End-to-end encrypted privacy-first web analytics
Tools from EFF's Tech Team
EFF’s team of technologists and computer scientists engineers solutions to the problems of sneaky tracking, inconsistent encryption, and more. Where users face threats to their privacy and security
NextGraph - Decentralized, encrypted and local-first platform and framework, towards the better internet we all deserve!
Features a social network, shared documents, productivity tools, an app store, and more! You can use NextGraph for free : resilient, secure, private and encrypted. You own your data and software! Developers can build new web3.0 local-first apps with our open source framework, based on open standards, with CRDTs, E2EE, Linked Data, JSON, Markdown...
CyberChef
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
Which browsers are best for privacy?
An open-source privacy audit of popular web browsers.
https://www.cloudflare.com/ja-jp/press/press-releases/2026/cloudflare-collaborates-with-leading-browsers-to-develop-a-privacy-first-protocol-for-the-global-internet/
Mozilla、Google、Microsoft、Shopifyと共同開発する新しいプライベートアクセス制御トークン（PACT）技術で、グローバルインターネット上のインタラクションを保護するプライバシーアーキテクチャの基礎を構築
Configurable Per-Query Data Minimization for Privacy-Compliant Web APIs
The purpose of regulatory data minimization obligations is to limit personal data to the absolute minimum necessary for a given context. Beyond the initial data collection, storage, and...
Hashing PII does not Protect Privacy | Rainbow table attack
It's trivial to reverse cryptographic hash functions if you know the input consists of names, social security numbers, etc. from a limited set of possible values.
bsky.app | WhoTracks.Me
Explore the tracking landscape of bsky.app on WhoTracks.Me, revealing the most common trackers like Sentry and their impact on privacy
Cryptomator - Free & Open-Source Cloud Storage Encryption
Cryptomator is an open-source encryption tool for secure cloud storage. Protect your privacy for free on Dropbox, Google Drive, OneDrive, and more.
Google Broke Its Promise to Me. Now ICE Has My Data.
In 2025, Google gave Amandla Thomas-Johnson's data to ICE without giving him the chance to challenge the subpoena, breaking a nearly decade-long promise to notify users before handing their data to
CryptPad: end-to-end encrypted collaboration suite
CryptPad: end-to-end encrypted collaboration suite
CryptPad: end-to-end encrypted collaboration suite
CryptPad: end-to-end encrypted collaboration suite
Nextcloud vs. CryptPad: Which Privacy-First Collaboration Tool is Right for You?
Two offerings that promise privacy and control, yet each takes a different path.
Websites have a new way to spy on visitors: Analyzing their SSD activity
Telltale SSD activity can be measured in the browser using simple JavaScript.
@cozylittle.house has been advocating for something like this for a bit! I think it's tricky to get right but if we *do* it could be really awesome! There's an opportunity here to have *better* analytics and information shared than the web analytics status quo
Andrew Lisowski 💻
I’m still open to hitting an an xrpc endpoint so you can track the traffic 🙂
new data diary! this is the most in the weeds yet, all revolving around our proposed URI structure for permissioned data. turns out you can figure out a lot about a protocol from the uri! as always, let me know what you think :)
Permissioned Data Diary 5: What’s in a Name?
dholms.leaflet.pub
