort. The Privacy Activist Toolbox is the first part of this new development.
<div class="toolbox-button-grid" markdown>
[:fontawesome-solid-toolbox:{ .toolbox-button-icon } Privacy Activist Toolbox](toolbox/index.md){ .toolbox-button .toolbox-bg }
[:fontawesome-solid-address-card:{ .toolbox-button-icon } DPA Directory](legal/dpa-directory.md){ .toolbox-button .dpadirectory-bg }
</div>
File diff suppressed because it is too large Load Diff
@@ -72,7 +72,7 @@ When organizing events and meetups in person, it's essential to keep in mind phy
- [x] Research if your venue has access to parking and accessible parking spots. Publish this information with your invitation.
- [x] Verify the venue you select is accessible to people with visual or auditory impairments. For example, check if elevators are marked with Braille or raised letters, and make sure that hosts are informed on how to communicate with guests who are deaf or hard of hearing.
- [x] Verify the venue you select is accessible to people with visual or auditory impairments. For example, check if elevators are marked with Braille or raised letters, and make sure that hosts are informed on how to communicate with guests who are deaf or hard of hearing.
### Health accessibility
@@ -33,11 +33,9 @@ There are a lot of nuances and regional variations to this, but in general you s
## Finding your local regulations
If your jurisdiction is protected by one or more privacy laws, it should be relatively easy to find this information online.
If your jurisdiction is protected by one or more privacy laws, it should be relatively easy to find this information online. *Privacy Guides* will soon publish a tool facilitating this task.
To start your research, you can look at [Privacy Guides' DPA Directory](../legal/dpa-directory.md) and check if your region is listed there. If it is, you will see what is the main consumer privacy law for this region, and you can click on the link to learn more about it.
If your region isn't listed in our DPA Directory, or if you are looking for another more specific privacy-related law, you should be able to find this information online simply using a [trustworthy search engine](../../search-engines.md). Look for keywords with your location (be specific about country + states/provinces/region) and "privacy laws" or "data protection regulations."
In the meantime, you can simply use a [trustworthy search engine](../../search-engines.md) and look for keywords with your location (be specific about country + states/provinces/region) and "privacy laws" or "data protection regulations."
Always make sure to find a result that is from an official government source.
@@ -90,8 +88,6 @@ Once you've found the official governmental documentation describing the data pr
## More resources
- [Directory of comprehensive consumer privacy laws worldwide (*Privacy Guides*)](../legal/dpa-directory.md)
- [Map of data protection and privacy legislation worldwide (*UN Trade and Development*)](https://unctad.org/page/data-protection-and-privacy-legislation-worldwide)
- [The future of privacy: How governments shape your digital life (*Privacy Guides*)](https://www.privacyguides.org/articles/2025/02/03/the-future-of-privacy/)
@@ -158,7 +158,7 @@ Here are a few privacy-focused tools and services that can help you to organize
:video_camera: Use it to share videos with your community free from *YouTube*'s control.
[:octicons-home-16: Homepage](https://joinpeertube.org/){ .md-button .md-button--primary }
[:octicons-home-16: Homepage](../../social-networks.md#peertube){ .md-button .md-button--primary }
</div>
@@ -22,7 +22,7 @@ Nevertheless, if we want to [**build a movement**](tip-start-alliances-not-wars.
- [x] Even if you are also working on a similar project, lift them up with you!
It doesn't matter if you are working on something comparable yourself, or if perhaps you would word their work slightly differently. As long as the message is aligned with your mission and values, spread the words of your allies loud and far!
It doesn't matter if you are working on something comparable yourself, or if perhaps you would word their work slightly differently. As long as the message is aligned with your mission and values, spread the words of your allies loud and far!
By lifting each other up, we will broaden the reach of the message we share, and ultimately this serves our goals and our community too.
@@ -90,13 +90,6 @@ Most regulations will have a clear process to submit an official complaint.
Once you've found the official documentation for your local privacy law(s), read through it to find who is responsible for enforcing the law (who is your DPA), and what the complaint process is.
<div class="admonition success" markdown>
<p class="admonition-title">Finding your local privacy law and enforcement authority</p>
To help you find the official documentation for your local privacy law, the authority mandated to enforce it, and the contact links to ask questions or place a complaint, Privacy Guides has put together this handy [DPA Directory](../legal/dpa-directory.md).
</div>
Before submitting a complaint, you may want to:
### 1. Document everything you can
@@ -155,14 +148,12 @@ When sending an official complaint, make sure to:
}
@counter-style emoji-list-c {
system: cyclic;
symbols: "📗" "🗺️";
symbols: "🗺️";
suffix: " ";
</style>
<div class="emoji-list-c" markdown>
- [Privacy Laws and Data Protection Authority Directory (*Privacy Guides*)](../legal/dpa-directory.md)
- [European Union Member States Data Protection Authorities - List and Map (*EDPB*)](https://www.edpb.europa.eu/about-edpb/about-edpb/members_en)
</div>
+1 -1
View File
@@ -43,7 +43,7 @@ To run AI locally, you need both an AI model and an AI client.
There are many permissively licensed models available to download. [Hugging Face](https://huggingface.co/models) is a platform that lets you browse, research, and download models in common formats like [GGUF](https://huggingface.co/docs/hub/en/gguf). Companies that provide good open-weights models include big names like Mistral, Meta, Microsoft, and Google. However, there are also many community models and [fine-tuned](https://en.wikipedia.org/wiki/Fine-tuning_(deep_learning)) models available. As mentioned above, quantized models offer the best balance between model quality and performance for those using consumer-grade hardware.
To help you choose a model that fits your needs, you can look at leaderboards and benchmarks. The most widely-used leaderboard is the community-driven [LM Arena](https://lmarena.ai). Additionally, the [OpenLLM Leaderboard](https://huggingface.co/spaces/open-llm-leaderboard/open_llm_leaderboard) focuses on the performance of open-weights models on common benchmarks like [MMLU-Pro](https://arxiv.org/abs/2406.01574). There are also specialized benchmarks which measure factors like [emotional intelligence](https://eqbench.com), ["uncensored general intelligence"](https://huggingface.co/spaces/DontPlanToEnd/UGI-Leaderboard), and [many others](https://nebuly.com/blog/llm-leaderboards).
To help you choose a model that fits your needs, you can look at leaderboards and benchmarks. The most widely-used leaderboard is the community-driven [LM Arena](https://lmarena.ai). Additionally, the [OpenLLM Leaderboard](https://huggingface.co/spaces/open-llm-leaderboard/open_llm_leaderboard) focuses on the performance of open-weights models on common benchmarks like [MMLU-Pro](https://arxiv.org/abs/2406.01574). There are also specialized benchmarks which measure factors like [emotional intelligence](https://eqbench.com), ["uncensored general intelligence"](https://huggingface.co/spaces/DontPlanToEnd/UGI-Leaderboard), and [many others](https://nebuly.com/blog/llm-leaderboards).
## AI Chat Clients
+3 -3
View File
@@ -33,7 +33,7 @@ robots: nofollow, max-snippet:-1, max-image-preview:large
We recommend a wide variety of Android apps throughout this site. The apps listed here are Android-exclusive and specifically enhance or replace key system functionality.
## Shelter
### Shelter
If your device is on Android 15 or greater, we recommend using the native [Private Space](../os/android-overview.md#private-space) feature instead, which provides nearly the same functionality without needing to place trust in and grant powerful permissions to a third-party app.
@@ -60,7 +60,7 @@ When using Shelter, you are placing complete trust in its developer, as Shelter
Shelter is recommended over [Insular](https://secure-system.gitlab.io/Insular) and [Island](https://github.com/oasisfeng/island) as it supports [contact search blocking](https://secure-system.gitlab.io/Insular/faq.html).
## Secure Camera
### Secure Camera
<small>Protects against the following threat(s):</small>
@@ -104,7 +104,7 @@ The image orientation metadata is not deleted. If you enable location (in Secure
</div>
## Secure PDF Viewer
### Secure PDF Viewer
<small>Protects against the following threat(s):</small>
+6 -4
View File
@@ -36,9 +36,11 @@ Note that a VPN does not add any security or encryption to your traffic between
## Should I use a VPN?
**Yes**, almost certainly. The advantages of a VPN include:
**Yes**, almost certainly. A VPN has many advantages, including:
1. Hiding your traffic from **only** your Internet Service Provider.
1. Hiding your IP from third-party websites and services, preventing IP based tracking.
1. Hiding your downloads (such as torrents) from your ISP and anti-piracy organizations.
1. Hiding your IP from third-party websites and services, helping you blend in and preventing IP based tracking.
1. Allowing you to bypass geo-restrictions on certain content.
VPNs can provide *some* of the same benefits Tor provides, such as hiding your IP from the websites you visit and geographically shifting your network traffic, and good VPN providers will not cooperate with e.g. legal authorities from oppressive regimes, especially if you choose a VPN provider outside your own jurisdiction.
@@ -57,7 +59,7 @@ You also should not trust a VPN to secure your connection to an unencrypted, HTT
Unless your VPN provider hosts the encrypted DNS servers themselves, **probably not**. Using DOH/DOT (or any other form of encrypted DNS) with third-party servers will simply add more entities to trust. Your VPN provider can still see which websites you visit based on the IP addresses and other methods. All this being said, there may be some advantages to enabling encrypted DNS in order to enable other security features in your browser, such as ECH. Browser technologies which are reliant on in-browser encrypted DNS are relatively new and not yet widespread, so whether they are relevant to you in particular is an exercise we will leave to you to research independently.
Another common reason encrypted DNS is recommended is that it prevents DNS manipulation attacks. However, your browser should already be checking for [TLS certificates](https://en.wikipedia.org/wiki/Transport_Layer_Security#Digital_certificates) with **HTTPS** and warn you about it. If you are not using **HTTPS**, then an adversary can still just modify anything other than your DNS queries and the end result will be little different.
Another common reason encrypted DNS is recommended is that it prevents DNS spoofing. However, your browser should already be checking for [TLS certificates](https://en.wikipedia.org/wiki/Transport_Layer_Security#Digital_certificates) with **HTTPS** and warn you about it. If you are not using **HTTPS**, then an adversary can still just modify anything other than your DNS queries and the end result will be little different.
## Should I use Tor *and* a VPN?
@@ -69,7 +71,7 @@ If you do use Tor then you are *probably* best off connecting to the Tor network
You should not use that feature: The primary advantage of using Tor is that you do not trust your VPN provider, which is negated when you use Tor nodes hosted by your VPN instead of connecting directly to Tor from your computer.
Currently, Tor only supports the TCP protocol. UDP (used by [WebRTC](https://en.wikipedia.org/wiki/WebRTC), [HTTP3/QUIC](https://en.wikipedia.org/wiki/HTTP/3), and other protocols), [ICMP](https://en.wikipedia.org/wiki/Internet_Control_Message_Protocol), and other packets will be dropped. To compensate for this, VPN providers typically will route all non-TCP packets through their VPN server (your first hop). This is the case with [ProtonVPN](https://protonvpn.com/support/tor-vpn). Additionally, when using this Tor over VPN setup, you do not have control over other important Tor features such as [Isolated Destination Address](https://whonix.org/wiki/Stream_Isolation) (using a different Tor circuit for every domain you visit).
