{
  "signal": { "body": "Replaces WhatsApp. E2EE by default, non-profit foundation." },
  "simplex-chat": { "body": "No identifier at all: even servers can’t know who talks to whom." },
  "session": { "body": "No phone number, onion routing." },
  "element-matrix": { "body": "Replaces Discord/Slack. Federated, self-hostable." },
  "briar": { "body": "P2P with no internet (Bluetooth/Tor): protests, blackouts." },
  "molly": { "body": "Hardened Signal for Android (fully FOSS variant)." },
  "thunderbird": { "body": "The reference free mail client, OpenPGP built in." },
  "proton-mail": { "body": "Open-source apps of the Swiss encrypted service." },
  "tuta": { "body": "Free apps, post-quantum encryption, EU jurisdiction." },
  "firefox": { "body": "Replaces Chrome. The independent engine." },
  "tor-browser": { "body": "Network anonymity, anti-fingerprinting." },
  "mullvad-browser": { "body": "The Tor Project’s browser, without the Tor network." },
  "brave": { "body": "Chromium that blocks ads and trackers by default." },
  "ublock-origin": { "body": "THE ad and tracker blocker." },
  "searxng": { "body": "Self-hostable metasearch engine." },
  "wireguard": { "body": "The modern VPN protocol everyone builds on." },
  "mullvad-vpn": { "body": "Client of the no-account VPN (cash/Monero accepted)." },
  "proton-vpn": { "body": "Free clients, honest free tier." },
  "tor": { "body": "The network that separates who you are from what you do." },
  "tailscale": { "body": "Private WireGuard network between your devices." },
  "headscale": { "body": "The Tailscale coordination server, on your hardware." },
  "pi-hole": { "body": "Blocks ads and trackers for the whole network." },
  "adguard-home": { "body": "Pi-hole alternative with a modern UI." },
  "bitwarden": { "body": "Cross-platform password manager." },
  "vaultwarden": { "body": "Lightweight self-hosted Bitwarden server." },
  "keepassxc": { "body": "100% local vault, zero cloud." },
  "aegis": { "body": "2FA codes (TOTP) in a local encrypted vault (Android)." },
  "ente-auth": { "body": "2FA with end-to-end encrypted sync." },
  "nextcloud": { "body": "Replaces the whole Google suite, at home." },
  "cryptomator": { "body": "Encrypts your files BEFORE any cloud." },
  "syncthing": { "body": "Device-to-device sync, no server." },
  "restic": { "body": "Encrypted, deduplicated, automatic backups." },
  "immich": { "body": "Self-hosted Google Photos (faces, search)." },
  "ente-photos": { "body": "E2EE photos, on-device recognition." },
  "libreoffice": { "body": "The free office suite." },
  "onlyoffice": { "body": "Self-hostable collaborative office." },
  "joplin": { "body": "Markdown notes, optional encryption and sync." },
  "standard-notes": { "body": "Notes encrypted by default." },
  "cryptpad": { "body": "Collaborative Google Docs, fully encrypted." },
  "organic-maps": { "body": "Offline maps with zero tracking (OpenStreetMap)." },
  "osmand": { "body": "Power-user maps (hiking, contour lines)." },
  "jitsi-meet": { "body": "Video calls with no account, self-hostable." },
  "mastodon": { "body": "Replaces X/Twitter. Federated, no imposed algorithm." },
  "pixelfed": { "body": "The fediverse’s Instagram." },
  "peertube": { "body": "Federated YouTube." },
  "lemmy": { "body": "Federated Reddit." },
  "damus": { "body": "Nostr client: your identity is a key pair." },
  "ollama": { "body": "Run LLMs locally, one command." },
  "llama-cpp": { "body": "The local inference engine that made it all possible." },
  "jan": { "body": "100% local ChatGPT-like, simple UI." },
  "gpt4all": { "body": "Privacy-minded local LLMs, CPU-friendly." },
  "pocketpal": { "body": "Run LLMs offline on your phone (iOS/Android), no account." },
  "grapheneos": { "body": "De-Googled, hardened Android (Pixel)." },
  "tails": { "body": "Amnesic USB OS, everything through Tor." },
  "qubes-os": { "body": "Compartmentalisation via sealed VMs." },
  "f-droid": { "body": "The 100% free app store." },
  "postmarketos": { "body": "Linux on abandoned phones." },
  "yunohost": { "body": "Turnkey personal server (email included)." },
  "startos": { "body": "Sovereign server, Tor by default." },
  "synapse": { "body": "Your federated chat server." },
  "bitcoin-core": { "body": "Money you hold yourself." },
  "monero": { "body": "Private transactions by default." },
  "securedrop": { "body": "Anonymous document drop for newsrooms." },
  "onionshare": { "body": "Share files over Tor, no middleman." },
  "rayhunter": { "body": "IMSI-catcher detector." },
  "mat2": { "body": "Strips metadata before publishing." },
  "exiftool": { "body": "Read and erase EXIF metadata." }
}