The Privacy Stack I Actually Use (No Tinfoil Hat Required)

Most privacy advice falls into one of two failure modes: it’s either so mild it changes nothing (“use incognito mode!”) or so intense it reads like a manifesto (“never use a smartphone again”).

What I want to share is the middle path — the actual tools I’ve been running for about two years that do meaningful work without requiring you to restructure your life. Three tools. All of them set-it-and-mostly-forget-it. None of them require you to understand cryptography.

The Problem With “Privacy Later”

Here’s what changed my thinking: data that exists about you now will be around when regulations are different, when the political climate is different, when the company that holds it has been acquired by someone you’d never have handed it to voluntarily.

I’m not trying to be alarmist. I’m describing how data actually works. The photos you upload to a free cloud service today get analyzed by machine learning systems today. The browsing patterns your ISP logs are available to third parties today. The VPN you “keep meaning to turn on” isn’t protecting you.

These three tools are about reducing unnecessary exposure with reasonable effort.

1. pCloud — Cloud Storage That Doesn’t Read Your Files

pCloud is a cloud storage service headquartered in Switzerland, with servers you can choose to keep in Europe. The meaningful difference from Google Drive or Dropbox isn’t the interface — it’s the encryption model.

With their client-side encryption option (pCloud Crypto), your files are encrypted on your device before they upload. pCloud employees cannot see your files. Neither can a subpoena from a US court, because pCloud is Swiss and the data is in Europe.

I use it for documents, tax records, and personal photos I don’t want sitting in a data center being scanned. The apps are good. The desktop sync is reliable. Storage plans are lifetime-purchase options, not recurring subscriptions — which means the $350 I paid three years ago covers 2TB forever, not per month.

If you’re currently trusting Google or Dropbox with anything sensitive, pCloud is the easiest meaningful upgrade on this list.

2. NextDNS — Block Trackers Before They Load

DNS is the phone book of the internet — when your device wants to reach a website, it first asks a DNS server what IP address to use. By default, that DNS server is owned by your ISP, who logs every domain you visit.

NextDNS replaces your default DNS server with one that blocks known tracking domains and ad networks before they ever reach your device. It’s like an ad blocker and a privacy filter rolled into one — but at the network level, which means it covers every app on your phone, not just your browser.

Setup takes about five minutes. You create an account, get a custom DNS address, and point your router (or individual device) at it. From that point on, it quietly blocks thousands of trackers per day. My dashboard shows about 22% of all DNS queries on my network get blocked.

The free plan covers 300,000 queries per month, which is more than enough for most people. The paid plan is $1.99/month for unlimited.

3. NordVPN — Encrypted Traffic on Networks You Don’t Control

I’m not going to oversell what a VPN does. A VPN does not make you anonymous. What it does do is encrypt your traffic between your device and the VPN server, making it unreadable to anyone between you and that server — your ISP, the coffee shop router, whoever.

I use NordVPN when I’m on a network I don’t control: airports, hotels, client offices. On my home network, I use it selectively. I chose NordVPN because they’ve had independent audits of their no-logs policy and the performance is good enough that I forget it’s running.

There are other good VPNs. But if you don’t have one at all, NordVPN is the one I’d point someone toward — the apps are simple, it works on all devices, and the audit record is real rather than marketing language.

These Three, Specifically

I’ve tried more exotic setups. Self-hosted everything, custom firewall configs, de-Googled Android. Some of it was worth it. Most of it created maintenance overhead that eroded the habit.

These three tools are ones I’ve kept because they require almost nothing from me after setup. pCloud runs in the background. NextDNS runs at the router. NordVPN is one tap on my phone. The protection is real without requiring daily willpower.

That’s the only kind of privacy stack that actually works long-term.

Disclosure: This article contains affiliate links. If you purchase through my link, I may earn a commission at no extra cost to you. I use all three of these tools myself.