Currently, Tor only supports the TCP protocol. UDP (used by [WebRTC](https://en.wikipedia.org/wiki/WebRTC), [HTTP3/QUIC](https://en.wikipedia.org/wiki/HTTP/3), and other protocols), [ICMP](https://en.wikipedia.org/wiki/Internet_Control_Message_Protocol), and other packets will be dropped. To compensate for this, VPN providers typically will route all non-TCP packets through their VPN server (your first hop). Additionally, when using this Tor over VPN setup, you do not have control over other important Tor features such as [Isolated Destination Address](https://whonix.org/wiki/Stream_Isolation) (using a different Tor circuit for every domain you visit).
The feature should be viewed as a *convenient* way to access hidden services on Tor, not to stay anonymous. For proper anonymity, use the actual [Tor Browser](../tor.md).
+1 -1
View File
@@ -27,7 +27,7 @@ The quickest, most effective, and most private way to remove yourself from peopl
You should search for your information on these sites first, and submit an opt-out request if your information is found. Removing your data from these providers typically removes your data from many smaller sites at the same time.
- Advanced Background Checks ([Search](https://advancedbackgroundchecks.com), [Opt-Out](https://www.advancedbackgroundchecks.com/opt-out))
- Advanced Background Checks ([Search](https://advancedbackgroundchecks.com), [Opt-Out](https://advancedbackgroundchecks.com/removal))
- BeenVerified ([Search](https://beenverified.com/app/optout/search), [Opt-Out](https://beenverified.com/app/optout/address-search))
- CheckPeople ([Search](https://checkpeople.com/do-not-sell-info), select *Remove Record* to opt-out)
- ClustrMaps ([Search](https://clustrmaps.com), [Opt-Out](https://clustrmaps.com/bl/opt-out))
-21
View File
@@ -42,27 +42,6 @@ You should **never** use blur to redact [text in images](https://bishopfox.com/b
</div>
## Metadata Cleaner
<div class="admonition recommendation" markdown>
![Metadata Cleaner logo](assets/img/data-redaction/metadatacleaner.svg){ align=right }
**Metadata Cleaner** is a graphical metadata removal tool for Linux powered by [MAT2](https://github.com/jvoisin/mat2).
[:octicons-home-16: Homepage](https://metadatacleaner.gitlab.io/metadatacleaner/){ .md-button .md-button--primary }
[:octicons-code-16:](https://gitlab.com/metadatacleaner/metadatacleaner/){ .card-link title="Source Code" }
[:octicons-heart-16:](https://gitlab.com/metadatacleaner/metadatacleaner/-/blob/main/CONTRIBUTING.md){ .card-link title="Contribute" }
<details class="downloads" markdown>
<summary>Downloads</summary>
- [:simple-flathub: Flathub](https://flathub.org/en/apps/io.gitlab.metadatacleaner.metadatacleaner)
</details>
</div>
## ExifEraser (Android)
<div class="admonition recommendation" markdown>
+9 -5
View File
@@ -102,7 +102,7 @@ Modifications other than adjusting this setting would make your fingerprint uniq
Note that while you can use Mullvad Browser with any VPN provider, other people on that VPN must also be using Mullvad Browser for this "crowd" to exist, something which is more likely on Mullvad VPN compared to other providers. Mullvad Browser does not have built-in VPN connectivity, nor does it check whether you are using a VPN before browsing; your VPN connection has to be configured and managed separately.
Mullvad Browser comes with the *uBlock Origin* and *NoScript* browser extensions pre-installed. While we typically discourage adding *additional* [browser extensions](browser-extensions.md), these extensions that come pre-installed with the browser should **not** be removed or configured outside their default values, because doing so would noticeably make your browser fingerprint distinct from other Mullvad Browser users. It also comes pre-installed with the Mullvad Browser Extension, which *can* be safely removed without [impacting](https://mullvad.net/en/help/tag/mullvad-browser#112) your browser fingerprint if you would like, but is also safe to keep even if you don't use Mullvad VPN.
Mullvad Browser comes with the *uBlock Origin* and *NoScript* browser extensions pre-installed. While we typically discourage adding *additional* [browser extensions](browser-extensions.md), these extensions that come pre-installed with the browser should **not** be removed or configured outside their default values, because doing so would noticeably make your browser fingerprint distinct from other Mullvad Browser users. It also comes pre-installed with the Mullvad Browser Extension, which *can* be safely removed without impacting your browser fingerprint if you would like, but is also safe to keep even if you don't use Mullvad VPN.
### Private Browsing Mode
@@ -155,15 +155,13 @@ Search suggestion features may not be available in your region.
Search suggestions send everything you type in the address bar to the default search engine, regardless of whether you submit an actual search. Disabling search suggestions allows you to more precisely control what data you send to your search engine provider.
##### Firefox Suggest
##### Firefox Suggest (US only)
[Firefox Suggest](https://support.mozilla.org/kb/firefox-suggest) is a feature similar to search suggestions. We recommend disabling it for the same reason we recommend disabling search suggestions. If you don't see these options under the **Address Bar** header, you do not have the new experience and can ignore these changes.
[Firefox Suggest](https://support.mozilla.org/kb/firefox-suggest) is a feature similar to search suggestions which is only available in the US. We recommend disabling it for the same reason we recommend disabling search suggestions. If you don't see these options under the **Address Bar** header, you do not have the new experience and can ignore these changes.
- [ ] Uncheck **Suggestions from Firefox**
- [ ] Uncheck **Suggestions from sponsors**
> According to Mozilla, ["Certain parts of Firefox Suggest are currently available only in some regions."](https://support.mozilla.org/kb/firefox-suggest)
#### Privacy & Security
##### Enhanced Tracking Protection
@@ -197,6 +195,12 @@ Additionally, the Mozilla Accounts service collects [some technical data](https:
1. Open your [profile settings on accounts.firefox.com](https://accounts.firefox.com/settings#data-collection)
2. Uncheck **Data Collection and Use** > **Help improve Firefox Accounts**
##### Website Advertising Preferences
- [ ] Uncheck **Allow websites to perform privacy-preserving ad measurement**
With the release of Firefox 128, a new setting for [privacy-preserving attribution](https://support.mozilla.org/kb/privacy-preserving-attribution) (PPA) has been added and [enabled by default](https://blog.privacyguides.org/2024/07/14/mozilla-disappoints-us-yet-again-2). PPA allows advertisers to use your web browser to measure the effectiveness of web campaigns, instead of using traditional JavaScript-based tracking. We consider this behavior to be outside the scope of a user agent's responsibilities, and the fact that it is disabled by default in Arkenfox is an additional indicator for disabling this feature.
##### HTTPS-Only Mode
- [x] Select **Enable HTTPS-Only Mode in all windows**
+1 -3
View File
@@ -52,8 +52,6 @@ openSUSE Tumbleweed uses [Btrfs](https://en.wikipedia.org/wiki/Btrfs) and [Snapp
</div>
As with the recommendation to avoid X11 in our [criteria](#criteria) for Linux distributions, we recommend avoiding desktop environments that support only the legacy X11 window system (for example, Xfce). Currently, KDE Plasma defaults to X11, but Wayland is supported.
Tumbleweed follows a rolling release model where each update is released as a snapshot of the distribution. When you upgrade your system, a new snapshot is downloaded. Each snapshot is run through a series of automated tests by [openQA](https://openqa.opensuse.org) to ensure its quality.
### Arch Linux
@@ -126,7 +124,7 @@ NixOS is an independent distribution based on the Nix package manager with a foc
NixOSs package manager keeps every version of every package in a different folder in the **Nix store**. Due to this you can have different versions of the same package installed on your system. After the package contents have been written to the folder, the folder is made read-only.
NixOS also provides atomic updates. It first downloads (or builds) the packages and files for the new system generation and then switches to it. There are different ways to switch to a new generation: you can tell NixOS to activate it after reboot, or you can switch to it at runtime. You can also *test* the new generation by switching to it at runtime, but not setting it as the current system generation. If something breaks during the update process, you can just reboot to return to a working version of your system.
NixOS also provides atomic updates. It first downloads (or builds) the packages and files for the new system generation and then switches to it. There are different ways to switch to a new generation: you can tell NixOS to activate it after reboot, or you can switch to it at runtime. You can also *test* the new generation by switching to it at runtime, but not setting it as the current system generation. If something in the update process breaks, you can just reboot and automatically and return to a working version of your system.
The Nix package manager uses a purely functional language—which is also called Nix—to define packages.
+1 -1
View File
@@ -24,7 +24,7 @@ These are our favorite public DNS resolvers based on their privacy and security
| [**Cloudflare**](https://developers.cloudflare.com/1.1.1.1/setup) | Cleartext <br>DoH/3 <br>DoT | Anonymized[^2] | No | Based on server choice. | No [:octicons-link-external-24:](https://community.cloudflare.com/t/requesting-1-1-1-1-signed-profiles-for-apple/571846) |
| [**Control D Free DNS**](https://controld.com/free-dns) | Cleartext <br>DoH/3 <br>DoT <br>DoQ | No[^3] | No | Based on server choice. | Yes <br>[:simple-apple: iOS](https://docs.controld.com/docs/ios-platform) <br>[:material-apple-finder: macOS](https://docs.controld.com/docs/macos-platform#manual-setup-profile) |
| [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH <br>DoT | No[^4] | No | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) |
| [**Quad9**](https://quad9.net) | Cleartext <br>DoH/3 <br>DoT <br>DoQ <br>DNSCrypt | Anonymized[^5] | Optional | Based on server choice. Malware blocking is included by default. | Yes <br>[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted)) <br>[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) |
| [**Quad9**](https://quad9.net) | Cleartext <br>DoH <br>DoT <br>DNSCrypt | Anonymized[^5] | Optional | Based on server choice. Malware blocking is included by default. | Yes <br>[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted)) <br>[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) |
[^1]:
AdGuard stores aggregated performance metrics of their DNS servers, namely the number of complete requests to a particular server, the number of blocked requests, and the speed of processing requests. They also keep and store the database of domains requested within the last 24 hours.
+1 -1
View File
@@ -77,7 +77,7 @@ These options can be found in :material-menu: → **Settings** → **Privacy & S
##### Telemetry
- [ ] Uncheck **Allow Thunderbird to send technical and interaction data to Mozilla**
- [ ] Uncheck **Allow Thunderbird to send technical and interaction data to Mozilla**
#### Thunderbird-user.js (advanced)
+9 -9
View File
@@ -158,8 +158,8 @@ Accounts start with up to 2 GB storage, which can be upgraded as needed.
</div>
#### :material-check:{ .pg-green } Custom Domains and Aliases
z
Mailbox Mail lets you use your own domain, and they support [catch-all](https://kb.mailbox.org/en/private/custom-domains/use-your-own-domain-with-catch-all/) addresses. Mailbox Mail also supports [sub-addressing](https://kb.mailbox.org/en/private/e-mail/what-is-an-alias-and-how-do-i-use-it/), which is useful if you don't want to purchase a domain.
Mailbox Mail lets you use your own domain, and they support [catch-all](https://kb.mailbox.org/en/private/custom-domains/how-to-set-up-a-catch-all-alias-with-a-custom-domain-name) addresses. Mailbox Mail also supports [sub-addressing](https://kb.mailbox.org/en/private/account-article/what-is-an-alias-and-how-do-i-use-it), which is useful if you don't want to purchase a domain.
#### :material-check:{ .pg-green } Private Payment Methods
@@ -167,29 +167,29 @@ Mailbox Mail doesn't accept any cryptocurrencies as a result of their payment pr
