PrivacyTools.io

Made in Europe tools

Pre-filtered. Stack more filters in the sidebar to narrow down. 282 tools.

Sort: Trending today

Ranked by GitHub stars gained in the last 24 hours, so trending movers sit up top.

Ollama logo

Ollama

Ollama lets you download and run large language models locally via a simple CLI and REST API. Supports a growing library of open models including Llama, Mistral, and Gemma on Windows, Mac, and Linux with no data sent to the cloud.

uBlock Origin logo

uBlock Origin

uBlock is a lightweight, open-source, and free Chrome privacy browser extension that is used to block ads and other online trackers. It’s designed to be user-friendly and…

NewPipe logo

NewPipe

NewPipe is a libre Android app for streaming content from YouTube, SoundCloud, PeerTube, Bandcamp, and media.ccc.de without Google Play Services, accounts, or ads. It stores subscriptions and playlists locally and is available on F-Droid.

KoboldCpp logo

KoboldCpp

KoboldCpp is a self-contained local AI inference tool with a built-in web UI. It runs GGUF text, image, and speech models with no installation beyond a single binary, primarily aimed at creative writing and roleplay workflows.

NixOS logo

NixOS

NixOS is a Linux distribution built entirely on the Nix package manager, where the whole system - kernel, packages, services, and configuration - is declared in a single set of files. Upgrades are atomic and fully reproducible rollbacks are a built-in feature.

llamafile logo

llamafile

A Mozilla project that packages a complete LLM and its runtime into a single executable file. Download one file, run it on Windows, Mac, or Linux with no installation, no dependencies, and no network connection required.

Android - K-9 Mail logo

Android - K-9 Mail

K-9 Mail is an open source email client focused on making it easy to chew through large volumes of email. Designed for both novice and power users and offers lots of features…

OUR APP
VERNAM logo

VERNAM

A free, fully client-side file encryptor that runs in your browser. Drop in any file, set or generate a passphrase, and it seals the result into its own .vrn format. Nothing is ever uploaded, and it works offline.

Vikunja logo

Vikunja

The project is still under development and the native apps are not final yet, but the web version works great. Offers an import feature from Todoist, Trello and Microsoft To-Do.

FreeTube logo

FreeTube

FreeTube is an open-source desktop YouTube client for Windows, macOS, and Linux. It uses a built-in local extractor or the Invidious API to fetch content, blocks ads by default, and stores subscriptions, history, and playlists entirely on your device.

Miniflux logo

Miniflux

Minimalist self-hosted RSS and Atom feed reader written in Go. Runs as a single static binary against PostgreSQL, with a responsive web UI and compatibility APIs for mobile clients like Reeder.

addy.io logo

addy.io

addy.io is an open-source email aliasing service that lets you create unlimited aliases forwarding to your real inbox. Available on web, browser extensions for all major browsers, and Android/iOS apps. Self-hostable. Based in the United Kingdom.

FairEmail logo

FairEmail

FairEmail is a fully featured, open-source email client for Android that uses standard IMAP/SMTP protocols and supports OpenPGP and S/MIME encryption. It blocks remote image tracking, confirms link opens, and stores no data on third-party servers.

LibreTube logo

LibreTube

LibreTube is an open-source Android YouTube client that routes requests through the Piped API instead of Google directly. It supports SponsorBlock, ReturnYouTubeDislike, DeArrow, subscriptions, playlists, and background playback, with a Material 3 interface.

KeePassDX logo

KeePassDX

KeePassDX is a lightweight, open-source KeePass-compatible password manager for Android, storing credentials in a local encrypted database file (.kdbx) with support for biometric unlock, autofill, TOTP, and passkeys.

Redlib logo

Redlib

Redlib is an open-source, self-hostable web frontend for Reddit built in Rust. It proxies all content through the server, including media, so Reddit never sees your IP address or tracks you with cookies or JavaScript.

gopass logo

gopass

gopass is an open-source, command-line password manager written in Go, compatible with the Unix pass store format. Credentials are encrypted with GPG (or age) and versioned in git, with packages available for Linux, macOS, and Windows.

