A private phone, ready from the first boot.
We pre-configure a Google Pixel with GrapheneOS — de-Googled, hardened, and loaded with encrypted messaging, a VPN, and a data eSIM. You enter your setup code; the rest happens in your browser.
- verified against pinned keys
- bootloader relocked + confirmed
- no accounts · no analytics
- 100%runs in your browser
- 19 appsevery one cert-pinned
- 0accounts · analytics · trackers
- ~20 mincode to finished phone
Verified, not promised.
Every trust decision is made on your machine, against keys compiled into the page — not fetched, not configurable, not ours to swap. If any check fails, nothing touches your phone.
Even a full compromise of our own servers can't push a modified OS or app to your device.
The OS is GrapheneOS's, provably
The factory image streams straight from releases.grapheneos.org and must verify against GrapheneOS's published Ed25519 signing key — pinned in the page — before a single byte is flashed.
The setup script is signed
Your phone's provisioning recipe carries an Ed25519 signature checked against a second pinned key. An unsigned or tampered recipe stops the setup cold — fail-closed, every time.
Every app is double-checked
Each APK must match the exact content hash carried inside the signed recipe and be signed by its developer's real certificate — Signal by Signal, Mullvad by Mullvad — against pins compiled into the page.
The bootloader ends up locked
After flashing, the bootloader is relocked and the lock is confirmed before setup completes — your phone ships from our process the way Google shipped it: sealed.
What every Spectre phone ships with.
Pre-configured before it reaches you, verified during setup — what installs is exactly what we intended. Nothing swapped, nothing added.
GrapheneOS, hardened
The privacy and security focused Android rebuild — hardened memory allocator, per-app permission control, sandboxed everything — on genuine Pixel hardware, bootloader relocked.
Encrypted comms, ready
Private messaging that isn't tied to your identity, installed and configured in the right profile.
De-Googled by default
No Google account, no Play Services phoning home. Your device isn't a data feed.
Mullvad VPN
A no-logs VPN account provisioned per device — account-number only, no email, nothing to link to you.
Data eSIM, ready to scan
A data eSIM assigned to your device — scan the QR on your handoff sheet and you're online.
The rest of a real phone
App stores that don't need Google, encrypted notes and mail, wallets, metadata scrubbing — nineteen apps in all, each verified.
Every Pixel 9 – 10
The full current lineup, a-series to Pro Fold. Bring the model you ordered — we detect it and flash the right build.
No cables to a stranger's computer. Ever.
Everything runs locally in your browser over a direct USB connection. We never see your phone, its data, or your credentials.
Get your setup code
It comes with your order — or arrives as a private link you confirm with your order details. Single-use, yours alone.
Connect & flash
Open the setup page in Chrome or Edge, plug the phone in, enter your code. Verification, flashing, relocking, and app installs run automatically.
Keep the handoff sheet
Scan your eSIM, save your one-time sheet with VPN, messaging and profile credentials. We keep no copy — that's the point.
whole process ≈ 20 minutes · works on any computer with Chrome/Edge, or an Android tablet with a USB-C cable
Already ordered? Your phone is waiting.
Enter your setup code to provision your phone now — or open the claim link from your email to reveal your code first.
Want a Spectre phone?
Ordering is handled privately, person to person. Reach us on either channel and we'll take it from there.