#### :material-check:{ .pg-green } Account Security
Mailbox Mail supports [two-factor authentication](https://kb.mailbox.org/en/private/security-and-privacy/how-to-use-two-factor-authentication-2fa/) for their webmail only. You can use either TOTP or a [YubiKey](security-keys.md#yubikey) via the [YubiCloud](https://yubico.com/products/services-software/yubicloud). Web standards such as [WebAuthn](basics/multi-factor-authentication.md#fido-fast-identity-online) are not yet supported.
Mailbox Mail supports [two-factor authentication](https://kb.mailbox.org/en/private/account-article/how-to-use-two-factor-authentication-2fa) for their webmail only. You can use either TOTP or a [YubiKey](security-keys.md#yubikey) via the [YubiCloud](https://yubico.com/products/services-software/yubicloud). Web standards such as [WebAuthn](basics/multi-factor-authentication.md#fido-fast-identity-online) are not yet supported.
#### :material-information-outline:{ .pg-blue } Data Security
Mailbox Mail allows for encryption of incoming mail using their [encrypted mailbox](https://kb.mailbox.org/en/private/encryption/your-encrypted-mailbox/). New messages that you receive will then be immediately encrypted with your public key.
Mailbox Mail allows for encryption of incoming mail using their [encrypted mailbox](https://kb.mailbox.org/en/private/e-mail-article/your-encrypted-mailbox). New messages that you receive will then be immediately encrypted with your public key.
However, [Open-Xchange](https://en.wikipedia.org/wiki/Open-Xchange), the software platform used by Mailbox Mail, [does not support](https://kb.mailbox.org/en/business/security-privacy-article/encryption-of-calendar-and-address-book/) the encryption of your address book and calendar. A [standalone option](calendar.md) may be more appropriate for that data.
However, [Open-Xchange](https://en.wikipedia.org/wiki/Open-Xchange), the software platform used by Mailbox Mail, [does not support](https://kb.mailbox.org/en/private/security-privacy-article/encryption-of-calendar-and-address-book) the encryption of your address book and calendar. A [standalone option](calendar.md) may be more appropriate for that data.
#### :material-check:{ .pg-green } Email Encryption
Mailbox Mail has [integrated encryption](https://kb.mailbox.org/en/private/encryption/how-can-e-mails-be-encrypted-with-pgp/) in their webmail, which simplifies sending messages to people with public OpenPGP keys. They also allow [remote recipients to decrypt an email](https://kb.mailbox.org/en/private/encryption/my-recipient-does-not-use-pgp/) on Mailbox Mail's servers. This feature is useful when the remote recipient does not have OpenPGP and cannot decrypt a copy of the email in their own mailbox.
Mailbox Mail has [integrated encryption](https://kb.mailbox.org/en/private/e-mail-article/send-encrypted-e-mails-with-guard) in their webmail, which simplifies sending messages to people with public OpenPGP keys. They also allow [remote recipients to decrypt an email](https://kb.mailbox.org/en/private/e-mail-article/my-recipient-does-not-use-pgp) on Mailbox Mail's servers. This feature is useful when the remote recipient does not have OpenPGP and cannot decrypt a copy of the email in their own mailbox.
Mailbox Mail also supports the discovery of public keys via HTTP from their WKD. This allows people outside of Mailbox Mail to find the OpenPGP keys of Mailbox Mail accounts easily for cross-provider E2EE. This only applies to email addresses ending in one of Mailbox Mail's own domains, like `@mailbox.org`. If you use a custom domain, you must [configure WKD](basics/email-security.md#what-is-the-web-key-directory-standard) separately.
#### :material-information-outline:{ .pg-blue } Account Termination
Your account will be set to a restricted user account when your contract ends. It will be irrevocably deleted after [30 days](https://kb.mailbox.org/en/en/private/account/reactivate-a-deleted-account/).
Your account will be set to a restricted user account when your contract ends. It will be irrevocably deleted after [30 days](https://kb.mailbox.org/en/private/payment-article/what-happens-at-the-end-of-my-contract).
#### :material-information-outline:{ .pg-blue } Additional Functionality
You can access your Mailbox Mail account via IMAP/SMTP using their [.onion service](https://kb.mailbox.org/en/en/private/security-privacy/using-the-tor-exit-node-from-mailbox/). However, their webmail interface cannot be accessed via their .onion service, and you may experience TLS certificate errors.
You can access your Mailbox Mail account via IMAP/SMTP using their [.onion service](https://kb.mailbox.org/en/private/faq-article/the-tor-exit-node-of-mailbox-org). However, their webmail interface cannot be accessed via their .onion service, and you may experience TLS certificate errors.
All accounts come with limited cloud storage that [can be encrypted](https://kb.mailbox.org/en/private/drive/encrypt-files-on-your-drive/). Mailbox Mail also offers the alias [@secure.mailbox.org](https://kb.mailbox.org/en/business/e-mail-article/ensuring-e-mails-are-sent-securely/), which enforces the TLS encryption on the connection between mail servers, otherwise the message will not be sent at all. Mailbox Mail also supports [Exchange ActiveSync](https://en.wikipedia.org/wiki/Exchange_ActiveSync) in addition to standard access protocols like IMAP and POP3.
All accounts come with limited cloud storage that [can be encrypted](https://kb.mailbox.org/en/private/drive-article/encrypt-files-on-your-drive). Mailbox Mail also offers the alias [@secure.mailbox.org](https://kb.mailbox.org/en/private/e-mail-article/ensuring-e-mails-are-sent-securely), which enforces the TLS encryption on the connection between mail servers, otherwise the message will not be sent at all. Mailbox Mail also supports [Exchange ActiveSync](https://en.wikipedia.org/wiki/Exchange_ActiveSync) in addition to standard access protocols like IMAP and POP3.
Mailbox Mail has a digital legacy feature for all plans. You can choose whether you want any of your data to be passed to heirs, providing that they apply and provide your testament. Alternatively, you can nominate a person by name and address.
+28
View File
@@ -45,6 +45,34 @@ Redlib is useful if you want to disable JavaScript in your browser, such as [Tor
</div>
## TikTok
### ProxiTok
<div class="admonition recommendation" markdown>
![ProxiTok logo](assets/img/frontends/proxitok.svg){ align=right }
**ProxiTok** is an open-source frontend to the [TikTok](https://tiktok.com) website that is also self-hostable.
There are a number of public instances, with some that offer a [Tor](tor.md) onion service or an [I2P](alternative-networks.md#i2p-the-invisible-internet-project) eepsite.
[:octicons-repo-16: Repository](https://github.com/pablouser1/ProxiTok){ .md-button .md-button--primary }
[:octicons-server-16:](https://github.com/pablouser1/ProxiTok/wiki/Public-instances){ .card-link title="Public Instances" }
[:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki){ .card-link title="Documentation" }
[:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" }
</details>
</div>
<div class="admonition tip" markdown>
<p class="admonition-title">Tip</p>
ProxiTok is useful if you want to disable JavaScript in your browser, such as [Tor Browser](tor.md#tor-browser) on the Safest security level.
</div>
## YouTube
**Note:** YouTube has gradually rolled out changes to its video player and API that have thwarted some of the methods used by third-party frontends for extracting YouTube data. If you experience reliability issues with one YouTube frontend, consider trying out another that uses a different extraction method.
+1 -21
View File
@@ -62,26 +62,6 @@ Popular menstrual trackers like [Flo](https://techcrunch.com/2021/01/13/flo-gets
</div>
### Apple Health
<div class="admonition recommendation" markdown>
![Apple logo](assets/img/health-and-wellness/apple-health.webp#only-light){ align=right }![Apple logo](assets/img/health-and-wellness/apple-health-dark.webp#only-dark){ align=right }
Apple Health is one of the default apps installed on iOS devices. It includes many health and wellness features (see [Health Records](#apple-health-records)), including menstrual cycle tracking. It also uses gender-neutral language. Apple Health always uses end-to-end encryption when syncing across multiple devices.
[:octicons-home-16: Homepage](https://apple.com/health){ .md-button .md-button--primary }
[:octicons-eye-16:](https://apple.com/legal/privacy/consumer-health-personal-data/en-ww){ .card-link title="Privacy Policy" }
<details class="downloads" markdown>
<summary>Downloads</summary>
- [:simple-appstore: App Store](https://apps.apple.com/app/apple-health/id1242545199)
</details>
</div>
## Fitness Trackers
These general purpose apps can do everything from counting steps and tracking sleep to measuring your heartbeat.
@@ -141,7 +121,7 @@ These apps help you collect and manage personal health data and share it with he
![Apple logo](assets/img/health-and-wellness/apple-health.webp#only-light){ align=right }![Apple logo](assets/img/health-and-wellness/apple-health-dark.webp#only-dark){ align=right }
**Apple Health Records** is a built-in feature within [Apple Health](#apple-health) that allows you to view, store, and share your health records.
**Apple Health Records** is a built-in feature within [Apple Health](https://apple.com/health) that allows you to view, store, and share your health records. It shares the security and privacy features of [Apple Fitness](#apple-fitness).
[:octicons-home-16: Homepage](https://apple.com/health){ .md-button .md-button--primary }
[:octicons-eye-16:](https://apple.com/legal/privacy/consumer-health-personal-data/en-ww){ .card-link title="Privacy Policy" }
+94 -23
View File
@@ -24,6 +24,18 @@ schema:
subjectOf:
"@type": WebPage
url: "./"
-
"@context": http://schema.org
"@type": MobileApplication
name: Cromite
image: /assets/img/browsers/cromite.svg
url: https://cromite.org
applicationCategory: Web Browser
operatingSystem:
- Android
subjectOf:
"@type": WebPage
url: "./"
-
"@context": http://schema.org
"@type": MobileApplication
@@ -77,11 +89,11 @@ Tor Browser is the only way to truly browse the internet anonymously. When you u
=== "Android"
These options can be found in :material-dots-vertical: → **Settings****Brave Shields & privacy**.
These options can be found in :material-menu: → **Settings****Brave Shields & privacy**.
=== "iOS"
These options can be found in :material-dots-horizontal: → **All Settings****Shields & Privacy**.
These options can be found in :fontawesome-solid-ellipsis: → **Settings****Shields & Privacy**.
#### Brave shields global defaults
@@ -109,7 +121,7 @@ Shields' options can be downgraded on a per-site basis as needed, but by default
</details>
- [x] Select **Site Tabs Closed** under *Auto Shred*
- [x] Select **Forget me when I close this site**
</div>
@@ -138,16 +150,24 @@ Shields' options can be downgraded on a per-site basis as needed, but by default
1. This option disables JavaScript, which will break a lot of sites. To unbreak them, you can set exceptions on a per-site basis by tapping on the Shield icon in the address bar and unchecking this setting under *Advanced controls*.
##### Clear browsing data (Android only)
- [x] Select **Clear data on exit**
##### Social Media Blocking (Android only)
- [ ] Uncheck all social media components
#### Other privacy settings
=== "Android"
<div class="annotate" markdown>
- [x] (Optional) Select **No protection** under *Safe Browsing* (1)
- [x] Select **Disable non-proxied UDP** under [*WebRTC IP handling policy*](https://support.brave.com/hc/articles/360017989132-How-do-I-change-my-Privacy-Settings#webrtc)
- [x] (Optional) Select **No protection** under *Safe Browsing* (1)
- [ ] Uncheck **Allow sites to check if you have payment methods saved**
- [x] Select **Do not speed up sites with Brave's V8 engine but make Brave slightly more resistant to attacks**
- [ ] Uncheck **Javascript optimization & security** under the setting with the same name
- [x] Select **Close tabs on exit**
- [ ] Uncheck **Allow privacy-preserving product analytics (P3A)**
- [ ] Uncheck **Automatically send diagnostic reports**
@@ -162,38 +182,89 @@ Shields' options can be downgraded on a per-site basis as needed, but by default
- [ ] Uncheck **Allow Privacy-Preserving Product Analytics (P3A)**
- [ ] Uncheck **Automatically send daily usage ping to Brave**
#### Leo AI
#### Leo
=== "Android"
These options can be found in :material-menu: → **Settings****Leo**.
