A Google Pixel running privacy-hardened Android (GrapheneOS) — professionally flashed, hardened, and verified-boot re-locked. Add a Pixel eSIM for travel data in 170+ countries. No name, no ID, no account, ready the moment it arrives.
Pay in cryptocurrency
No card, no bank and no name in the transaction. Of the four, only Monero is private at the protocol level — the rest settle on public ledgers, so they are pseudonymous rather than anonymous.
Buy the device, just the private connectivity, or both — pick what you came for.
Privacy-hardened Android brings defenses that stock phones simply don't ship with. Here's what's working for you, quietly, all the time.
Apps run in tight sandboxes with no privileged access to the rest of your device — including optional, sandboxed Google Play.
It is the difference between an app being asked not to look and an app not being able to. Everything below follows from it.
A hardened memory allocator and compiler mitigations block whole classes of exploits before they can run.
Grant or revoke internet access for any app — even the ones that assume they're entitled to it.
Set a secondary PIN that instantly wipes the device if you're ever forced to unlock it.
Idle devices reboot back into a stronger at-rest encryption state, shrinking the window for physical attacks.
No Google account, no background analytics, no data broker sitting quietly in the middle.
You choose the device. We do the technical heavy lifting. You get a phone that's private out of the box.
Pick a Pixel model and storage. We keep only officially supported devices.
We install privacy-hardened Android and apply our hardened configuration.
The bootloader is re-locked with the OS's own keys — tamper-evident from boot.
Discreet, unbranded packaging. You complete first-boot setup yourself.
Same Pixel hardware. A fundamentally different relationship with your data.
| Feature | Stock Android | Hardened |
|---|---|---|
| Google account required | Effectively yes | Never |
| Background telemetry | Extensive | None from the OS |
| Per-app network control | Limited | Full toggle |
| Sensor and camera access | Coarse | Per-app, revocable |
| Hardened memory allocator | No | Yes |
| Verified boot after modification | Locked, but vendor-controlled | Locked, with the new OS's own keys |
| Update source | Carrier and vendor, often delayed | Direct from the OS project |
| Duress and lockdown options | Basic lockdown | Duress PIN, auto-reboot, PIN scrambling |
No account, no email — just tools worth bookmarking.
Security you have to take on faith isn't security. Everything we ship can be independently verified — by you.
We document exactly how to confirm your device runs genuine, unmodified GrapheneOS — using public tools, not our word.
Read the verification guideAttestation is the GrapheneOS project's, not ours. Their Auditor app and published guide verify the device's firmware and keys independently of anything we say.
GrapheneOS attestation guideYour phone cryptographically checks its own integrity at every boot and warns you if anything was ever tampered with.
GrapheneOS is fully open source. Every line of the system protecting you is public and reviewed by a worldwide community.
A prepaid eSIM for travel across 170+ countries — no ID, no SIM swap, nothing stored about you. Pay in crypto, scan a QR, and you're online in minutes.
Most phones sold in the EU since 2019 take an eSIM, but “most” isn't “yours” — regional variants of the same model sometimes leave the hardware out. Our free checker lists eSIM supported devices by make and model, so you know before you pay. Every phone we sell is eSIM-ready out of the box.
Check your deviceGuides and explainers on hardening your phone, staying private while travelling, and what the jargon actually means.
Discover why eSIMs are often safer than plastic SIMs, what USENIX 2025 and GSMA standards reveal, and five practical steps to secure your eSIM. Share this: Share on X (Opens in new window) X Share on Facebook (Opens in new window) Facebook
Stop SIM swap attacks: lock your carrier with a unique PIN, replace SMS MFA with an authenticator or hardware key, and consider an anonymous eSIM. Share this: Share on X (Opens in new window) X Share on Facebook (Opens in new window)…
Four privacy first ways to install Android apps without Google, with APK verification steps and a GrapheneOS alternative. Share this: Share on X (Opens in new window) X Share on Facebook (Opens in new window) Facebook
No. GrapheneOS is an independent open-source project. We are not affiliated with it, not endorsed by it, and we do not speak for it.
What we sell is a service: we take a supported Google Pixel, install privacy-hardened Android (GrapheneOS), configure it, re-lock verified boot, and test it before it ships. The operating system itself is free software that anyone can download and install without paying us anything.
If you would rather do it yourself, you should — it is genuinely free, and the project publishes clear instructions. Our free hardening checklist covers the same configuration decisions we make, whether or not you buy from us.
A hardened phone, an anonymous eSIM, a real number or a one-time code — bought without a name. Paid in crypto, nothing stored.
Just need travel data? Browse anonymous eSIMs
