// Trust · infrastructure

Off-grid by default.

Every layer runs on privacy-first, offshore infrastructure — no AWS, no Google, no Cloudflare, no KYC registrar. Registered by proxy, paid in crypto, parked in a jurisdiction chosen for its privacy law.

// INFRASTRUCTURE · NO MAINSTREAM ROUTING
DOMAINRegistered by proxy through a privacy-first registrar. Names + .onion. No KYC, no mainstream registrar.
ORIGINOffshore VPS or dedicated, chosen for the workload. Clearnet, .onion, or both.
PAYMENTXMR preferred, BTC secondary. Self-hosted BTCPay. Multisig escrow where value moves. Never in our custody.
COMMSPGP order flow. Dead-drop message queue. No plaintext, no third-party chat.
KILLDead-man switch — origin wipes and rotates on compromise or missed check-in.
DATAEncrypted at rest. No app analytics. Client systems hold nothing we can reach after handover. Clearnet hosts may still log IPs — see Legal.
BACKUPEncrypted mirrors on a separate offshore host and jurisdiction. Client-held keys only. No cloud sync — restores intentional.
$ register by proxy. host offshore. escrow, not custody. no app analytics._
// Banned — mainstream & traceable
AWS · GCP · Azure · Cloudflare · GoDaddy · KYC registrars · Vercel · Netlify · Google Fonts · Analytics · Gmail / O365 · Stripe · PayPal
// No single point of custody

Payment and hot-standby sit on a separate offshore host from the marketing origin. Contact mail uses a privacy-focused mailbox host, not mainstream webmail. Name and origin use privacy-first infrastructure under strong statutory privacy — they may share a stack; a pull on one layer does not hand over payment or mail. On a compromise, the dead-man switch wipes and rotates before anyone reaches the data.

// Tor mirror

Full site mirror for when clearnet is blocked or down. Open in Tor Browser only. Same Trust, FAQ, pricing and contact as apex. Checkout has a separate BTCPay onion — see Donate.

3oknpeyjpk2jngkt22v7fq4xjlh4pj2g4ohn2rn7usglm5oez37hrkid.onion

// This clearnet surface

Marketing HTML, payment checkout, and contact mail run on separate systems — privacy-first providers, no shared app stack. Name and marketing origin may share a registrar/host path; checkout does not. Marketing HTML is static, first-party only, and separate from checkout. Host access logs on clearnet are outside our app stack — assume IPs may be retained; details on Legal. Clearnet vs Tor in plain terms: FAQ →