These options can be found in :material-dots-vertical: → **Settings****Leo AI**.
<div class="annotate" markdown>
- [ ] Uncheck **Show autocomplete suggestions in address bar**
- [ ] Uncheck **Show autocomplete suggestions in address bar** (1)
=== "iOS"
</div>
These options can be found in :material-dots-horizontal: → **All Settings****Leo AI**.
- [ ] Uncheck **Show In Quick Search Engine Bar**
1. This option is not present in Brave's iOS app.
#### Search engines
=== "Android"
These options can be found in :material-menu:/:fontawesome-solid-ellipsis: → **Settings****Search engines**.
These options can be found in :material-dots-vertical: → **Settings****Search engines**.
- [ ] Uncheck **Show search suggestions**
=== "iOS"
These options can be found in :material-dots-horizontal: → **All Settings****Search engines**.
- [ ] Uncheck **Show In Quick Search Engine Bar**
- [ ] Uncheck **Show search suggestions**
#### Brave Sync
[Brave Sync](https://support.brave.com/hc/articles/360059793111-Understanding-Brave-Sync) allows your browsing data (history, bookmarks, etc.) to be accessible on all your devices without requiring an account and protects it with E2EE.
## Cromite (Android)
<div class="admonition recommendation" markdown>
![Cromite logo](assets/img/browsers/cromite.svg){ align=right }
**Cromite** is a Chromium-based browser with built-in ad blocking, fingerprinting protections, and other [privacy and security enhancements](https://github.com/uazo/cromite/blob/master/docs/FEATURES.md). It is a fork of the discontinued **Bromite** browser.
[:octicons-home-16: Homepage](https://cromite.org){ .md-button .md-button--primary }
[:octicons-eye-16:](https://github.com/uazo/cromite/blob/master/docs/PRIVACY_POLICY.md){ .card-link title="Privacy Policy" }
[:octicons-info-16:](https://github.com/uazo/cromite?tab=readme-ov-file#docs){ .card-link title="Documentation" }
[:octicons-code-16:](https://github.com/uazo/cromite){ .card-link title="Source Code" }
<details class="downloads" markdown>
<summary>Downloads</summary>
- [:simple-android: F-Droid](https://cromite.org/fdroid/repo/?fingerprint=49F37E74DEE483DCA2B991334FB5A0200787430D0B5F9A783DD5F13695E9517B)
- [:simple-github: GitHub](https://github.com/uazo/cromite/releases/latest)
</details>
</div>
### Recommended Configuration
These options can be found in :material-menu: → :gear: **Settings****Privacy and security**.
#### Browsing data
- [x] Select **Close all open tabs on exit**
#### Incognito mode
- [x] Select **Open external links in incognito**
#### Security
- [x] Select **Always use secure connections**
This prevents you from unintentionally connecting to a website in plain-text HTTP. HTTP is extremely uncommon nowadays, so this should have little to no impact on your day-to-day browsing.
#### Adblock Plus settings
These options can be found in :material-menu: → :gear: **Settings****Adblock Plus settings**.
Cromite contains a customized version of Adblock Plus with EasyList enabled by default, as well as options to select more filter lists within the **Filter lists** menu.
Using extra lists will make you stand out from other Cromite users and may also increase attack surface if a malicious rule is added to one of the lists you use.
- [x] (Optional) Select **Enable anti-circumvention and snippets**
This setting adds an additional Adblock Plus list that may increase the effectiveness of Cromite's content blocking. The warnings about standing out and potentially increasing attack surface apply.
#### Legacy Adblock settings
These options can be found in :material-menu: → :gear: **Settings****Legacy Adblock settings**.
- [ ] Uncheck the autoupdate setting
This disables update checks for the unmaintained Bromite adblock filter.
## Safari (iOS)
On iOS, any app that can browse the web is [restricted](https://developer.apple.com/app-store/review/guidelines) to using an Apple-provided [WebKit framework](https://developer.apple.com/documentation/webkit), so a browser like [Brave](#brave) does not use the Blink engine (the core component of Chromium) like its counterparts on other operating systems.
+5 -4
View File
@@ -1,7 +1,7 @@
---
title: Multifactor Authentication
icon: material/two-factor-authentication
description: These tools assist you with securing your internet accounts with multifactor authentication without sending your secrets to a third party.
description: These tools assist you with securing your internet accounts with multifactor authentication without sending your secrets to a third-party.
cover: multi-factor-authentication.webp
---
<small>Protects against the following threat(s):</small>
@@ -27,8 +27,9 @@ We highly recommend that you use mobile TOTP apps instead of desktop alternative
**Ente Auth** is a free and open-source app which stores and generates TOTP tokens. It can be used with an online account to back up and sync your tokens across your devices (and access them via a web interface) in a secure, end-to-end encrypted fashion. It can also be used offline on a single device with no account necessary.
[:octicons-home-16: Homepage](https://ente.com/auth){ .md-button .md-button--primary } [:octicons-eye-16:](https://ente.com/privacy){ .card-link title="Privacy Policy" }
[:octicons-info-16:](https://ente.com/help/auth){ .card-link title="Documentation" }
[:octicons-home-16: Homepage](https://ente.io/auth){ .md-button .md-button--primary }
[:octicons-eye-16:](https://ente.io/privacy){ .card-link title="Privacy Policy" }
[:octicons-info-16:](https://help.ente.io/auth){ .card-link title="Documentation" }
[:octicons-code-16:](https://github.com/ente-io/ente/tree/main/auth#readme){ .card-link title="Source Code" }
<details class="downloads" markdown>
@@ -43,7 +44,7 @@ We highly recommend that you use mobile TOTP apps instead of desktop alternative
</div>
The server-side source code and infrastructure which underpins Ente Auth (if used with an online account) underwent an audit by [Cure53](https://ente.com/blog/cern-audit) in October 2025.
The server-side source code and infrastructure which underpins Ente Auth (if used with an online account) underwent an audit by [Cure53](https://ente.io/blog/cern-audit) in October 2025.
## Aegis Authenticator (Android)
+1 -1
View File
@@ -26,7 +26,7 @@ This section is a work in progress, because it takes considerably more time and
## Privacy Notes
Microsoft Windows, particularly those versions aimed at consumers like the **Home** version often don't prioritize privacy-friendly features by [default](https://theguardian.com/technology/2015/jul/31/windows-10-microsoft-faces-criticism-over-privacy-default-settings). As a result we often see more [data collection](https://en.wikipedia.org/wiki/Criticism_of_Microsoft#Telemetry_and_data_collection) than necessary, without any real warnings that this is the default behavior. In an attempt to compete with Google in the advertising space, [Cortana](https://en.wikipedia.org/wiki/Cortana_(virtual_assistant)) has included unique identifiers such as an "advertising ID" in order to correlate usage and assist advertisers in targeted advertising. At launch, telemetry could not be disabled in non-enterprise editions of Windows 10. It still cannot be disabled, but Microsoft added the ability to [reduce](https://extremetech.com/computing/243079-upcoming-windows-update-reduces-spying-microsoft-still-mum-data-collects) the data that is sent to them.
Microsoft Windows, particularly those versions aimed at consumers like the **Home** version often don't prioritize privacy-friendly features by [default](https://theguardian.com/technology/2015/jul/31/windows-10-microsoft-faces-criticism-over-privacy-default-settings). As a result we often see more [data collection](https://en.wikipedia.org/wiki/Criticism_of_Microsoft#Telemetry_and_data_collection) than necessary, without any real warnings that this is the default behavior. In an attempt to compete with Google in the advertising space, [Cortana](https://en.wikipedia.org/wiki/Cortana_(virtual_assistant)) has included unique identifiers such as an "advertising ID" in order to correlate usage and assist advertisers in targeted advertising. At launch, telemetry could not be disabled in non-enterprise editions of Windows 10. It still cannot be disabled, but Microsoft added the ability to [reduce](https://extremetech.com/computing/243079-upcoming-windows-update-reduces-spying-microsoft-still-mum-data-collects) the data that is sent to them.
With Windows 11 there are a number of restrictions or defaults such as:
+8 -8
View File
@@ -21,9 +21,9 @@ Most cloud **photo management solutions** like Google Photos, Flickr, and Amazon
The free plan offers 10 GB of storage as long as you use the service at least once a year.
[:octicons-home-16: Homepage](https://ente.com){ .md-button .md-button--primary }
[:octicons-eye-16:](https://ente.com/privacy){ .card-link title="Privacy Policy" }
[:octicons-info-16:](https://ente.com/faq){ .card-link title="Documentation" }
[:octicons-home-16: Homepage](https://ente.io){ .md-button .md-button--primary }
[:octicons-eye-16:](https://ente.io/privacy){ .card-link title="Privacy Policy" }
[:octicons-info-16:](https://ente.io/faq){ .card-link title="Documentation" }
[:octicons-code-16:](https://github.com/ente-io/ente){ .card-link title="Source Code" }
<details class="downloads" markdown>
@@ -32,17 +32,17 @@ The free plan offers 10 GB of storage as long as you use the service at least o
- [:simple-googleplay: Google Play](https://play.google.com/store/apps/details?id=io.ente.photos)
- [:simple-appstore: App Store](https://apps.apple.com/app/id1542026904)
- [:simple-github: GitHub](https://github.com/ente-io/ente/releases?q=photos)
- [:simple-android: Android](https://ente.com/download)
- [:fontawesome-brands-windows: Windows](https://ente.com/download)
- [:simple-apple: macOS](https://ente.com/download)
- [:simple-linux: Linux](https://ente.com/download)
- [:simple-android: Android](https://ente.io/download)
- [:fontawesome-brands-windows: Windows](https://ente.io/download)
- [:simple-apple: macOS](https://ente.io/download)
- [:simple-linux: Linux](https://ente.io/download)
- [:octicons-browser-16: Web](https://web.ente.io)
</details>
</div>
The server-side source code and infrastructure which underpins Ente Photos underwent an audit by [Cure53](https://ente.com/blog/cern-audit) in October 2025. Previous audits were completed by [Cure53](https://ente.com/blog/cryptography-audit) in March 2023 and by [Fallible](https://ente.com/reports/Fallible-Audit-Report-19-04-2023.pdf) in April 2023.
The server-side source code and infrastructure which underpins Ente Photos underwent an audit by [Cure53](https://ente.io/blog/cern-audit) in October 2025. Previous audits were completed by [Cure53](https://ente.io/blog/cryptography-audit) in March 2023 and by [Fallible](https://ente.io/reports/Fallible-Audit-Report-19-04-2023.pdf) in April 2023.
## Criteria
+1 -1
View File
@@ -67,7 +67,7 @@ The protocol was independently [audited](https://eprint.iacr.org/2016/1013.pdf)
### Molly (Android)
If you use Android and your threat model requires protecting against [:material-target-account: Targeted Attacks](basics/common-threats.md#attacks-against-specific-individuals){ .pg-red } you may consider using this alternative app, which features a number of security and usability improvements, to access the Signal network.
If you use Android and your threat model requires protecting against [:material-target-account: Targeted Attacks](basics/common-threats.md#attacks-against-specific-individuals){ .pg-red } you may consider using this alternative app, which features a number of security and usability improvements, to access the Signal network.
<div class="admonition recommendation" markdown>
+2
View File
@@ -55,6 +55,8 @@ Brave Search is the default search engine for the [Brave Browser](desktop-browse
</div>
If you use Brave Search while logged in to a Premium account, there is a risk of Brave correlating search queries with your account.
We recommend you disable [Anonymous usage metrics](https://search.brave.com/help/usage-metrics) as it is enabled by default and can be disabled within settings.
### DuckDuckGo
+9 -2
View File
@@ -113,6 +113,13 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r
[:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" }
[:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" }
- ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok)
---
[:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" }
[:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" }
- ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious)