SimpleLogin logo

SimpleLogin

Ad · Emails are forwarded to your real email address. If you reply to a sender it will use your alias, too. It is designed to be user friendly and available on many platforms. Based…

ExifTool logo

ExifTool

ExifTool is a long-standing Perl library and command-line tool for reading, writing, and erasing metadata across an exceptionally wide range of file formats, including JPEG, RAW camera formats, PDF, video, audio, and Office documents.

uBlock Origin Lite logo

uBlock Origin Lite

Permission-light Manifest V3 content blocker for Chrome, Edge, and Safari, built by Raymond Hill as the MV3 sibling of uBlock Origin. Blocks ads and trackers declaratively with no persistent background process.

MAT2 logo

MAT2

MAT2 (Metadata Anonymisation Toolkit 2) removes embedded metadata from images, PDFs, audio files, office documents, and more. It runs as a CLI tool or as a file-manager extension for Nautilus and Dolphin on Linux.

Piped logo

Piped

Piped is an open-source, self-hostable web frontend for YouTube that makes no connections to Google servers during playback. It supports SponsorBlock, playlists, subscriptions, and a public JSON API, and runs as a federated multi-instance network.

PrivateBin logo

PrivateBin

A minimalist open-source pastebin where the server has zero knowledge of pasted data. Content is encrypted and decrypted entirely in the browser using 256-bit AES-GCM before anything touches the server, with the decryption key stored only in the URL fragment.

NeoMutt logo

NeoMutt

NeoMutt is a command-line email client for Linux and macOS, forked from Mutt with a large collection of patches and added features. It supports IMAP, POP3, SMTP, OpenPGP, S/MIME, Notmuch search integration, and is highly configurable via a plain-text config file.

Orbot logo

Orbot

Free, open-source Tor VPN app for Android and iOS that routes device traffic through the Tor network. Supports per-app Tor routing and access to .onion services on Android.

Linguist logo

Linguist

Linguist is not just another browser extension. It's a full-featured translation system that respects your privacy. Translate offline on your device, use any translation…

secureblue logo

secureblue

secureblue is a security-hardened immutable Linux OS built on Fedora Atomic Desktops. It ships as OCI bootable container images and applies kernel hardening, a hardened memory allocator from GrapheneOS, and a hardened Chromium browser called Trivalent.

OPNsense logo

OPNsense

OPNsense is a FreeBSD-based open-source firewall and routing platform, forked from pfSense. It provides a web-based interface for stateful firewall rules, VPN (WireGuard, OpenVPN, IPsec), traffic shaping, intrusion detection via Suricata, and a plugin system.

Molly logo

Molly

Hardened fork of Signal for Android that adds an encrypted local database, automatic RAM wiping on lock, and Tor/SOCKS proxy support via Orbot. Ships in two variants: one with FCM push and one fully FOSS without Google.

Workrave logo

Workrave

It monitors your keyboard and mouse usage and using this information, it frequently alerts you to take microbreaks, rest breaks and restricts you to your daily computer usage.

Tomb logo

Tomb

Tomb is an open-source Linux CLI tool that creates and manages encrypted volumes using dm-crypt and LUKS. It wraps the standard kernel encryption stack in a simple shell script, with optional steganographic key hiding and FIDO2 support.

Kicksecure logo

Kicksecure

Kicksecure is a security-hardened Debian-based Linux distribution that applies a broad set of kernel and userspace hardening settings out of the box, reducing the attack surface without requiring manual configuration. It also serves as the foundation for the Whonix anonymity OS.

HOPR logo

HOPR

HOPR’s decentralized, incentivized mixnet obscures all metadata, including IP addresses, making it impossible to tell anything about who is communicating and what data they’re…

OUR APP
PrivacyNotes logo

PrivacyNotes

Zero-knowledge notes, tasks, files, passwords and journal secured by a single 12-word recovery phrase, with no email or password required. The crypto core and database schema are published for audit. No subscription model.

