Ghostline
Build yours

Privacy phones, ready out of the box

A Pixel that keeps your secrets.

Every Ghostline phone ships with GrapheneOS installed, 3 months of chatr service, 3 months of Mullvad VPN, and Signal and Threema set up. Want it to go further? We can physically remove the camera or microphone before it ships.

Build your phone See what's included

Pixel 8, 9 or 10 · from $849 CAD · all taxes & shipping included

GrapheneOSchatr · 3 moMullvad VPN · 3 moSignalThreema (paid)

Choose your Pixel

Three models, same privacy setup

In the box

Everything set up before it reaches you

Open the box, turn it on, and you're private from the first minute. No flashing, no app hunting, no signing up for a plan.

Hardware

Google Pixel 8, 9 or 10

Grade A refurbished: like-new condition with no scratches, unlocked, tested and completely erased. GrapheneOS is installed fresh and the bootloader re-locked.

Operating system

GrapheneOS

A hardened, Google-free version of Android with automatic security updates.

Service · 3 months

chatr plan

A prepaid SIM, activated and ready. Talk, text and data for your first 3 months.

VPN · 3 months

Mullvad VPN

No email or personal info needed. Installed and set to always on.

Messaging

Signal

End-to-end encrypted calls and messages, installed and ready to register.

Messaging · paid

Threema licence

Anonymous messaging with no phone number required. Licence included.

Protection

Phone case

A slim protective case in black or grey, fitted before shipping.

Protection

Privacy screen protector

The screen goes dark from the side, so only you can read it. Try tilting the phone on the home page.

Compare models

Pixel 8, 9 or 10?

All three ship with the same GrapheneOS setup. The differences are battery, cameras, size, and how many years of security updates each one has left.

Phone ratings out of 10. The same scores are in the table below.

Ghostline's ratings out of 10, based on the specs below and published reviews. Tap or hover a point to see its score.

Full specs

● marks the best of the three. GrapheneOS can only update a phone while Google still releases firmware for it, so each model's end date is different.

Build yours

Choose your phone and what stays inside

Software can be hacked. A part that isn't there can't be. Watch the phone change as you pick what we remove.

Model

All three run GrapheneOS and come with the same apps, service and VPN.

Camera

Removing a camera means no photos, video calls or QR code scanning from that side. Any removal means opening the phone, so it will no longer be water resistant, and custom builds can't be returned (defects are still covered).

Microphone

Without built-in mics, calls and voice notes need a wired USB-C headset with a mic.

Case colour

Both are slim with a matte finish.

Verify your phone

Don't take our word for it

GrapheneOS lets you check for yourself that your phone runs genuine, untampered GrapheneOS. It takes a few minutes, and you don't need to trust Ghostline to do it.

Method 1 · works on every Ghostline phone

Check the boot key

No second phone needed. Works even if the cameras were removed.

  1. Restart your phone.
  2. A yellow screen appears saying the phone is loading a different operating system. This is normal for GrapheneOS. It shows an ID: a long string of letters and numbers.
  3. Compare that ID with the official value for your model below. Every character must match.
  4. The screen only stays up for a few seconds. Restart again as often as you need, or photograph it with another device.
Pixel 8cd7479653aa88208f9f03034810ef9b7b0af8a9d41e2000e458ac403a2acb233
Pixel 99e6a8f3e0d761a780179f93acd5721ba1ab7c8c537c7761073c0a754b0e932de
Pixel 103f7415ea26f5df5b14ea6d153256071a7a1af9ce7b0970b7311cc463c7ea02c7

Always double-check against GrapheneOS's own page at grapheneos.org/install/web under "Verifying installation". If someone ever tampered with this website, the official page is the one to trust.

Method 2 · strongest check

Hardware attestation with Auditor

Needs a second Android phone (Android 13 or newer) with a camera, and a working camera on your Ghostline phone. If your cameras were removed, use Method 1.

  1. On the second phone, install Auditor by GrapheneOS from the Play Store or the GrapheneOS app store. Your Ghostline phone already has it.
  2. Open Auditor on both phones. Choose Auditor on the second phone and Auditee on your Ghostline phone.
  3. Your Ghostline phone scans the QR code on the second phone. Then tap the second phone's QR code to continue, and let it scan the code your Ghostline phone shows.
  4. The second phone shows the result. It checks the phone's security chip, so a fake operating system can't pretend to be GrapheneOS.
  5. Run it again any time. After the first pairing, Auditor also flags changes since the last check.

Optional: GrapheneOS's attestation.app can check your phone on a schedule and email you if a check fails. Tap "Enable remote verification" in Auditor and scan the QR code from your attestation.app account.

Our story

Why I started Ghostline

Canadians shouldn't have to give up their privacy to own a phone.

I'm not doing anything illegal, and most people who care about privacy aren't either. That's the point. Privacy isn't about having something to hide. It's about deciding for yourself who gets to see your messages, your photos, where you've been and who you talk to.

Over the last few years I've watched the rules around our phones keep shifting. Bills in Ottawa have proposed new ways for authorities to get information about Canadians with less court oversight. The latest would require some providers to keep records about their users for up to a year. Each change is explained as a small, reasonable step. Put together, they move the line a long way.

Meanwhile, most phones are built to collect as much as they can. Ad companies, data brokers and apps build profiles of us every day, and those databases get breached.

So I started building the phone I wanted for myself: a Pixel running GrapheneOS, set up properly, with private messaging and a VPN ready from the first minute. For people who want to go further, I can physically remove the camera or microphone. Software can be changed. A part that isn't there can't be switched on.

