Privacy-First Tools

Tools where privacy is a design constraint, not a feature toggle.

Data stays local. Encryption is default. No telemetry. No accounts

unless you choose to create one.

Key Entries

• **Pocket ID** -- self-hosted OIDC with passkeys. Your identity, your server.
• **Passage** (N4N) -- age-encrypted password manager. No cloud. Git sync.

Keys in the Secure Enclave.

• **Ollama Agent** -- local LLM inference. Your prompts never leave your machine.
• **ESPHome** -- IoT firmware with no cloud dependency. Devices talk to your

local Home Assistant, not to China.

• **Crawl4AI** -- web crawler for LLMs. You crawl, you extract, you own the data.

The Architecture

Privacy-first tools share a common architecture:

1. Local storage -- files on disk, not rows in someone else's database

2. End-to-end encryption -- data encrypted before it leaves the device

3. Optional sync -- sync via protocols you control (git, iCloud, WebDAV)

4. No accounts -- the tool works without signing up for anything

Connections

• Links to Self-Hosted Infrastructure
• Links to Open Firmware Movement
• Links to Knowledge Management