Your browser generates a key and blinds it before sending it to our server. The server confirms your donation and signs a key it cannot read. Your browser then unblinds that signature, producing your Ghost Key certificate. The result is an identity we can verify but cannot connect to your payment.
What it protects is that link. It is not a fresh disguise for everything you later do with it: a Ghost Key is a persistent pseudonym, and two messages signed with the same one can be tied to the same holder. We set out the limits in what Ghost Keys don’t hide.
Before you pay: your Ghost Key is created in your browser on the next page and signed once. That page is the only copy — reloading it will not bring the key back and the donation cannot be reissued — so download it or import it to Freenet before closing the tab. Keep the downloaded file somewhere safe, such as a secure note in a password manager.
The minimum is $1. We use Stripe for card processing. Freenet Project Inc is a 501(c)(3) nonprofit, and contributions are tax-deductible in the United States.
Who sees what
- Stripe, our payment processor: your card details and the amount. Stripe never sees your Ghost Key, blinded or otherwise.
- Freenet’s donation server: your payment record from Stripe, which it has to read in order to confirm the payment succeeded, and separately a blinded key that it is mathematically unable to read.
- Anyone verifying your key later: that a valid Ghost Key was issued at a given donation tier. Not your name, not your payment.
The unblinding happens in your browser, on a key our server never sees in unblinded form. So while our server does handle your payment, the link between that payment and the Ghost Key you end up holding is never created anywhere, including on our own machines.
Why the amounts are fixed
You choose from a short list rather than typing your own figure. The donation amount is recorded in your certificate and is visible to anyone who verifies it, so fixed tiers keep your certificate indistinguishable from every other one issued at the same amount. A free-form figure like $37.42 would be close to unique, and would give away much of what blind signing is there to protect.
The $1 tier exists so that Ghost Keys stay within reach of people with limited means. Anything above it directly funds Freenet’s development, and apps that want to extend extra privileges to larger donors can read the tier from your certificate.