---
@@ -164,8 +171,8 @@ Tool recommendations in other categories of the website also provide a self-host
---
[:octicons-home-16:](https://ente.com){ .card-link title="Homepage" }
[:octicons-info-16:](https://ente.com/help/self-hosting/){ .card-link title="Admin Documentation" }
[:octicons-home-16:](https://ente.io){ .card-link title="Homepage" }
[:octicons-info-16:](https://help.ente.io/self-hosting){ .card-link title="Admin Documentation" }
[:octicons-code-16:](https://github.com/ente-io/ente){ .card-link title="Source Code" }
- ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad)
+9 -14
View File
@@ -92,6 +92,14 @@ For more details about each project, why they were chosen, and additional tips o
- [Brave Desktop Review :material-arrow-right-drop-circle:](desktop-browsers.md#brave)
- [Brave Mobile Review :material-arrow-right-drop-circle:](mobile-browsers.md#brave)
- ![Cromite logo](assets/img/browsers/cromite.svg){ .lg .middle .twemoji } **Cromite (Android)**
---
**Cromite** is a Chromium-based Android browser with built-in ad-blocking and [privacy enhancements](https://github.com/uazo/cromite/blob/master/docs/FEATURES.md). It is a fork of the popular, now-discontinued Bromite browser.
- [Read Full Review :material-arrow-right-drop-circle:](mobile-browsers.md#cromite-android)
- ![Safari logo](assets/img/browsers/safari.svg){ .lg .middle .twemoji } **Safari (iOS)**
---
@@ -147,18 +155,6 @@ If you're looking for added **security**, you should always ensure you're connec
<div class="grid cards" markdown>
- ![Proton VPN logo](assets/img/vpn/protonvpn.svg){ .lg .middle .twemoji } **Proton VPN**
---
- [x] **112+ Countries**
- [x] WireGuard Support
- [x] Cash Payments
- [x] Partial Port Forwarding Support
- [ ] No IPv6
[Read Full Review :material-arrow-right-drop-circle:](vpn.md#proton-vpn)
- ![IVPN logo](assets/img/vpn/mini/ivpn.svg){ .lg .middle .twemoji } **IVPN**
---
@@ -377,7 +373,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b
<div class="grid cards" markdown>
- ![MAT2 logo](assets/img/data-redaction/mat2.svg){ .twemoji loading=lazy } [MAT2](data-redaction.md#mat2)
- ![Metadata Cleaner](assets/img/data-redaction/metadatacleaner.svg){ .twemoji loading-lazy } [Metadata Cleaner](data-redaction.md#metadata-cleaner)
- ![ExifEraser logo](assets/img/data-redaction/exiferaser.svg){ .twemoji loading=lazy } [ExifEraser (Android)](data-redaction.md#exiferaser-android)
- ![ExifTool logo](assets/img/data-redaction/exiftool.png){ .twemoji loading=lazy } [ExifTool (CLI)](data-redaction.md#exiftool-cli)
@@ -449,6 +444,7 @@ For encrypting your OS drive, we typically recommend using the encryption tool y
<div class="grid cards" markdown>
- ![Redlib logo](assets/img/frontends/redlib.svg){ .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib)
- ![ProxiTok logo](assets/img/frontends/proxitok.svg){ .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok)
- ![FreeTube logo](assets/img/frontends/freetube.svg){ .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube)
- ![LibreTube logo](assets/img/frontends/libretube.svg#only-light){ .twemoji loading=lazy }![LibreTube logo](assets/img/frontends/libretube-dark.svg#only-dark){ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android)
- ![NewPipe logo](assets/img/frontends/newpipe.svg){ .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android)
@@ -465,7 +461,6 @@ For encrypting your OS drive, we typically recommend using the encryption tool y
- ![Drip logo](assets/img/health-and-wellness/drip.png){ .twemoji loading=lazy } [Drip](health-and-wellness.md#drip)
- ![Euki logo](assets/img/health-and-wellness/euki.svg){ .twemoji loading=lazy } [Euki](health-and-wellness.md#euki)
- ![Apple Health logo](assets/img/health-and-wellness/apple-health.webp#only-light){ .twemoji loading=lazy } ![Apple Health logo](assets/img/health-and-wellness/apple-health-dark.webp#only-dark){ .twemoji loading=lazy } [Apple Health](health-and-wellness.md#apple-health)
- ![Apple Fitness logo](assets/img/health-and-wellness/apple-fitness.webp){ .twemoji loading=lazy } [Apple Fitness](health-and-wellness.md#apple-fitness)
- ![Gadgetbridge logo](assets/img/health-and-wellness/gadgetbridge.svg#only-light){ .twemoji loading=lazy }![Gadgetbridge logo](assets/img/health-and-wellness/gadgetbridge-dark.svg#only-dark){ .twemoji loading=lazy } [Gadgetbridge](health-and-wellness.md#gadgetbridge)
- ![Apple Health logo](assets/img/health-and-wellness/apple-health.webp#only-light){ .twemoji loading=lazy } ![Apple Health logo](assets/img/health-and-wellness/apple-health-dark.webp#only-dark){ .twemoji loading=lazy } [Apple Health Records](health-and-wellness.md#apple-health-records)
+4 -100
View File
@@ -12,7 +12,7 @@ global:
- [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown }
If you're looking for additional *privacy* from your ISP or on a public Wi-Fi network, a **VPN** may be the solution for you.
If you're looking for additional *privacy* from your ISP, on a public Wi-Fi network, or while torrenting files, a **VPN** may be the solution for you.
<div class="admonition danger" markdown>
<p class="admonition-title">VPNs do not provide anonymity</p>
@@ -33,104 +33,9 @@ Our recommended providers use encryption, support WireGuard & OpenVPN, and have
| Provider | Countries | WireGuard | Port Forwarding | IPv6 | Anonymous Payments |
|---|---|---|---|---|---|
| [Proton](#proton-vpn) | 127+ | :material-check:{ .pg-green } | :material-alert-outline:{ .pg-orange } Partial Support | :material-information-outline:{ .pg-blue } Limited Support | Cash |
| [IVPN](#ivpn) | 41+ | :material-check:{ .pg-green } | :material-alert-outline:{ .pg-orange } | :material-information-outline:{ .pg-blue } Outgoing Only | Monero Cash |
| [Mullvad](#mullvad) | 49+ | :material-check:{ .pg-green } | :material-alert-outline:{ .pg-orange } | :material-check:{ .pg-green } | Monero Cash |
### Proton VPN
<div class="admonition recommendation" markdown>
![Proton VPN logo](assets/img/vpn/protonvpn.svg){ align=right }
**Proton VPN** is a strong contender in the VPN space, and they have been in operation since 2016. Proton AG is based in Switzerland and offers a limited free tier, as well as a more featured premium option.
[:octicons-home-16: Homepage](https://protonvpn.com){ .md-button .md-button--primary }
[:octicons-eye-16:](https://protonvpn.com/privacy-policy){ .card-link title="Privacy Policy" }
[:octicons-info-16:](https://protonvpn.com/support){ .card-link title="Documentation" }
[:octicons-code-16:](https://github.com/ProtonVPN){ .card-link title="Source Code" }
<details class="downloads" markdown>
<summary>Downloads</summary>
- [:simple-googleplay: Google Play](https://play.google.com/store/apps/details?id=ch.protonvpn.android)
- [:simple-appstore: App Store](https://apps.apple.com/app/id1437005085)
- [:simple-github: GitHub](https://github.com/ProtonVPN/android-app/releases)
- [:fontawesome-brands-windows: Windows](https://protonvpn.com/download-windows)
- [:simple-apple: macOS](https://protonvpn.com/download-macos)
- [:simple-linux: Linux](https://protonvpn.com/support/linux-vpn-setup)
</details>
</div>
#### :material-check:{ .pg-green } 127 Countries
Proton VPN has [servers in 127 countries](https://protonvpn.com/vpn-servers)(1) or [10](https://protonvpn.com/support/how-to-create-free-vpn-account) if you use their [free plan](https://protonvpn.com/blog/product-roadmap-winter-2025-2026).(2) Picking a VPN provider with a server nearest to you will reduce latency of the network traffic you send. This is because of a shorter route (fewer hops) to the destination.
{ .annotate }
1. Of which at least 71 are virtual servers, meaning your IP will appear from the country but the server is in another. 12 more locations have both hardware and virtual servers. [Source](https://protonvpn.com/support/how-smart-routing-works)
2. Last checked: 2025-10-28
We also think it's better for the security of the VPN provider's private keys if they use [dedicated servers](https://en.wikipedia.org/wiki/Dedicated_hosting_service), instead of cheaper shared solutions (with other customers) such as [virtual private servers](https://en.wikipedia.org/wiki/Virtual_private_server).
#### :material-check:{ .pg-green } Independently Audited
Independent security researcher Ruben Santamarta conducted audits for Proton VPN's [browser extensions](https://drive.proton.me/urls/RWDD2SHT98#v7ZrwNcafkG8) and [apps](https://drive.proton.me/urls/RVW8TXG484#uTXX5Fc9GADo) in September 2024 and January 2025, respectively. Proton VPN's infrastrcture has undergone [annual audits](https://protonvpn.com/blog/no-logs-audit) by Securitum since 2022.
Previously, Proton VPN underwent an independent audit by SEC Consult in January 2020. SEC Consult found some medium and low risk vulnerabilities in Proton VPN's Windows, Android, and iOS applications, all of which were "properly fixed" by Proton VPN before the reports were published. None of the issues identified would have provided an attacker remote access to your device or traffic. You can view individual reports for each platform in their dedicated [blog post](https://web.archive.org/web/20250307041036/https://protonvpn.com/blog/open-source) on the audit.
#### :material-check:{ .pg-green } Open-Source Clients
Proton VPN provides the source code for their desktop and mobile clients in their [GitHub organization](https://github.com/ProtonVPN).
#### :material-check:{ .pg-green } Accepts Cash
Proton VPN, in addition to accepting credit/debit cards, PayPal, and [Bitcoin](advanced/payments.md#other-coins-bitcoin-ethereum-etc), also accepts **cash/local currency** as an anonymous form of payment.
#### :material-check:{ .pg-green } WireGuard Support
Proton VPN supports the WireGuard® protocol. [WireGuard](https://wireguard.com) is a newer protocol that uses state-of-the-art [cryptography](https://wireguard.com/protocol). Additionally, WireGuard aims to be simpler and more performant.
Proton VPN [recommends](https://protonvpn.com/blog/wireguard) the use of WireGuard with their service. Proton VPN also offers a WireGuard configuration generator for use with the official WireGuard [apps](https://wireguard.com/install).
#### :material-alert-outline:{ .pg-orange } Limited IPv6 Support
Proton [now supports IPv6](https://protonvpn.com/support/prevent-ipv6-vpn-leaks) in their browser extension and Linux client, but only 80% of their servers are IPv6-compatible. On other platforms, the Proton VPN client will block all outgoing IPv6 traffic, so you don't have to worry about your IPv6 address being leaked, but you will not be able to connect to any IPv6-only sites, nor will you be able to connect to Proton VPN from an IPv6-only network.
#### :material-information-outline:{ .pg-info } Remote Port Forwarding
Proton VPN currently only supports ephemeral remote [port forwarding](https://protonvpn.com/support/port-forwarding) via NAT-PMP, with 60 second lease times. The official Windows and Linux apps provide an easy-to-access option for it, while on other operating systems you'll need to run your own [NAT-PMP client](https://protonvpn.com/support/port-forwarding-manual-setup). Torrent applications often support NAT-PMP natively.
#### :material-information-outline:{ .pg-blue } Anti-Censorship
Proton VPN has their [Stealth](https://protonvpn.com/blog/stealth-vpn-protocol) protocol which *may* help in situations where VPN protocols like OpenVPN or WireGuard are blocked with various rudimentary techniques. Stealth encapsulates the VPN tunnel in TLS session in order to look like more generic internet traffic.
Unfortunately, it does not work very well in countries where sophisticated filters that analyze all outgoing traffic in an attempt to discover encrypted tunnels are deployed. Stealth is available on Android, iOS, Windows, and macOS, but it's not yet available on Linux.
#### :material-check:{ .pg-green } Mobile Clients
Proton VPN has published [App Store](https://apps.apple.com/app/id1437005085) and [Google Play](https://play.google.com/store/apps/details?id=ch.protonvpn.android) clients, both supporting an easy-to-use interface as opposed to requiring you to manually configure your WireGuard connection. The Android client is also available on [GitHub](https://github.com/ProtonVPN/android-app/releases).
<div class="admonition warning" markdown>
<p class="admonition-title">How to opt out of sharing telemetry</p>
On Android, Proton hides telemetry settings under the misleadingly labeled "**Help us fight censorship**" menu in the settings panel. On other platforms these settings can be found under the "**Usage statistics**" menu.
