GDPR-Transparency-and-Consent-Framework - Technical specifications for IAB Europe Transparency and Consent Framework that will help the digital advertising industry interpret and comply with EU rules on data protection and privacy - notably the General Data Protection Regulation (GDPR) that comes into effect on May 25, 2018

•    Javascript

---

Hosted in this repository are the technical specifications for IAB Europe Transparency and Consent Framework that will help the digital advertising industry interpret and comply with EU rules on data protection and privacy - notably the General Data Protection Regulation (GDPR) that comes into effect on May 25, 2018. In November 2017, IAB Europe and a cross-section of the publishing and advertising industry, announced a new Transparency & Consent Framework to help publishers, advertisers and technology companies comply with key elements of GDPR. The Framework will give the publishing and advertising industries a common language with which to communicate consumer consent for the delivery of relevant online advertising and content. IAB Tech Lab is charged with the technical governance of these specifications.

Apache Unomi - The Open Source Customer Data Platform

•    Java

---

Apache Unomi (pronounced "You know me") is a Java Open Source customer data platform, a Java server designed to manage customers, leads and visitors data and help personalize customers experiences while also offering features to respect visitor privacy rules (such as GDPR).

data-platform user-profiles profile-management user-tracking event-tracking visitors-tracking user-personalization oasis analytics user-analytics page-clicks

Acra - Database protection suite with selective encryption and intrusion detection

•    Go

---

Acra helps you to easily secure your databases in distributed, microservice-rich environments. It allows you to selectively encrypt sensitive records with strong multi-layer cryptography, detect potential intrusions and SQL injections and cryptographically compartment data stored in large sharded schemes. It's security model guarantees that compromising the database or your application does not leak sensitive data, or keys to decrypt it.

database-security database-encryption encryption intrusion-detection security database-proxy

Iridium Browser - A browser securing your privacy. That’s it.

•    C

---

Iridium is a free, open, and libre browser modification of the Chromium code base, with privacy being enhanced in several key areas. Automatic transmission of partial queries, keywords, metrics to central services inhibited and only occurs with consent. In addition, all our builds are reproducible, and modifications are auditable, setting the project ahead of other secure browser providers.

web-browser browser chromium chrome privacy security

Plausible Analytics - Simple, open-source, lightweight (< 1 KB) and privacy-friendly web analytics alternative to Google Analytics

•    Elixir

---

Plausible Analytics is a simple, lightweight (< 1 KB), open-source and privacy-friendly alternative to Google Analytics. It doesn’t use cookies and is fully compliant with GDPR, CCPA and PECR. You can self-host Plausible or have us run it for you in the Cloud. It is easy to understand and it cuts through the noise. Check your site traffic and get all the essential insights on one page in one minute. There are no layers of menus, there is no need for you to build custom reports, custom dashboards or PowerPoint documents.

website charts marketing cloud privacy statistics elixir phoenix analytics metrics clickhouse google-analytics web-analytics postgresql website-analytics tailwindcss plausible-analytics website-stats google-analytics-alternative self-hosted

Cryptomator - Multi-platform transparent client-side encryption of your files in the cloud

•    Java

---

Cryptomator offers multi-platform transparent client-side encryption of your files in the cloud. Most cloud providers encrypt data only during transmission or they keep the keys for decryption for themselves. These keys can be stolen, copied, or misused. With Cryptomator, the key to your data is in your hands. Cryptomator encrypts your data quickly and easily. Afterwards you upload them protected to your favorite cloud service.

cryptomator cloud-storage cryptography crypto security privacy encryption-tools encryption file-encryption secure-cloud

immudb - world’s fastest immutable database

•    Go

---

immudb is a database with built-in cryptographic proof and verification. It can track changes in sensitive data and the integrity of the history will be protected by the clients, without the need to trust the server. It can operate as a key-value store or as relational database (SQL).

immutable-database immutable database key-value verification immutability pci-dss cryptographic compliance merkle-tree gdpr sensitive-data regulations tamper-evident verifiable-data-structures auditable tamperproof

FreedomBox - Run your digital services from your home

•    Python

---

FreedomBox is a community project to develop, design and promote personal servers running free software for private, personal communications. It is a networking appliance designed to allow interfacing with the rest of the Internet under conditions of protected privacy and data security. It hosts applications such as blog, wiki, website, social network, email, web proxy and a Tor relay, on a device that can replace your Wi-Fi router, so that your data stays with you.

application-deployment install configuration one-click-install

Themis - Crypto library for storage and messaging for ObjC, Android, C++, JS, Python, Ruby and PHP

•    C

---

Themis is open-source high-level cryptographic services library for mobile and server platforms, providing secure messaging and secure data storage. Themis provides three important cryptographic services Secure messaging, Secure session and Secure storage.

secure-messaging secure-session secure-storage cryptography security library

personal-security-checklist - 🔒 A curated checklist of 300+ tips for protecting digital security and privacy in 2021