Haven logo

Haven

An Android application that leverages on-device sensors to provide monitoring and protection of physical areas. Turns Android phones into a motion, sound, vibration and light…

2FAS logo

2FAS

Features: Device synchronization, modern user-interface and backups. The main advantages are the browser extensions that enable one-tap authentication and no need to switch…

GnuPG logo

GnuPG

GnuPG (GNU Privacy Guard) is the free, GPL-licensed implementation of the OpenPGP standard. A command-line tool for Linux, macOS, and Windows, it encrypts and signs files and email, and manages public-key directories.

Raivo OTP logo

Raivo OTP

Unlisted for now because Raivo was sold, and the new owner wasn't able to clarify concerns listed in the GitHub discussion. The warning will be removed once the situation is…

Auditor logo

Auditor

Android app by GrapheneOS that uses hardware-backed attestation to verify the integrity and authenticity of a supported device and its operating system, confirming it has not been tampered with.

paaster logo

paaster

An end-to-end encrypted pastebin that encrypts content in the browser using XChaCha20-Poly1305 and Argon2id before upload. The decryption key stays in the URL fragment and never reaches the server, with no opt-out: every paste is always encrypted.

Kryptor logo

Kryptor

Kryptor is a free, open-source file encryption and signing CLI for Windows, Linux, and macOS. It uses modern primitives via libsodium (XChaCha20-Poly1305, Argon2id, Ed25519) with no configuration options and encrypts file names optionally.

Nitrokey logo

Nitrokey

Open-source hardware security key line from Berlin-based Nitrokey, with models ranging from the FIDO2-only Nitrokey Passkey to the Nitrokey 3, which adds PIV smart card, OpenPGP, and TOTP support.

DNSCloak logo

DNSCloak

(iOS) Allows for the use for dnscrypt-proxy on an iPhone or iPad, which gives users the ability to encrypt their DNS requests through the use of an on-device VPN profile.

Euki logo

Euki

Reliable, evidence-based sexual and reproductive health information. Euki takes privacy seriously. They do not store any of the information you enter into the app in the cloud…

KeePassium logo

KeePassium

KeePassium is a KeePass-compatible password manager for iOS and macOS, offering biometric unlock, Password AutoFill, automatic sync with iCloud Drive and cloud storage providers, and read/write support for all KeePass database formats.

1Password logo

1Password

1Password is a commercial password manager for individuals, families, and teams, available on Windows, Mac, Linux, Android, iOS, and all major browsers. It uses a dual-key architecture combining your master password with a locally generated Secret Key.

AdGuard logo

AdGuard

Ad · This is an extremely advanced Safari ad-blocker that will make you forget about annoying pop-ups and speed up loading time. It also protects your personal data and allows you…

Akregator logo

Akregator

KDE's desktop RSS and Atom feed reader, part of the Kontact personal information management suite. Runs on Linux and Windows, with an integrated article browser, fast search, and feed archiving.

Apple Fitness logo

Apple Fitness

Apple's built-in activity and fitness tracker for iPhone and Apple Watch, with health data processed on-device and synced to iCloud using end-to-end encryption that Apple cannot read.

Apple Health logo

Apple Health

Already pre-installed and secure on your Apple device. The Health app was created to help organize your important health information and make it easy to access in a central and…

Apple Mail logo

Apple Mail

Apple Mail is the built-in email client on macOS and iOS, supporting IMAP, SMTP, and S/MIME. Mail Privacy Protection hides the user's IP address and loads remote content via Apple proxy servers to block tracking pixels.

Arch Linux logo

Arch Linux

Arch Linux is a minimal, rolling-release Linux distribution built around a do-it-yourself philosophy. You assemble the system yourself from a bare base, choosing every component, and keep it current with the pacman package manager.

AutoSleep logo

AutoSleep

Automatically tracks your sleep from your Apple Watch with total privacy.

Bahnhof Cloud logo

Bahnhof Cloud

Based in Sweden, founded in 1994. Payments only with Credit Card or PayPal.