We are noting this because while we don't necessarily recommend against sharing anonymous usage statistics with developers, it is important that these settings are easily found and clearly labeled.
</div>
#### :material-alert-outline:{ .pg-orange } Additional Notes
Proton VPN clients support two-factor authentication on all platforms. Proton VPN has their own servers and datacenters in Switzerland, Iceland and Sweden. They offer content blocking and known-malware blocking with their DNS service. Additionally, Proton VPN also offers "Tor" servers allowing you to easily connect to onion sites, but we still strongly recommend using [the official Tor Browser](tor.md#tor-browser) for this purpose.
##### Kill switch feature provides poor protections on macOS
Proton VPN's kill switch on macOS does not block any traffic when you intentionally disconnect from the VPN, *including when you disconnect by switching servers.* You should not make any sensitive connections while the VPN is turned off, nor when switching servers. It is only designed to prevent traffic leaks in the case of an unexpected VPN disconnection, which is still a useful feature to have, but it does not provide the same level of protection as a kill switch that blocks all traffic when the VPN is turned off.
Additionally, system crashes [may occur](https://protonvpn.com/support/macos-t2-chip-kill-switch) on Intel-based Macs when using the VPN kill switch. If you require this feature, and you are using a Mac with Intel chipset, you should consider using another VPN service.
### IVPN
<div class="admonition recommendation" markdown>
@@ -300,20 +205,19 @@ It is important to note that using a VPN provider will not make you anonymous, b
### Technology
We require our recommended providers to support modern technologies currently available to VPNs.
We require all our recommended VPN providers to provide standard configuration files which can be used in a generic, open-source client. **If** a VPN provides their own custom client, we require a kill switch to block network data leaks when disconnected.
**Minimum to Qualify:**
- Must provide standard configuration files which can be used in a generic, open-source client such as the WireGuard apps.
- Support for strong protocols such as WireGuard.
- Functional kill switch built in to service-provided clients on our recommended [desktop](desktop.md) and [mobile](android/distributions.md) platforms. This kill switch should be able to block all internet traffic when the VPN connection drops unexpectedly.
- Kill switch built in to clients.
- Multi-hop support. Multi-hopping is important to keep data private in case of a single node compromise.
- If VPN clients are provided, they should be [open source](https://en.wikipedia.org/wiki/Open_source), like the VPN software they generally have built into them. We believe that [source code](https://en.wikipedia.org/wiki/Source_code) availability provides greater transparency about what the program is actually doing.
- Censorship resistance features designed to bypass firewalls without DPI.
**Best Case:**
- Kill switch on all major platforms with highly configurable options (enable/disable on certain networks, on boot, etc.)
- Kill switch with highly configurable options (enable/disable on certain networks, on boot, etc.)
- Easy-to-use VPN clients
- [IPv6](https://en.wikipedia.org/wiki/IPv6) support. We expect that servers will allow incoming connections via IPv6 and allow you to access services hosted on IPv6 addresses.
- Capability of [remote port forwarding](https://en.wikipedia.org/wiki/Port_forwarding#Remote_port_forwarding) assists in creating connections when using P2P ([Peer-to-Peer](https://en.wikipedia.org/wiki/Peer-to-peer)) file sharing software or hosting a server (e.g., Mumble).
-1
View File
@@ -469,7 +469,6 @@
</tr>
<tr>
<td align="center" valign="top" width="20%"><a rel="nofollow noopener noreferrer" href="https://github.com/blanchardjeremy"><img src="https://avatars.githubusercontent.com/u/32290?v=4" width="100px;" loading=lazy /><br /><sub><b>Jeremy</b></sub></a><br /><a href="https://github.com/privacyguides/privacyguides.org/commits?author=blanchardjeremy" title="Documentation">📖</a></td>
<td align="center" valign="top" width="20%"><a rel="nofollow noopener noreferrer" href="https://github.com/regions99rockery"><img src="https://avatars.githubusercontent.com/u/234068936?v=4" width="100px;" loading=lazy /><br /><sub><b>regions99rockery</b></sub></a><br /><a href="#research-regions99rockery" title="Research">🔬</a> <a href="#maintenance-regions99rockery" title="Maintenance">🚧</a> <a href="#question-regions99rockery" title="Answering Questions">💬</a></td>
</tr>
</tbody>
<tfoot>
+160 -141
View File
@@ -18,25 +18,25 @@
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
# IN THE SOFTWARE.
docs_dir: !ENV [ BUILD_DOCS_DIR, "docs" ]
site_url: !ENV [ BUILD_SITE_URL, "https://www.privacyguides.org/en/" ]
site_dir: !ENV [ BUILD_SITE_DIR, "site/en" ]
docs_dir: !ENV [BUILD_DOCS_DIR, "docs"]
site_url: !ENV [BUILD_SITE_URL, "https://www.privacyguides.org/en/"]
site_dir: !ENV [BUILD_SITE_DIR, "site/en"]
site_name: Privacy Guides
site_description:
!ENV [
SITE_DESCRIPTION,
"Privacy Guides is your central privacy and security resource to protect
yourself online.",
"Privacy Guides is your central privacy and security resource to protect yourself online.",
]
edit_uri_template: !ENV [ BUILD_EDIT_URI_TEMPLATE, "blob/main/docs/{path}?plain=1" ]
edit_uri_template:
!ENV [BUILD_EDIT_URI_TEMPLATE, "blob/main/docs/{path}?plain=1"]
extra:
scope: /
homepage: /
generator: false
context: !ENV [ BUILD_CONTEXT, "production" ]
offline: !ENV [ BUILD_OFFLINE, false ]
context: !ENV [BUILD_CONTEXT, "production"]
offline: !ENV [BUILD_OFFLINE, false]
deploy: !ENV DEPLOY_ID
ghost:
base_url: https://www.privacyguides.org
@@ -48,96 +48,118 @@ extra:
intro:
!ENV [
FOOTER_INTRO,
"Privacy Guides is a non-profit, socially motivated website that provides
information for protecting your data security and privacy.",
"Privacy Guides is a non-profit, socially motivated website that provides information for protecting your data security and privacy.",
]
note:
!ENV [
FOOTER_NOTE,
"We do not make money from recommending certain products, and we do not use
affiliate links.",
"We do not make money from recommending certain products, and we do not use affiliate links.",
]
copyright:
author: !ENV [ FOOTER_COPYRIGHT_AUTHOR, "Privacy Guides and contributors." ]
date: !ENV [ FOOTER_COPYRIGHT_DATE, "2019-2025" ]
author:
!ENV [FOOTER_COPYRIGHT_AUTHOR, "Privacy Guides and contributors."]
date: !ENV [FOOTER_COPYRIGHT_DATE, "2019-2025"]
license:
- fontawesome/brands/creative-commons
- fontawesome/brands/creative-commons-by
- fontawesome/brands/creative-commons-sa
links:
- name: !ENV [ FOOTER_PRIVACY_NOTICE, "Privacy notice." ]
- name: !ENV [FOOTER_PRIVACY_NOTICE, "Privacy notice."]
url: https://www.privacyguides.org/en/privacy/
homepage:
description:
!ENV [
HOMEPAGE_DESCRIPTION,
"A socially motivated website which provides information about protecting
your online data privacy and security.",
"A socially motivated website which provides information about protecting your online data privacy and security.",
]
hero:
header: !ENV [ HOMEPAGE_HEADER, "The guide to restoring your online privacy." ]
header:
!ENV [HOMEPAGE_HEADER, "The guide to restoring your online privacy."]
subheader:
!ENV [
HOMEPAGE_SUBHEADER,
"Massive organizations are monitoring your online activities. Privacy
Guides is your central privacy and security resource to protect
yourself online.",
"Massive organizations are monitoring your online activities. Privacy Guides is your central privacy and security resource to protect yourself online.",
]
buttons:
- name: !ENV [ HOMEPAGE_BUTTON_GET_STARTED_NAME, "Start Your Privacy Journey" ]
title: !ENV [ HOMEPAGE_BUTTON_GET_STARTED_TITLE, "The first step of your privacy journey" ]
link: !ENV [ HOMEPAGE_BUTTON_GET_STARTED_LINK, "basics/why-privacy-matters/" ]
- name:
!ENV [
HOMEPAGE_BUTTON_GET_STARTED_NAME,
"Start Your Privacy Journey",
]
title:
!ENV [
HOMEPAGE_BUTTON_GET_STARTED_TITLE,
"The first step of your privacy journey",
]
link:
!ENV [
HOMEPAGE_BUTTON_GET_STARTED_LINK,
"basics/why-privacy-matters/",
]
class: md-button md-button--primary
- name: !ENV [ HOMEPAGE_BUTTON_TOOLS_NAME, "Recommended Tools" ]
- name: !ENV [HOMEPAGE_BUTTON_TOOLS_NAME, "Recommended Tools"]
title:
!ENV [
HOMEPAGE_BUTTON_TOOLS_TITLE,
"Recommended privacy tools, services, and knowledge",
]
link: !ENV [ HOMEPAGE_BUTTON_TOOLS_LINK, "tools/" ]
link: !ENV [HOMEPAGE_BUTTON_TOOLS_LINK, "tools/"]
class: md-button
cta:
- title: !ENV [ HOMEPAGE_CTA_TITLE, "We need you! Here's how to get involved:" ]
- title:
!ENV [
HOMEPAGE_CTA_TITLE,
"We need you! Here's how to get involved:",
]
links:
- icon: simple/discourse
name: !ENV [ HOMEPAGE_CTA_FORUM_NAME, "Join the forum" ]
name: !ENV [HOMEPAGE_CTA_FORUM_NAME, "Join the forum"]
link: https://discuss.privacyguides.net/
- icon: simple/mastodon
name: !ENV [ HOMEPAGE_CTA_MASTODON_NAME, "Follow us on Mastodon" ]
name: !ENV [HOMEPAGE_CTA_MASTODON_NAME, "Follow us on Mastodon"]
link: https://mastodon.neat.computer/@privacyguides
- icon: simple/github
name: !ENV [ HOMEPAGE_CTA_GITHUB_NAME, "Contribute on GitHub" ]
name: !ENV [HOMEPAGE_CTA_GITHUB_NAME, "Contribute on GitHub"]
link: https://github.com/privacyguides/privacyguides.org
- icon: material/translate
name: !ENV [ HOMEPAGE_CTA_TRANSLATE_NAME, "Help translate" ]
name: !ENV [HOMEPAGE_CTA_TRANSLATE_NAME, "Help translate"]
link: https://crowdin.com/project/privacyguides
- icon: simple/matrix
name: !ENV [ HOMEPAGE_CTA_MATRIX_NAME, "Join the Matrix chat" ]
name: !ENV [HOMEPAGE_CTA_MATRIX_NAME, "Join the Matrix chat"]
link: https://matrix.to/#/#privacyguides:matrix.org
- icon: material/information-outline
name: !ENV [ HOMEPAGE_CTA_ABOUT_NAME, "Learn more about us" ]
link: !ENV [ HOMEPAGE_CTA_ABOUT_LINK, "about/" ]
name: !ENV [HOMEPAGE_CTA_ABOUT_NAME, "Learn more about us"]
link: !ENV [HOMEPAGE_CTA_ABOUT_LINK, "about/"]
- icon: material/hand-coin
name: !ENV [ HOMEPAGE_CTA_DONATE_NAME, "Donate to Privacy Guides" ]
link: !ENV [ HOMEPAGE_CTA_DONATE_LINK, "about/donate/" ]
name: !ENV [HOMEPAGE_CTA_DONATE_NAME, "Donate to Privacy Guides"]
link: !ENV [HOMEPAGE_CTA_DONATE_LINK, "about/donate/"]
description:
!ENV [
HOMEPAGE_CTA_DESCRIPTION,
"If you spot an error, think a provider should not be listed, notice a
qualified provider is missing, believe a browser plugin is no
longer the best choice, or uncover any other issue, please let
us know.",
"If you spot an error, think a provider should not be listed, notice a qualified provider is missing, believe a browser plugin is no longer the best choice, or uncover any other issue, please let us know.",
]
rss:
- title: !ENV [ HOMEPAGE_RSS_BLOG_TITLE, "Privacy Guides blog feed" ]
- title: !ENV [HOMEPAGE_RSS_BLOG_TITLE, "Privacy Guides blog feed"]
link:
!ENV [
HOMEPAGE_RSS_BLOG_LINK,
"https://www.privacyguides.org/articles/feed_rss_created.xml",
]
- title: !ENV [ HOMEPAGE_RSS_FORUM_TITLE, "Latest Privacy Guides forum topics" ]
link: !ENV [ HOMEPAGE_RSS_FORUM_LINK, "https://discuss.privacyguides.net/latest.rss" ]
- title: !ENV [ HOMEPAGE_RSS_CHANGELOG_TITLE, "Privacy Guides release changelog" ]
- title:
!ENV [
HOMEPAGE_RSS_FORUM_TITLE,
"Latest Privacy Guides forum topics",
]
link:
!ENV [
HOMEPAGE_RSS_FORUM_LINK,
"https://discuss.privacyguides.net/latest.rss",
]
- title:
!ENV [
HOMEPAGE_RSS_CHANGELOG_TITLE,
"Privacy Guides release changelog",
]
link:
!ENV [
HOMEPAGE_RSS_CHANGELOG_LINK,
@@ -145,29 +167,29 @@ extra:
]
translation_notice:
notice: !ENV TRANSLATION_NOTICE
cta: !ENV [ TRANSLATION_NOTICE_CTA, "Visit Crowdin" ]
cta: !ENV [TRANSLATION_NOTICE_CTA, "Visit Crowdin"]
language: !ENV SITE_LANGUAGE_ENGLISH
translation_stylesheet: !ENV [ TRANSLATION_STYLESHEET ]
translation_stylesheet: !ENV [TRANSLATION_STYLESHEET]
social:
- icon: simple/mastodon
link: https://mastodon.neat.computer/@privacyguides
name: !ENV [ SOCIAL_MASTODON, "Mastodon" ]
name: !ENV [SOCIAL_MASTODON, "Mastodon"]
- icon: simple/peertube
link: https://neat.tube/c/privacyguides
name: !ENV [ SOCIAL_PEERTUBE, "PeerTube" ]
name: !ENV [SOCIAL_PEERTUBE, "PeerTube"]
- icon: simple/matrix
link: https://matrix.to/#/#privacyguides:matrix.org
name: !ENV [ SOCIAL_MATRIX, "Matrix" ]
name: !ENV [SOCIAL_MATRIX, "Matrix"]
- icon: simple/discourse
link: https://discuss.privacyguides.net/
name: !ENV [ SOCIAL_FORUM, "Forum" ]
name: !ENV [SOCIAL_FORUM, "Forum"]
- icon: simple/github
link: https://github.com/privacyguides
name: !ENV [ SOCIAL_GITHUB, "GitHub" ]
