Privacy policy

Privacy Policy

Zero-Knowledge Architecture | Tor v3 Only | PGP End-to-End

1. Absolute No-Logging Policy

1.1 IP Address Protection

All connections routed exclusively through Tor v3 onion services. No IP addresses, connection timestamps, or traffic analysis data retained on any server infrastructure. Full compliance with Tor Project privacy specifications.

1.2 Session Anonymity

Session identifiers generated client-side via PGP keypairs. No server-side correlation between user sessions, transactions, or communication threads possible. Ephemeral memory-only session handling.

1.3 Metadata Minimization

Zero retention of user agent strings, geolocation data, referrer headers, or protocol fingerprints. All communications stripped of identifiable metadata before any server-side processing occurs.

2. End-to-End PGP Encryption

2.1 Message Encryption Standard

All private messages, dispute evidence, and vendor communications require PGP encryption with 4096-bit RSA keys. Platform never possesses private keys or plaintext message content.

2.2 Key Verification

User PGP public keys verified through challenge-response authentication during account creation. Key fingerprints displayed publicly for trust verification by marketplace participants.

2.3 Storage Security

Encrypted messages stored with 256-bit AES encryption derived from user keypairs. No platform decryption capability exists. Messages auto-delete after 30 days per user preference.

Terms of Service

2-of-3 Multisig Escrow | PGP Authentication | Security-First Platform

1. Access Requirements

1.1 Tor Network Only

Exclusive access through official Tor Browser v13+. Clearnet connections prohibited. Onion v3 address rotation every 90 days for maximum anonymity preservation.

1.2 PGP + 2FA Mandatory

All accounts require PGP keypair registration plus TOTP 2FA. Single-factor authentication disabled. Key compromise requires 72-hour account freeze for mitigation.

2. Escrow & Dispute System

2.1 2-of-3 Multisig Protection

All transactions secured via Monero multisig wallets requiring buyer + seller + platform signatures. Platform holds neutral third key, releases only upon verified delivery or dispute resolution.

2.2 Automated Dispute Resolution

92% disputes auto-resolved via PGP-signed evidence analysis. Remaining 8% escalated to human arbitrators within 18 hours. Final rulings non-appealable, backed by $247M vendor bond pool.

3. Vendor Obligations

3.1 Security Bond Requirement

Verified vendors maintain $25K+ Monero security bonds. Bonds slashed for repeated violations, non-delivery, or scam activity. Current pool secures 15,000+ active listings.

3.2 PGP Verification

All vendor listings require PGP-signed PGP-signed product descriptions and shipping proofs. Manual verification every 14 days. Non-compliant listings auto-removed.