BitLocker logo

BitLocker

BitLocker is the built-in full-disk encryption feature in Windows Pro, Enterprise, and Education editions. It encrypts the operating system drive and fixed data drives using AES-XTS, with optional TPM-backed pre-boot authentication.

Control D logo

Control D

Customizable encrypted DNS resolver supporting DoH, DoT, DoQ, and legacy DNS. Offers a free no-log tier and paid plans with a dashboard, per-device profiles, and content filtering.

Decentraleyes logo

Decentraleyes

Decentraleyes is a browser extension that protects your privacy by ensuring that the data you send and receive from the websites you visit is never sent to or shared with any…

Deeper Network logo

Deeper Network

This decentralized VPN hardware product comes with six powerful features: dVPN, security, IoT device protection, ad blocking incl. YouTube, one-click parental controls and…

DeepL Translate logo

DeepL Translate

Warning: The free version of DeepL does not respect your privacy, only the paid pro version. Source: Privacy Policy. The texts of free users are used to train and improve the…

Disroot logo

Disroot

Free plans support custom domains. Users can choose between their web client or third party desktop clients like Thunderbird. Disroot allows for encrypted emails to be sent…

drip logo

drip

Respects your privacy. No collection of usage data or personal information, no ads, no spyware. Drip stores data related to menstrual health locally on your device. Read the…

EFF logo

EFF

Electronic Frontier Foundation offers tips, tools and how-tos for safer online communications.

Fedora Atomic Desktops logo

Fedora Atomic Desktops

Fedora Atomic Desktops (Silverblue, Kinoite, and others) are immutable Fedora variants where the base OS is read-only and updated atomically via rpm-ostree. Applications run as Flatpaks, and rollback to a prior OS image is built in.

FileVault logo

FileVault

FileVault is the built-in full-disk encryption feature in macOS. On Macs with Apple silicon or a T2 chip, data is encrypted by hardware by default; enabling FileVault adds a login-password gate that prevents decryption without your credentials.

GNOME Evolution logo

GNOME Evolution

GNOME Evolution is a Linux personal information manager combining email, calendar, contacts, and tasks in one application. It uses standard protocols (IMAP, SMTP, CalDAV, CardDAV) and supports native OpenPGP and S/MIME encryption without plugins.

Google Pixel logo

Google Pixel

Google's own Android phone line, recommended as the hardware base for a de-Googled setup because it ships with an unlockable bootloader, a Titan M secure element, and multi-year guaranteed security update commitments.

GPG Suite logo

GPG Suite

GPG Suite brings OpenPGP encryption to macOS through a unified package: GPG Keychain for key management, GPG Mail for Apple Mail integration, GPG Services for system-wide encrypt/sign actions, and MacGPG as the underlying engine.

Gpg4win logo

Gpg4win

Gpg4win is the official Windows installer for GnuPG, bundling the Kleopatra certificate manager and GpgOL for Outlook integration. It provides OpenPGP and S/MIME encryption for files and email on Windows.

HeartWatch logo

HeartWatch

Get a complete picture of all the health & fitness information captured by your Apple Watch. No user analytics tracking. No advertising plugins. No 3rd party code. No data upload.

iMazing logo

iMazing

iOS and iPadOS device manager for Windows and macOS that includes a free built-in spyware analyzer, powered by MVT detection logic, to scan a device backup for signs of compromise.

Incogni logo

Incogni

Ad · Hundreds of companies trade your personal data without you knowing. Incogni gets it deleted for you. US, UK, CA, CH and EU.

Kontact logo

Kontact

Kontact is the KDE personal information management suite that combines KMail (email), KOrganizer (calendar), KAddressBook, and a feed reader into a single unified window. It runs on Linux and supports IMAP, POP3, OpenPGP, and S/MIME natively.

LUKS logo

LUKS

LUKS (Linux Unified Key Setup) is the standard disk-encryption specification for Linux, implemented by the cryptsetup utility. It provides a header format and key-slot system on top of the dm-crypt kernel module, supporting multiple decryption passphrases per volume.