name: !ENV [SOCIAL_GITHUB, "GitHub"]
- icon: simple/torbrowser
link: http://www.xoe4vn5uwdztif6goazfbmogh6wh5jc4up35bqdflu6bkdc5cas5vjqd.onion/
name: !ENV [ SOCIAL_TOR_SITE, "Hidden service" ]
language_switcher: !ENV [ LANGUAGE_SWITCHER, true ]
name: !ENV [SOCIAL_TOR_SITE, "Hidden service"]
language_switcher: !ENV [LANGUAGE_SWITCHER, true]
alternate:
- name: English
link: /en/
@@ -207,46 +229,53 @@ extra:
icon: https://raw.githubusercontent.com/twitter/twemoji/master/assets/svg/1f1f7-1f1fa.svg
analytics:
feedback:
title: !ENV [ ANALYTICS_FEEDBACK_TITLE, "Was this page helpful?" ]
title: !ENV [ANALYTICS_FEEDBACK_TITLE, "Was this page helpful?"]
ratings:
- icon: material/emoticon-happy-outline
name: !ENV [ ANALYTICS_FEEDBACK_POSITIVE_NAME, "This page was helpful" ]
name: !ENV [ANALYTICS_FEEDBACK_POSITIVE_NAME, "This page was helpful"]
data: 1
note: !ENV [ ANALYTICS_FEEDBACK_POSITIVE_NOTE, "Thanks for your feedback!" ]
note:
!ENV [ANALYTICS_FEEDBACK_POSITIVE_NOTE, "Thanks for your feedback!"]
- icon: material/emoticon-sad-outline
name: !ENV [ ANALYTICS_FEEDBACK_NEGATIVE_NAME, "This page could be improved" ]
name:
!ENV [
ANALYTICS_FEEDBACK_NEGATIVE_NAME,
"This page could be improved",
]
data: 0
note: !ENV [ ANALYTICS_FEEDBACK_NEGATIVE_NOTE, "Thanks for your feedback!" ]
note:
!ENV [ANALYTICS_FEEDBACK_NEGATIVE_NOTE, "Thanks for your feedback!"]
repo_url: !ENV [ BUILD_REPO_URL, "https://github.com/privacyguides/privacyguides.org" ]
repo_url:
!ENV [BUILD_REPO_URL, "https://github.com/privacyguides/privacyguides.org"]
repo_name: ""
theme:
name: material
language: !ENV [ BUILD_THEME_LANGUAGE, "en" ]
language: !ENV [BUILD_THEME_LANGUAGE, "en"]
custom_dir: theme
font:
text: !ENV [ BUILD_THEME_FONT_TEXT, "Public Sans" ]
code: !ENV [ BUILD_THEME_FONT_CODE, "DM Mono" ]
text: !ENV [BUILD_THEME_FONT_TEXT, "Public Sans"]
code: !ENV [BUILD_THEME_FONT_CODE, "DM Mono"]
palette:
- media: "(prefers-color-scheme)"
scheme: default
accent: deep purple
toggle:
icon: material/brightness-auto
name: !ENV [ THEME_DARK, "Switch to dark mode" ]
name: !ENV [THEME_DARK, "Switch to dark mode"]
- media: "(prefers-color-scheme: dark)"
scheme: slate
accent: amber
toggle:
icon: material/brightness-2
name: !ENV [ THEME_LIGHT, "Switch to light mode" ]
name: !ENV [THEME_LIGHT, "Switch to light mode"]
- media: "(prefers-color-scheme: light)"
scheme: default
accent: deep purple
toggle:
icon: material/brightness-5
name: !ENV [ THEME_AUTO, "Switch to system theme" ]
name: !ENV [THEME_AUTO, "Switch to system theme"]
favicon: assets/brand/logos/png/favicon-32x32.png
icon:
repo: simple/github
@@ -278,29 +307,29 @@ plugins:
tags: {}
search: {}
privacy:
enabled: !ENV [ BUILD_PRIVACY, true ]
enabled: !ENV [BUILD_PRIVACY, true]
offline:
enabled: !ENV [ BUILD_OFFLINE, false ]
enabled: !ENV [BUILD_OFFLINE, false]
group:
enabled: !ENV [ BUILD_INSIDERS, false ]
enabled: !ENV [BUILD_INSIDERS, false]
plugins:
macros: {}
meta: {}
git-authors:
enabled: !ENV [ GITAUTHORS, PRODUCTION, NETLIFY, false ]
enabled: !ENV [GITAUTHORS, PRODUCTION, NETLIFY, false]
sort_authors_by: contribution
show_contribution: true
fallback_to_empty: true
authorship_threshold_percent: 1
git-revision-date-localized:
enabled: !ENV [ GITREVISIONDATE, PRODUCTION, NETLIFY, false ]
enabled: !ENV [GITREVISIONDATE, PRODUCTION, NETLIFY, false]
exclude:
- index.md
fallback_to_build_date: true
enable_creation_date: true
typeset: {}
social:
cards: !ENV [ CARDS, true ]
cards: !ENV [CARDS, true]
cards_dir: assets/img/social
cards_layout_dir: theme/layouts
cards_layout: page
@@ -313,7 +342,7 @@ markdown_extensions:
custom_fences:
- name: mermaid
class: mermaid
format: !!python/name:pymdownx.superfences.fence_code_format
format: !!python/name:pymdownx.superfences.fence_code_format
pymdownx.tabbed:
alternate_style: true
pymdownx.arithmatex:
@@ -325,7 +354,7 @@ markdown_extensions:
pymdownx.tilde: {}
pymdownx.snippets:
auto_append:
- !ENV [ BUILD_ABBREVIATIONS, "includes/abbreviations.en.txt" ]
- !ENV [BUILD_ABBREVIATIONS, "includes/abbreviations.en.txt"]
pymdownx.tasklist:
custom_checkbox: true
attr_list: {}
@@ -334,8 +363,8 @@ markdown_extensions:
meta: {}
abbr: {}
pymdownx.emoji:
emoji_index: !!python/name:material.extensions.emoji.twemoji
emoji_generator: !!python/name:material.extensions.emoji.to_svg
emoji_index: !!python/name:material.extensions.emoji.twemoji
emoji_generator: !!python/name:material.extensions.emoji.to_svg
options:
custom_icons:
- theme/icons
@@ -345,50 +374,49 @@ markdown_extensions:
toc_depth: 4
nav:
- ? !ENV [ NAV_HOME, "Home" ]
: "index.md"
- ? !ENV [ NAV_KNOWLEDGE_BASE, "Knowledge Base" ]
: - "basics/why-privacy-matters.md"
- !ENV [NAV_HOME, "Home"]: "index.md"
- !ENV [NAV_KNOWLEDGE_BASE, "Knowledge Base"]:
- "basics/why-privacy-matters.md"
- "basics/threat-modeling.md"
- "basics/common-threats.md"
- "basics/common-misconceptions.md"
- "basics/account-creation.md"
- "basics/account-deletion.md"
- ? !ENV [ NAV_TECHNOLOGY_ESSENTIALS, "Technology Essentials" ]
: - "basics/passwords-overview.md"
- !ENV [NAV_TECHNOLOGY_ESSENTIALS, "Technology Essentials"]:
- "basics/passwords-overview.md"
- "basics/multi-factor-authentication.md"
- "basics/hardware.md"
- "basics/email-security.md"
- "basics/vpn-overview.md"
- ? !ENV [ NAV_ADVANCED_TOPICS, "Advanced Topics" ]
: - "advanced/dns-overview.md"
- !ENV [NAV_ADVANCED_TOPICS, "Advanced Topics"]:
- "advanced/dns-overview.md"
- "advanced/tor-overview.md"
- "advanced/payments.md"
- "advanced/communication-network-types.md"
- ? !ENV [ NAV_OPERATING_SYSTEMS, "Operating Systems" ]
: - "os/index.md"
- !ENV [NAV_OPERATING_SYSTEMS, "Operating Systems"]:
- "os/index.md"
- "os/android-overview.md"
- "os/ios-overview.md"
- "os/linux-overview.md"
- "os/macos-overview.md"
- "os/qubes-overview.md"
- ? !ENV [ NAV_OPERATING_SYSTEMS_WINDOWS, "Windows" ]
: - "os/windows/index.md"
- !ENV [NAV_OPERATING_SYSTEMS_WINDOWS, "Windows"]:
- "os/windows/index.md"
- "os/windows/group-policies.md"
- ? !ENV [ NAV_RECOMMENDATIONS, "Recommendations" ]
: - "tools.md"
- ? !ENV [ NAV_SELF_HOSTING, "Self-Hosting" ]
: - "self-hosting/index.md"
- !ENV [NAV_RECOMMENDATIONS, "Recommendations"]:
- "tools.md"
- !ENV [NAV_SELF_HOSTING, "Self-Hosting"]:
- "self-hosting/index.md"
- "self-hosting/dns-filtering.md"
- "self-hosting/email-servers.md"
- "self-hosting/file-management.md"
- ? !ENV [ NAV_INTERNET_BROWSING, "Internet Browsing" ]
: - "tor.md"
- !ENV [NAV_INTERNET_BROWSING, "Internet Browsing"]:
- "tor.md"
- "desktop-browsers.md"
- "mobile-browsers.md"
- "browser-extensions.md"
- ? !ENV [ NAV_PROVIDERS, "Providers" ]
: - "cloud.md"
- !ENV [NAV_PROVIDERS, "Providers"]:
- "cloud.md"
- "data-broker-removals.md"
- "dns.md"
- "email-aliasing.md"
@@ -397,8 +425,8 @@ nav:
- "photo-management.md"
- "search-engines.md"
- "vpn.md"
- ? !ENV [ NAV_SOFTWARE, "Software" ]
: - "ai-chat.md"
- !ENV [NAV_SOFTWARE, "Software"]:
- "ai-chat.md"
- "calendar.md"
- "cryptocurrency.md"
- "data-redaction.md"
@@ -418,32 +446,31 @@ nav:
- "pastebins.md"
- "real-time-communication.md"
- "social-networks.md"
- ? !ENV [ NAV_HARDWARE, "Hardware" ]
: - "mobile-phones.md"
- !ENV [NAV_HARDWARE, "Hardware"]:
- "mobile-phones.md"
- "security-keys.md"
- ? !ENV [ NAV_OPERATING_SYSTEMS, "Operating Systems" ]
: - ? !ENV [ NAV_ANDROID, "Android" ]
: - "android/index.md"
- !ENV [NAV_OPERATING_SYSTEMS, "Operating Systems"]:
- !ENV [NAV_ANDROID, "Android"]:
- "android/index.md"
- "android/distributions.md"
- "android/general-apps.md"
- "android/obtaining-apps.md"
- "desktop.md"
- "router.md"
- ? !ENV [ NAV_ADVANCED, "Advanced" ]
: - "alternative-networks.md"
- !ENV [NAV_ADVANCED, "Advanced"]:
- "alternative-networks.md"
- "device-integrity.md"
- ? !ENV [ NAV_ACTIVISM, "Activism" ]
: - "activism/index.md"
- ? !ENV [ NAV_ACTIVISM_TOOLBOX, "Activist Toolbox" ]
: - "activism/toolbox/index.md"
- !ENV [NAV_ACTIVISM, "Activism"]:
- "activism/index.md"
- !ENV [NAV_ACTIVISM_TOOLBOX, "Activist Toolbox"]:
- "activism/toolbox/index.md"
- "Check Your Laws":
- "activism/toolbox/tip-know-your-privacy-laws.md"
- "activism/toolbox/tip-report-privacy-violations.md"
- "Choose Your Tools":
- "activism/toolbox/tip-beware-of-privacy-snake-oil.md"
- "activism/toolbox/tip-migrate-outside-the-surveillance-ecosystem.md"
- "activism/toolbox/tip-improve-your-social-media-and-build-resilient-c\
ommunities.md"
- "activism/toolbox/tip-improve-your-social-media-and-build-resilient-communities.md"
- "Expand Your Perspective":
- "activism/toolbox/tip-dont-stop-at-individual-solutions.md"
- "activism/toolbox/tip-keep-in-mind-the-whole-landscape.md"
@@ -451,8 +478,7 @@ nav:
- "Support The Community":
- "activism/toolbox/tip-lift-your-allies-up.md"
- "activism/toolbox/tip-support-your-privacy-comrades.md"
- "activism/toolbox/tip-be-kind-to-people-but-be-relentless-with-instit\
utions.md"
- "activism/toolbox/tip-be-kind-to-people-but-be-relentless-with-institutions.md"
- "Build Alliances":
- "activism/toolbox/tip-start-alliances-not-wars.md"
- "activism/toolbox/tip-value-allies-with-complementary-expertise.md"
@@ -472,48 +498,41 @@ nav:
- "Take Action!":
- "activism/toolbox/tip-engage-boosts-and-contribute.md"
- "activism/toolbox/tip-level-up-assemble-and-organize.md"
- ? !ENV [ NAV_ACTIVISM_LEGAL, "Legal Resources" ]
: - "activism/legal/dpa-directory.md"
- ? !ENV [ NAV_BLOG, "Articles" ]
: !ENV [ ARTICLES_SITE_BASE_URL, "/articles/" ]
- ? !ENV [ NAV_VIDEOS, "Videos" ]
: !ENV [ VIDEOS_SITE_BASE_URL, "/videos/" ]
- ? !ENV [ NAV_NEWS, "News" ]
: !ENV [ NEWS_SITE_BASE_URL, "/news/" ]
- ? !ENV [ NAV_FORUM, "Forum" ]
: !ENV [ NAV_FORUM_LINK, "https://discuss.privacyguides.net/" ]
- ? !ENV [ NAV_WIKI, "Wiki" ]
: !ENV [
- !ENV [NAV_BLOG, "Articles"]: !ENV [ARTICLES_SITE_BASE_URL, "/articles/"]
- !ENV [NAV_VIDEOS, "Videos"]: !ENV [VIDEOS_SITE_BASE_URL, "/videos/"]
- !ENV [NAV_NEWS, "News"]: !ENV [NEWS_SITE_BASE_URL, "/news/"]
- !ENV [NAV_FORUM, "Forum"]:
!ENV [NAV_FORUM_LINK, "https://discuss.privacyguides.net/"]
- !ENV [NAV_WIKI, "Wiki"]:
!ENV [
NAV_WIKI_LINK,
"https://discuss.privacyguides.net/c/community-wiki/9411/none",
]
- ? !ENV [ NAV_ABOUT, "About" ]
: - "about.md"
- !ENV [NAV_ABOUT, "About"]:
- "about.md"
- "about/donate.md"
- ? !ENV [ NAV_ABOUT_TEAM_MEMBERS, "Team Members" ]
: https://discuss.privacyguides.net/u?group=team&order=solutions&period=all
- ? !ENV [ NAV_ABOUT_POLICIES, "Policies" ]
: - "about/criteria.md"
- !ENV [NAV_ABOUT_TEAM_MEMBERS, "Team Members"]:
https://discuss.privacyguides.net/u?group=team&order=solutions&period=all
- !ENV [NAV_ABOUT_POLICIES, "Policies"]:
- "about/criteria.md"
- "about/donation-acceptance-policy.md"
- "about/executive-policy.md"
- "privacy.md"
- "about/notices.md"
- ? !ENV [ NAV_COMMUNITY, "Community" ]
: - "about/jobs.md"
- !ENV [NAV_COMMUNITY, "Community"]:
- "about/jobs.md"
- "about/contributors.md"
- ? !ENV [ NAV_ONLINE_SERVICES, "Online Services" ]
: "about/services.md"
- ? !ENV [ NAV_CODE_OF_CONDUCT, "Code of Conduct" ]
: "CODE_OF_CONDUCT.md"
- !ENV [NAV_ONLINE_SERVICES, "Online Services"]: "about/services.md"
- !ENV [NAV_CODE_OF_CONDUCT, "Code of Conduct"]: "CODE_OF_CONDUCT.md"
- "about/statistics.md"
- ? !ENV [ NAV_CONTRIBUTING, "Contributing" ]
: - ? !ENV [ NAV_WRITING_GUIDE, "Writing Guide" ]
: - "meta/writing-style.md"
- !ENV [NAV_CONTRIBUTING, "Contributing"]:
- !ENV [NAV_WRITING_GUIDE, "Writing Guide"]:
- "meta/writing-style.md"
- "meta/admonitions.md"
- "meta/brand.md"
- "meta/translations.md"
- ? !ENV [ NAV_TECHNICAL_GUIDES, "Technical Guides" ]
: - "meta/uploading-images.md"
- !ENV [NAV_TECHNICAL_GUIDES, "Technical Guides"]:
- "meta/uploading-images.md"
- "meta/git-recommendations.md"
- "meta/commit-messages.md"
- "meta/pr-comments.md"
+21
View File
@@ -0,0 +1,21 @@
<?xml version="1.0" encoding="UTF-8"?>
<!-- Created with Inkscape (http://www.inkscape.org/) -->
<svg width="200mm" height="200mm" version="1.1" viewBox="0 0 200 200" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<defs>
<linearGradient id="linearGradient8220" x2="200" y1="100" y2="100" gradientUnits="userSpaceOnUse">
<stop stop-color="#67b793" offset="0"/>
<stop stop-color="#50956d" offset="1"/>
</linearGradient>
</defs>
<g>
<circle cx="100" cy="100" r="100" fill="url(#linearGradient8220)"/>
<g fill="#d7f5ec">
<circle cx="100" cy="100" r="60"/>
<path d="m181.92 157.36a100 100 0 0 1-24.558 24.558l-57.358-81.915z"/>
<path d="m157.36 18.085a100 100 0 0 1 24.558 24.558l-81.915 57.358z"/>
<rect transform="rotate(45)" x="141.42" y="-17.365" width="98.481" height="34.73"/>
<rect transform="rotate(-45)" x="-8.5459e-7" y="124.06" width="98.481" height="34.73"/>
</g>
<circle cx="100" cy="100" r="40" fill="#4a8f62"/>
</g>
</svg>

