Decentralized P2P exchange using Monero (XMR) as settlement currency. Tor-only, non-custodial, security deposit model. No KYC by design. (Zero KYC)
The privacy service directory
Private finance, communications, infrastructure, and surveillance.
162 services · 14 categories
DirectoryBrowse by category or search by name. Every service links to its sources.Browse all services →Map: how surveillance systems, laws, and tools relate →
Tool setsStart from a situation instead of a category. Each set lists the services and setup guides for it.View all tool sets →
ServicesA cross-section of the directory. Read the service page and its sources before choosing.View all services →How trust scoring works →
Anonymous VPN using numbered accounts. Official policy says no activity logging; accepts cash, Bitcoin, Bitcoin Cash, Monero, bank wire, cards, PayPal, Swish, and regional payments.
Privacy-focused crypto swap rate aggregator. Trocador supports private swaps with popular coins including XMR and offers prepaid cards, gift cards, DeFi/bridge, and AnonPay surfaces.
Privacy and security focused Android-compatible mobile OS for Pixel devices. Free/open-source; no account is required to install or use, and project donations support development/infrastructure/legal costs.
A free, open-source Monero wallet for desktop. Connects via Tor by default, heavily optimized for privacy and power users.
Anonymous global eSIM/data service. Homepage says no KYC, no data limits, no expiration, 160+ countries and payment with Bitcoin, Lightning, Monero, USDT or other crypto.
Topics
- 01What the KIDS Act Would Change OnlineThe House passed the KIDS Act on June 29, 2026. The bill would require age checks on some sites and change privacy, messaging, and content rules for minors.~8 min read
- 02unbroker: Consent-Gated Data Broker Removalunbroker is an open-source Hermes Agent skill for consent-gated data broker removal, local ledgers, least-disclosure requests, human fallback, and recurring re-scans.~5 min read
- 03How to Self-Host unbroker for Data Broker RemovalA practical guide to running unbroker locally or on an isolated server, with consent, local dossiers, browser/email modes, DROP, human fallback, and re-scans.~8 min read
- 04AI Agent Payment Protocols ComparedA privacy-first comparison of AP2, x402, and MPP for AI-agent payments: authorization, HTTP 402 challenges, settlement rails, logs, wallets, and metadata exposure.~5 min read
- 05Privacy.com MCP Is Spend Control, Not AnonymityPrivacy.com MCP gives AI tools access to virtual-card controls, but identity checks and linked funding make it spend control, not anonymous money.~4 min read
- 06Agent Wallet Threat Model: Keys, Sessions, Budgets, and ReceiptsA practical threat model for AI-agent wallets: key custody, prompt injection, sessions, budgets, receipts, approval policies, wallet reuse, and privacy logs.~5 min read
- 07Pay Per Crawl and the Paid Web: Privacy Risks of HTTP 402How x402 and pay-per-crawl can connect AI-agent requests to wallets, accounts, facilitators, timing, and resource metadata.~4 min read
- 08Virtual Cards vs Stablecoin Wallets for AI AgentsA privacy-first comparison of virtual cards and stablecoin wallets for AI-agent spending: KYC, issuer logs, onchain history, revocation, budgets, and merchant fit.~4 min read
Frequently Asked Questions
What is Cunicula?
A directory of privacy services: exchanges, VPNs, email, wallets, hosting, and more, with articles on surveillance and financial privacy. Every listing links to its sources. A listing is not an endorsement.
How are services evaluated?
By documented behavior, not marketing. For each service we check what it asks for at signup, what it can log, who runs it, which jurisdiction it answers to, and whether those claims have current sources.
What does "no-KYC" mean?
The service does not require identity documents to use. Some services are fully no-KYC, some ask for ID only above certain limits, and some always require it. Each service page states which applies.
What should I check before using a privacy tool?
The service page and its sources. Look at what the tool requires, what it logs, who owns it, where it is based, and whether it actually addresses the risk you care about.