Ultra-High Privacy Commerce Policy

1. The Zero-Knowledge Core

Operational Mandate: What we do not collect cannot be stolen, leaked, or seized. We operate on a strict Zero-Knowledge infrastructure. Our servers are configured to eliminate data footprints entirely, shielding both buyers and vendors from deanonymization.

2. Network Anonymity & Connection Rigidity

  • IP Masking: This platform operates exclusively as a Tor Onion Service (.onion). We have no clearnet mirrors. Because your traffic travels through an encrypted three-hop circuit, our server only ever sees 127.0.0.1 (localhost) (Chertoff, 2017).
  • Zero-Logging Configuration: Standard HTTP server logging (Apache/Nginx access logs) is permanently symlinked to /dev/null. System error logging is heavily restricted and strictly stripped of timestamps, session variables, and debug data.
  • Fingerprint Defense: We do not read, process, or store browser user agents, screen aspect ratios, or canvas identifiers.

3. Account Creation & Cryptographic Identity

  • No Personal Data: Account generation requires exactly two fields: a unique pseudonym and a password. We do not accept or verify emails, phone numbers, or external communication hooks.
  • PGP Handshake Requirement: For high-security tiers, accounts are tied to a user-provided PGP Public Key. Standard textual communication with support or vendors is strictly prohibited unless it is fully encrypted end-to-end using this key.

4. Transactions, Escrow, and Cryptocurrencies

  • Privacy-Centric Capital: To prevent the financial tracking common on public ledgers like Bitcoin, this platform natively enforces the use of Monero (XMR) or specialized, ring-signature-based privacy coins (Scharnowski, 2024).
  • Address Mutation: Deposit and escrow addresses are structurally unique per transaction and are wiped from the active database immediately upon payment confirmation and escrow release.
  • Data Purge Schedule: Transaction details (including order status and encrypted shipping addresses) are automatically and irreversibly overwritten using a multi-pass secure erasure mechanism precisely 14 days after the order is marked as finalized or resolved.

5. Media & Upload Handling

  • Automated EXIF Stripping: Any images uploaded to the platform (e.g., product listings by verified vendors or proof-of-delivery photos) automatically pass through a server-side sanitization daemon. All exchangeable image file format (EXIF) metadata—including camera model, software versions, and precise GPS telemetry—is permanently scrubbed before the file is written to disk.
  • Client Side Recommendation: Users are strongly urged to utilize local utilities (such as MAT2) to scrub media before transmitting it over the network.

6. Client-Side Mechanics

Ephemeral Session Cookies: We utilize a single, random session identifier stored in a transient cookie. This cookie is tagged with Secure, HttpOnly, and SameSite=Strict attributes, and evaporates immediately when the browser session terminates.

Zero JavaScript Dependency: This entire platform is built with pure, server-rendered HTML and CSS. It contains zero JavaScript. The site will function seamlessly with JavaScript completely disabled in the Tor Browser—a configuration we mandate for all security-conscious users.