One set of hands. The same rules.
Nine small privacy tools, all built and maintained by one indie developer. No accounts, no tracking, and open-source crypto cores across the board.
PGPony iOS · Android · macOS · Windows · Linux
The full OpenPGP world on your phone. GnuPG-compatible keys, hardware smartcards, on-card key generation, and a pass store viewer.
ScrubPony iOS · Android · macOS · Windows · Linux
Strips EXIF, GPS, XMP and IPTC out of JPEG, PNG, WebP and HEIC photos and copies the image data through byte for byte. Atomic writes, orientation preserved, fails closed.
BurnPony iOS · Android · macOS · Windows · Linux
Self-destructing notes, sealed with AES-256-GCM on your phone. The recipient opens one link in any browser; after the last allowed view the note burns.
CarrierPony iOS · Android · macOS · Windows · Linux
Private messaging and file transfer, sealed end to end with OpenPGP. Pair, verify a safety number, and talk — the relay only ever sees envelopes.
AgePony iOS · Android · macOS · Windows · Linux
Modern file encryption and signing on the age protocol. Encrypt to a GitHub username, sign with a security key, bit-compatible with the age CLI.
RelayPony iOS · Android · macOS · Windows · Linux
Encrypted peer-to-peer file transfer. Files go straight from one phone to another over your Wi-Fi, encrypted with age. No server, no account.
QuorumPony iOS · Android · macOS · Windows · Linux you're here
Real Shamir Secret Sharing. Split a key into cards; any few rebuild it, and a single card alone reveals nothing. Fully offline and open source.
PassPony iOS · Android · macOS · Windows · Linux
A password manager with no cloud behind it. The vault stays on your own devices, and AutoFill works without handing your logins to anyone.
VaultPony iOS · Android · macOS · Windows · Linux
VeraCrypt-compatible encrypted vaults. One encrypted file holds a whole private filesystem, with hidden volumes, cipher cascades, and no network access.
What they have in common
No accounts
Nothing to sign up for, nothing to log into. The tools work the moment you open them.
No tracking
No analytics, no telemetry, no ad IDs. None of them phone home about what you do.
Open cores
The cryptography is public and Apache-2.0 licensed, so the important parts can be read and checked.
Questions about any of them go to one inbox: NorseHorse@norsehor.se.