Ghostline is a small, online-only business. I build and check every phone myself before it ships.

What I promise you

  • I delete your name, contact details and address once your order is delivered and the 30-day return window ends.
  • I never record your phone's serial number or IMEI.
  • This site has no ads, analytics or tracking.
  • You can pay with cash by mail, with nothing but an order number.
  • I'll be honest about what I can't protect: e-Transfers show your name to the banks, and Bitcoin payments are public on the blockchain.

The founder, Ghostline

Reviews

From verified buyers

Every review here comes from a real Ghostline order, checked against our sales records before it's published.

Write a review

Rating
How reviews work

Verified orders only. Your order number is checked against our records. It is never shown publicly.

Approved by hand. Every review is read before it goes up, which stops spam and fake reviews.

Honest, good or bad. We publish critical reviews too. We only reject reviews that aren't from a real order, are abusive, or include someone's personal information.

One review per order. Only your alias, phone model, rating and review are shown.

Returns & warranty

Clear terms, before you buy

Unopened phones can be returned within 14 days. Every phone has a 30-day warranty against defects, custom builds included.

Returns

14 days, seal intact

  • Return an unopened phone within 14 days of delivery for a refund, as long as the numbered tamper seal on the box is unbroken.
  • Opened phones can't be returned for a change of mind. Problems are covered by the warranty instead.
  • Custom builds (cameras or microphones removed) are made to order and can't be returned, but defects are covered by the warranty.
  • Refunds go back by your original payment method. We don't mail cash, so cash orders are refunded by e-Transfer or Bitcoin, your choice. Bitcoin refunds are for the dollar amount you paid. Cash mailed to us is sent at your own risk until it arrives.
  • You pay return shipping on change-of-mind returns.
Warranty

30 days on every phone

  • Covers hardware defects and our workmanship for 30 days from delivery, including camera and microphone removals.
  • We repair or replace the phone. If we can't do either, we refund you.
  • For defects, we pay shipping both ways.

Not covered

  • Water or liquid damage. Custom builds have been opened, so they are not water resistant.
  • Phones opened or repaired by anyone other than Ghostline.
  • Drops, cracks and other accidental damage.
Damaged in shipping

Report within 48 hours

If your phone arrives damaged, email us within 48 hours of the time tracking shows it was delivered. Include your order number and photos of the box and the phone. We'll replace or repair it at no cost.

Sending a phone back

Your data stays yours

  1. Email with your order number and the problem. Wait for our reply before sending anything.
  2. Factory reset your phone before you ship it (Settings → System → Reset options → Erase all data).
  3. Ship it to the address in our reply.
  4. When it arrives, we erase it and install a fresh copy of GrapheneOS straight away, without looking at anything on it.

This policy doesn't limit any rights you have under British Columbia law.

Questions

Before you buy

Which model should I pick?

All three run the same GrapheneOS setup. GrapheneOS can only update a phone while Google still releases firmware for it, so updates end in October 2030 for the Pixel 8, August 2031 for the Pixel 9 and August 2032 for the Pixel 10. See Compare models for battery, cameras and size.

What is your return policy?

Unopened phones with the tamper seal intact can be returned within 14 days. Opened phones and custom builds can't be returned, but every phone has a 30-day warranty against defects. See Returns & warranty.

How long does delivery take?

Each phone takes 1–3 business days to build, test and seal. Free Expedited shipping then takes 1–4 business days within BC and 2–8 to the rest of Canada. Priority is a $50 upgrade at checkout: next-business-day delivery to most major cities, so usually 2–4 business days in total. Delivery times start once payment arrives.

How can I pay?

Interac e-Transfer, Bitcoin, or cash by mail. After you place your order you get an order number and payment instructions. Your phone is built once payment arrives.

How anonymous is each payment method?

Cash by mail is the most private: we only see your order number. Bitcoin is pseudonymous, so the payment isn't tied to your name but is visible on the blockchain. An e-Transfer shows your name from your bank. Whichever you choose, we only need a shipping address, and a PO box works.

How do I know my phone hasn't been tampered with?

You can check it yourself in a few minutes, without trusting us. See Verify your phone.

How do referral codes work?

Your order number (it starts with GL-) is also your referral code. When a friend enters it at checkout, they get $25 off their phone.

What happens after the 3 months?

Your phone keeps working. You can top up your chatr plan and renew Mullvad yourself, or switch to any carrier or VPN you like. The phone is unlocked.

Can I put the camera or microphone back later?

No. Removal is permanent, which is the point. If you're unsure, keep them and use GrapheneOS's camera and mic toggles instead.

Can I use Google apps?

GrapheneOS can run Google Play in a sandbox if you choose to install it. It's off by default.

Does removing parts void the warranty?

Yes, the manufacturer's warranty no longer applies after we open the phone. Ghostline covers your phone with its own warranty instead.

Checkout

Ready when you are

Review your build, choose how to pay, and we'll confirm your order. Shipping anywhere in Canada is free. Questions first? Message us on Signal or Threema.

Signalghostline.01
Threema IDXXXXXXXX
Email (Proton Mail)
1 · Your phone
Pixel 9Customize $0
Your number doesn't have to match where you live. We'll use the closest area chatr offers.
Free tracked Expedited shipping across Canada, in plain packaging. Priority upgrade available below. All taxes are already included in the price.

Unopened returns within 14 days · 30-day warranty on every phone. Returns & warranty

2 · Shipping

3 · Payment

4 · Contact & address