After

Width:  |  Height:  |  Size: 1002 B

Binary file not shown.

Before

Width:  |  Height:  |  Size: 30 KiB

@@ -1,32 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
SPDX-FileCopyrightText: Metadata Cleaner contributors
SPDX-License-Identifier: CC-BY-SA-4.0
-->
<svg width="128" height="128" version="1.0" viewBox="0 0 128 128" xmlns="http://www.w3.org/2000/svg">
<defs>
<linearGradient id="sponge_shading" x1="30.111" x2="89.889" y1="281.38" y2="281.38" gradientUnits="userSpaceOnUse">
<stop stop-color="#b5835a" offset="0"/>
<stop stop-color="#e5a50a" offset=".097354"/>
<stop stop-color="#e5a50a" offset=".28912"/>
<stop stop-color="#b5835a" offset=".45415"/>
<stop stop-color="#e5a50a" offset=".66135"/>
<stop stop-color="#e5a50a" offset="1"/>
</linearGradient>
</defs>
<g id="icon">
<path id="file_shadow" d="m20 104v5c0 4.432 3.568 8 8 8h72c4.432 0 8-3.568 8-8v-5z" fill="#c0bfbc"/>
<rect id="file" x="20" y="5" width="88" height="108" rx="8" fill="#f6f5f4"/>
<g id="fingerprint" fill="#813d9c">
<path d="m58.746 47.242a2 2 0 0 0-1.1543 2.582c7.056 18.489 22.133 27.506 22.133 27.506a2 2 0 0 0 2.7441-0.68555 2 2 0 0 0-0.68555-2.7441s-13.92-8.3786-20.455-25.502a2 2 0 0 0-2.582-1.1562z"/>
<path d="m59.262 38.004c-0.83784 0.0153-1.7138 0.13067-2.623 0.35742-4.3119 1.0753-7.0263 4.0708-7.6348 7.6758s0.46802 7.6083 2.4023 11.764c3.8687 8.3107 11.411 17.331 19.145 23.475a2 2 0 0 0 2.8105-0.32227 2 2 0 0 0-0.32227-2.8105c-7.217-5.7327-14.522-14.542-18.008-22.029-1.7427-3.7436-2.4687-7.1308-2.084-9.4102s1.4596-3.6633 4.6582-4.4609c2.7331-0.68164 3.874-0.24636 5.2168 1 1.3428 1.2464 2.6866 3.668 4.3184 6.75 3.2635 6.1639 7.935 14.81 19.154 21.348a2 2 0 0 0 2.7344-0.7207 2 2 0 0 0-0.7207-2.7344c-10.328-6.0189-14.379-13.618-17.633-19.764-1.627-3.0731-2.9895-5.8231-5.1328-7.8125-1.6075-1.492-3.7677-2.3506-6.2812-2.3047z"/>
<path d="m62.223 29.453c-3.6233-0.40368-7.8406 0.50957-12.73 3.0293-7.3209 3.7724-10.222 11.77-8.5312 20.705 1.6909 8.9349 7.6383 19.09 17.805 28.742a2 2 0 0 0 2.8281-0.07227 2 2 0 0 0-0.07422-2.8281c-9.7096-9.2186-15.157-18.81-16.629-26.586s0.69988-13.452 6.4336-16.406c5.9031-3.0419 9.8108-3.2061 12.887-2.0195 3.0759 1.1866 5.6107 3.9809 8.0508 7.6797 4.8801 7.3975 8.9869 18.195 18.459 22.658a2 2 0 0 0 2.6621-0.95703 2 2 0 0 0-0.95703-2.6621c-7.5339-3.5503-11.586-13.297-16.826-21.24-2.6199-3.9714-5.6344-7.5464-9.9492-9.2109-1.0787-0.41614-2.22-0.69747-3.4277-0.83203z"/>
<path d="m62.623 20.734c-4.4893-0.3054-9.6522 0.73135-15.576 3.5156-11.332 5.3259-15.237 15.197-14.721 25.02s5.0382 19.77 10.125 26.83a2 2 0 0 0 2.791 0.45312 2 2 0 0 0 0.45312-2.791c-4.6901-6.5097-8.9171-15.986-9.375-24.701-0.45786-8.7152 2.4379-16.495 12.43-21.191 7.2928-3.4276 12.71-3.787 17.045-2.5508 4.3352 1.2363 7.7614 4.1611 10.762 7.8926 3.0003 3.7314 5.5056 8.2197 7.9688 12.277 2.4632 4.0576 4.8136 7.7485 8.1523 9.7949a2 2 0 0 0 2.75-0.66016 2 2 0 0 0-0.66016-2.75c-2.1137-1.2956-4.4204-4.501-6.8242-8.4609-2.4038-3.9599-4.9748-8.6095-8.2695-12.707s-7.382-7.6922-12.783-9.2324c-1.3503-0.38506-2.7712-0.63648-4.2676-0.73828z"/>
</g>
<path id="cleaned_zone" d="m108 25.436c-40.541 10.75-71.772 60.021-71.772 60.021l48.851 22.011s8.9944-19.125 22.921-26.059z" fill="#fff" opacity=".9"/>
<g id="sponge">
<path d="m30.11 89.271 59.778 1.0104s-0.0095 2.4996 1e-4 6.6775c0.0046 1.968-0.4492 3.9705-1.4557 5.8305l-7.6143 14.072c-3.1637 5.847-10.418 8.007-16.265 4.843-4.6734-2.528-7.4951-8.603-12.168-11.132-4.708-2.547-11.268-1.549-15.976-4.096-4.0234-2.177-6.301-6.291-6.2996-10.55 7e-4 -1.9306 0-6.655 0-6.655z" fill="url(#sponge_shading)"/>
<path d="m31.567 83.55 7.6143-14.072c3.1637-5.8469 10.418-8.007 16.265-4.8433 4.7533 2.572 7.4153 8.5604 12.168 11.132 4.6281 2.5043 11.348 1.5921 15.976 4.0963 5.847 3.1638 8.0071 10.418 4.8433 16.265l-7.6143 14.072c-3.1637 5.847-10.418 8.007-16.265 4.844-4.6734-2.529-7.4951-8.604-12.168-11.133-4.708-2.547-11.268-1.548-15.976-4.0959-5.847-3.1637-8.0071-10.418-4.8433-16.265z" fill="#f5c211"/>
</g>
</g>
</svg>

Before

Width:  |  Height:  |  Size: 3.8 KiB

+1
View File
@@ -0,0 +1 @@
<svg xmlns="http://www.w3.org/2000/svg" width="128" height="128" version="1.1" viewBox="0 0 33.867 33.867"><g><path fill="#4343ff" d="m75.442 117.85c3.3426-0.62057 5.8921-0.31143 8.1139 2.4694 2.9164-2.5188 5.4372-2.8222 9.1722-2.8222-4.1614-5.3918-13.3-5.0479-17.286 0.35278m-2.4694 8.8194h0.35278c0.57274-2.4745 1.4387-4.7979 3.5278-6.35-0.0024 3.6523-2.0171 8.0642-1.0975 11.636 0.49495 1.9227 3.2713 3.1322 4.9781 3.7012 4.9853 1.6617 10.772-0.5401 13.344-5.1071 2.4443-4.3407 2.4887-10.227-3.1135-10.936-0.54247 2.8791-1.2627 5.8902-1.3972 8.8194-0.0545 1.1867 0.16563 2.8529-1.1229 3.4973-1.6634 0.83189-2.0984-1.2819-2.0042-2.439 0.26141-3.2124 1.2561-6.5356 2.4076-9.525-1.338 0.0285-3.3185 0.0732-4.3735 1.0352-0.7456 0.67987-0.64012 1.9754-1.0793 2.8451-1.3627 2.6986-3.871 3.4357-6.5416 2.4697 1.198-0.74525 2.8991-1.1261 3.5245-2.5076 1.8751-4.1413-4.1426-6.0016-6.4428-3.0566-1.2381 1.5851-0.96224 4.037-0.96224 5.9169z" transform="matrix(1.4916 0 0 1.4916 -108.81 -169.4)"/></g></svg>

After

Width:  |  Height:  |  Size: 998 B

File diff suppressed because one or more lines are too long

Before

Width:  |  Height:  |  Size: 5.1 KiB

After

Width:  |  Height:  |  Size: 7.1 KiB

-233
View File
@@ -614,12 +614,6 @@ path[d="M20.71 7.04c.39-.39.39-1.04 0-1.41l-2.34-2.34c-.37-.39-1.02-.39-1.41 0l-
/*********** Activism Section ***********/
/* Activism Button Colors*/
.dpadirectory-bg {
background-color: #7dbd5b;
color: #2d2d2d !important;
}
/* Toolbox Color Variables */
:root {
--color-toolbox: #21bddc;
@@ -837,230 +831,3 @@ path[d="M20.71 7.04c.39-.39.39-1.04 0-1.41l-2.34-2.34c-.37-.39-1.02-.39-1.41 0l-
bottom: .75em;
width: 2rem;
}
/* DPA Directory */
.table-wrapper {
width: min(900px, 100% -3rem);
margin-inline: auto;
}
.dpadirectory-table {
padding: 1rem;
border-collapse: collapse;
width: 100%;
line-height: 1.05rem;
table-layout: fixed;
width: 100%;
overflow-wrap: normal;
table-layout: fixed;
}
/* Column Width - Region */
.dpadirectory-table th:first-child {
min-width: 110px;
width: 110px;
}
/* Column Width - Law */
.dpadirectory-table th:nth-child(2) {
min-width: 140px;
width: 140px;
}
/* Column Width - Abbreviation */
.dpadirectory-table th:nth-child(3) {
min-width: 100px;
width: 100px;
}
/* Column Width - DPA */
.dpadirectory-table th:nth-child(4) {
min-width: 150px;
width: 150px;
}
/* Column Width - Contact */
.dpadirectory-table th:nth-child(5) {
min-width: 85px;
width: 85px;
}
/* Column Width - Complaint */
.dpadirectory-table th:nth-child(6) {
min-width: 110px;
width: 110px;
}
.dpadirectory-table caption, th, td {
padding: 0.8rem;
font-size: 0.65rem;
text-align: left;
}
.dpadirectory-table caption, th {
font-weight: 700;
}
.dpadirectory-table caption {
text-transform: uppercase;
color: #000000 !important;
overflow: hidden;
background: #7dbd5b;
border-radius: 5px 5px 0 0;
}
.dpadirectory-table th {
border-bottom: 3px solid var(--md-default-fg-color--light);
}
.dpadirectory-table tr {
background: var(--md-default-bg-color--light);
}
.dpadirectory-table tr:nth-of-type(2n) {
background: hsl(0 0% 0% / 0.03);
}
.dpadirectory-table tr {
border: 3px solid transparent;
border-bottom: 0.5px solid var(--md-default-fg-color--light);
}
.dpadirectory-table tr:hover {
border: 3px solid var(--md-default-fg-color--light);
}
.dpadirectory-table td {
padding: 0.8rem;
}
.dpadirectory-contact-cell hr {
margin: 0.3rem;
max-width: 100%;
margin-left:0;
}
/* Table Colors Per Region */
:root {
--color-dpadirectory-africa: #ffe26e;
--color-dpadirectory-asia: #91d16f;
--color-dpadirectory-europe: #7fbcfc;
--color-dpadirectory-northamerica: #ff8f75;
--color-dpadirectory-oceania: #c394de;
--color-dpadirectory-southamerica: #fcb249;
}
.table-africa caption {
background: var(--color-dpadirectory-africa);
}
.table-africa tbody {
border-bottom: 3px solid var(--color-dpadirectory-africa);
}
.table-asia caption {
background: var(--color-dpadirectory-asia);
}
.table-asia tbody {
border-bottom: 3px solid var(--color-dpadirectory-asia);
}
.table-europe caption {
background: var(--color-dpadirectory-europe);
}
.table-europe tbody {
border-bottom: 3px solid var(--color-dpadirectory-europe);
}
.table-northamerica caption {
background: var(--color-dpadirectory-northamerica);
}
.table-northamerica tbody {
border-bottom: 3px solid var(--color-dpadirectory-northamerica);
}
.table-oceania caption {
background: var(--color-dpadirectory-oceania);
}
.table-oceania tbody {
border-bottom: 3px solid var(--color-dpadirectory-oceania);
}
.table-southamerica caption {
background: var(--color-dpadirectory-southamerica);
}
.table-southamerica tbody {
border-bottom: 3px solid var(--color-dpadirectory-southamerica);
}
/* DPA Directory Buttons */
.dpadirectory-button {
color: #000000 !important;
}
.dpadirectory-button-africa {
background-color: var(--color-dpadirectory-africa);
}
.dpadirectory-button-asia {
background-color: var(--color-dpadirectory-asia);
}
.dpadirectory-button-europe {
background-color: var(--color-dpadirectory-europe);
}
.dpadirectory-button-northamerica {
background-color: var(--color-dpadirectory-northamerica);
}
.dpadirectory-button-oceania {
background-color: var(--color-dpadirectory-oceania);
}
.dpadirectory-button-southamerica {
background-color: var(--color-dpadirectory-southamerica);
}
@media (max-width: 650px) {
.dpadirectory-table th {
display: none;
}
.dpadirectory-table td {
display: grid;
gap: 0.5rem;
grid-template-columns: 12ch auto;
padding: 0.3rem 1rem;
}
.dpadirectory-table td:first-child {
padding-top: 1.2rem;
grid-template-columns: 9ch auto;
font-size: 0.8rem;
font-weight: 700;
}
.dpadirectory-table td:last-child {
padding-bottom: 1.2rem;
}
.dpadirectory-table td::before {
content: attr(data-cell) ": ";
font-weight: 700;
}
}