Privacy

What we keep

• Your PGP public key + fingerprint
• Your username
• Order data (encrypted with AES-256-GCM, at rest)
• A session cookie — it holds an ID, nothing personal

What we don't

• Your private key never touches this server. Ever.
• No IP logging, no browser fingerprinting
• No email, no phone, no real name
• No analytics, no tracking pixels, no third-party anything

Why no JavaScript

Every page here is plain HTML and CSS rendered on the server. Nothing executes in your browser. That means Tor Browser on Safest mode works out of the box — which is how you should be running it.