•    

---

Too long? 🦒 See the TLDR version instead. Most reported data breaches are caused by the use of weak, default or stolen passwords (according to this Verizon report).

open-source checklist security awesome privacy protection surveillance cybersecurity awesome-list censorship defense web-browsing security-tools privacy-protection

Cryptag - Encrypted, taggable, searchable cloud storage

•    Go

---

CrypTag is an idea, a spec, an API, and a piece of software that makes it easy to build a zero-knowledge system, which means that the server holding user data doesn't know what it is (since it's encrypted).

cloud-storage privacy security encryption data cryptography storage

Molly - A fork of Signal for Android with passphrase lock

•    Java

---

Molly is a hardened version of Signal for Android, the fast simple yet secure messaging app by Signal Foundation. Back in 2018, Signal allowed the user to set a passphrase to secure the local message database. But this option was removed with the introduction of file-based encryption on Android. Molly brings it back again with additional security features.

chat instant-messaging im secure-chat signal-alternative signal

Peergos - A decentralised, secure file storage and social network

•    Java

---

Peergos is a peer-to-peer encrypted filesystem with secure sharing of files designed to be resistant to surveillance of data content or friendship graphs. It will have a secure email replacement, with some interoperability with email. There will also be a totally private and secure social network, where users are in control of who sees what (executed cryptographically). The name Peergos comes from the Greek word Πύργος (Pyrgos), which means stronghold or tower, but phonetically spelt with the nice connection to being peer-to-peer. Pronuniation: peer-goss (as in gossip).

peer-to-peer encryption social-network ipfs storage privacy security p2p ipld post-quantum

SimpleX Chat - Decentralized chat with a focus on users’ privacy

•    Haskell

---

The world's most private and secure chat - open-source, decentralized, and without global identities of any kind. You can use it from the terminal UI, with all contacts and groups in one window. It is a federated chat system with end to end encryption support and low risk of man in the middle attack.

chat im instant-messaging secure-chat privacy protocol decentralized flutter encryption double-ratchet

EdgelessDB - MySQL-compatible database for confidential computing

•    Go

---

EdgelessDB is a full SQL database, tailor-made for confidential computing. It seamlessly integrates with your existing tools and workflows to help you unlock the full potential of your data. All data stored and processed in EdgelessDB is always encrypted and isolated—even in system memory at runtime. Your data is protected even from rogue system administrators, rootkits, and other powerful attackers. This makes EdgelessDB the most secure and most versatile option available for both storing and processing data.

mysql sql database mariadb sgx enclave confidential-computing secure-database security encrypted-database

Cryptlib - provides Encryption and Authentication Service

•    C

---

cryptlib is a powerful security toolkit that allows even inexperienced crypto programmers to easily add encryption and authentication services to their software. It provides support for S/MIME and PGP/OpenPGP secure enveloping, SSL/TLS and SSH secure sessions, CA services such as CMP, SCEP, RTCS, and OCSP, and other security operations such as secure timestamping.

cryptography encryption s-mime digital-signature security security-library

sdk-js - Tanker client-side encryption SDK for JavaScript

•    Javascript

---

Tanker is an open-source solution to protect sensitive data in any application, with a simple end-user experience and good performance. No cryptographic skills are required to implement it. Tanker FileKit is an end-to-end encrypted file storage service for apps.

tanker encryption end-to-end sdk cryptography privacy security

Darkwire.io - End-to-end encrypted instant web chat

•    Javascript

---

Simple encrypted web chat. Powered by socket.io, the web cryptography API. This project is an example of how client side encryption works and how you can integrate it as a chat service. Darkwire server is a Node.js application that requires redis. The Darkwire.io web client is written in JavaScript with React JS and Redux. It uses a combination of asymmetric encryption (RSA-OAEP), symmetric session keys (AES-CBC) and signing keys (HMAC) for security.

chat chat-room cryptography privacy encryption chatroom socket-io anonymous-users chat-application end-to-end-encryption im instant-messaging secure-chat

gdpr_rails - Rails Engine for the GDPR compliance

•    CSS

---

PolicyManager (Aka GDPR RAILS) was created with flexibility in mind to comply with the requirements of the GDPR (General Data Protection Regulation). It's currently being developed at preyproject and will be battle-tested on preyproject.com from May 25th. Portability module lets you define export options, that will generate a navigable static HTML site with all the data you've defined in the portability rules with json support too.

gdpr rails cookies general-data-protection-regulation gdpr-rails gdpr-dashboard

Nextcloud - A safe home for all your data

•    PHP

---

Nextcloud Files is an on-premise, open source file sync and share solution designed to be easy-to-use and highly secure. You can store your files, contacts, calendars and more on the server. It provides real-time collaboration and instant access to all data from any device, anywhere. Access data from FTP, Windows Network Drive, SharePoint, NFS, Object storage and more. It is designed with compliance in mind, providing extensive data policy enforcement, encryption, user management and auditing capabilities.

file-sharing file-storage collaboration cloud self-hosting owncloud cloud-file-sharing dropbox-alternative