The shop is not open yet: no purchase or payment is possible at this time. Égide is in a free testing phase.
Our principle

Our security model

Égide is designed against a determined, technically advanced adversary. Every decision follows one simple principle: the vendor must never be able to betray you.

No secrets on our servers

Your phone cryptographically signs its communications with a key sealed in its secure processor. On the enrolment side, our servers hold only public keys: a breach would compromise neither your device nor your identity.

Everything over Tor

Updates and commands travel through a Tor hidden service embedded in the app. No domain to watch, no destination address readable on the network.

Two methods, two degrees of privacy

One single price, but not the same trace. In Monero, every order gets its own subaddress: no order is linked to another. We host the gateway ourselves, the funds pass through no third party, and the key that allows them to be spent stays offline. By card, a payment provider and your bank see the purchase; our order database, for its part, retains nothing but a transaction identifier. The line-by-line detail is on the order page.

What we hold, and what we do not

On our servers

  • Orders without identity: reference, amount, timestamp, no name
  • The public keys of enrolled devices, which cannot be used to harm you
  • Your licence key (valid until used, single-use), kept with the order data

Nowhere on our side

  • Your identity: no account, no e-mail address, no name (no access log has been kept to date, see the privacy policy)
  • Your remote wipe program, generated on your side, never transmitted
  • Your phone's contents or location
  • Your means of payment: in Monero, there is nothing to entrust to a third party; by card, the transaction data passes through our payment provider and never reaches our servers

What we do not promise

No “military-grade anonymity”, no “unbreakable”, no magic. We promise one thing, and it is verifiable: an architecture in which what matters most does not belong to us, neither your identity nor the key that wipes your phone. This is not a contractual undertaking, it is a consequence of the way the product is built.