Mojeek logo

Mojeek

A crawler-based search engine that provides independent search results using its own index of web pages, rather than using results from other search engines. Based in the UK.…

Mullvad DNS logo

Mullvad DNS

Free public encrypted DNS resolver from Mullvad VPN, supporting DoH and DoT. Available in six filtering variants including ad-blocking, malware, and family-safe options. No account required.

NewsFlash logo

NewsFlash

Modern GTK RSS reader for Linux desktop, designed to pair with a web-based feed service such as Nextcloud News, Miniflux, or Feedbin. Adaptive layout, fast full-text search, and desktop notifications.

NextDNS logo

NextDNS

Ad · The major advantage of NextDNS over AdGuard DNS is to be able to configure the service to your needs via parental controls, website restrictions or block whole categories of…

Njalla logo

Njalla

Based in Sweden, founded in 2017 by Peter Sunde the Co-founder of The Pirate Bay.

NordPass logo

NordPass

Ad · Audited by an independent cybersecurity firm Cure53 in Feb 2020 and confirmed the security of NordPass. Offers browser extensions for Chrome, Firefox, Edge, Brave, Opera and…

NordVPN logo

NordVPN

Ad · Based in Panama. Operating since 2012. Accepts Bitcoin, ETH and more via Coingate. Native desktop and mobile clients are available for Android and iOS. Money back guarantee for…

openSUSE Tumbleweed logo

openSUSE Tumbleweed

openSUSE Tumbleweed is a rolling-release Linux distribution that defaults to Btrfs with Snapper snapshots, letting you boot into a previous system state if an update breaks something. Available with KDE, GNOME, or Xfce.

Org-mode logo

Org-mode

A GNU Emacs major mode for keeping notes, managing to-do lists, planning projects, and authoring documents in plain text. Files are stored locally on Windows, Mac, and Linux; no account or cloud dependency required.

Privex logo

Privex

Ad · Based in Belize, founded in 2017. Server locations: Finland, Germany, USA, Sweden, Netherlands, Canada and Japan. Accepted cryptocurrencies: Bitcoin, Litecoin, HIVE / HBD,…

Proton Pass logo

Proton Pass

Ad · Open-source, end-to-end encrypted password manager from the maker of Proton Mail, based in Switzerland. Stores logins, notes, and cards, with built-in email aliasing via SimpleLogin. Apps for Windows, macOS, Linux, Android, iOS, and the major browsers.

Psono logo

Psono

Psono is an open-source, self-hostable password manager built for teams and organisations, with browser extensions for all major browsers plus Android and iOS apps. Secrets are end-to-end encrypted client-side before reaching the server.

Snowflake logo

Snowflake

Tor pluggable transport that disguises Tor traffic as WebRTC video calls to bypass censorship. Built into Tor Browser and Orbot; also available as a browser extension for volunteers to run a proxy.

Spectre logo

Spectre

Formerly Master Password. Passwords aren't stored: they are generated on-demand from your name, the site, and your master password. No syncing, backups, or internet access…

StartMail logo

StartMail

Ad · First choice for privacy email accounts. Users can choose between their web client or third party desktop clients like Thunderbird. Unlimited aliases with the StartMail and…

Surfshark logo

Surfshark

Ad · Based in The Netherlands. Operating since 2018. Obfuscated, RAM-only servers. Audited by a reputable German cybersecurity firm Cure53. Currently 3 months FREE. Unlimited devices.

Tresorit logo

Tresorit

End-to-end encrypted cloud storage founded in 2011, owned by Swiss Post, the national postal service of Switzerland. Closed-source clients with multiple independent security audits; available on Windows, Mac, Linux, Android, and iOS.

YubiKey 5 Series logo

YubiKey 5 Series

Full-featured hardware security key from Yubico supporting FIDO2/WebAuthn, TOTP/HOTP, smart card (PIV), and OpenPGP across multiple form factors including USB-A, USB-C, and NFC variants.