Terms of Service onion.pizza

Terms of use and privacy information for the onion.pizza Tor2web gateway.

Effective date: 7 October 2026 · Contact: admin@onion.pizza

← Back to onion.pizza

1. What the service is

onion.pizza (the "Service" or the "Gateway") is a public Tor2web gateway run by a private individual in the Netherlands as a non-commercial volunteer project, free of charge (the "volunteer operator of onion.pizza", "we", "us", "the Operator"). The Operator can be reached at admin@onion.pizza; see section 12 on why no name or postal address is published here. When you open an address of the form <onion-address>.onion.pizza, the Gateway connects to the corresponding .onion address over the Tor network, fetches what that onion service returns and passes it on to your browser. In transit, the Gateway rewrites links so that they keep pointing through the Gateway, adjusts cookies set by the onion service so that they work on the Gateway's subdomain, and inserts a banner at the top of HTML pages. What you see may therefore differ from what Tor Browser would show.

The Service is a transmission and proxying tool. It does not host, store (other than transiently while a request is served), create, select, edit or endorse any of the content it passes on. Every onion service reachable through the Gateway is operated by someone else, who is solely responsible for it. See section 5.

The Service runs the open-source Tor2web software. It is not affiliated with, endorsed by or operated by the Tor Project, and it is not part of the Tor network. "Tor" is a trademark of The Tor Project, Inc.

The Service is provided free of charge, without advertising, as a volunteer effort, with no registration or account. We receive no payment or other remuneration for it.

2. Acceptance and eligibility

By using the Service in any way (including by entering an address on the landing page, by opening a *.onion.pizza address, or by clicking the button on the disclaimer page that is shown before an onion service is loaded for the first time) you agree to these Terms. If you do not agree, do not use the Service.

You must be at least 18 years old, or the age of majority where you live if that is higher, to use the Service. Content reachable through the Tor network is unmoderated and may be unsuitable for minors. You must also not be prohibited from using the Service by any law that applies to you.

If you use the Service on behalf of an organisation, you confirm that you have authority to bind it to these Terms.

3. No anonymity, no security

These points are also on our landing page. They are repeated here because they matter.

• You are not anonymous. Unlike Tor Browser, the Gateway does not hide who you are. We, your internet provider, your network administrator and anyone able to observe your connection can see that you connect to onion.pizza and which onion services you request. The onion service does not see your IP address, but it can see everything you type into it.
• Your traffic is readable by the Gateway. Encryption between your browser and the Gateway (HTTPS, where offered) ends at the Gateway. The Gateway must decrypt your requests and the onion service's responses to proxy and rewrite them, so it can technically read all of it, including form data, passwords and uploaded files. Do not enter passwords, payment details or personal information on a site opened through the Gateway.
• You cannot verify the onion service. Tor Browser verifies that a .onion address belongs to the service you reached. Through the Gateway you have to trust us, our hosting provider and the DNS and certificate infrastructure instead.
• Content is not checked. Pages, files and scripts delivered through the Gateway come from unknown third parties and may be malicious, misleading or illegal where you live.

For anonymity and for any sensitive use, install the Tor Browser and open the .onion address directly. If the Gateway detects that you are already connecting through Tor, it redirects you to the .onion address instead of proxying.

4. Acceptable use

You may use the Service only for lawful purposes and in accordance with these Terms. You must not use, or attempt to use, the Service:

• to access, distribute, store, transmit or make available anything that is illegal under Dutch law or under the law that applies to you;
• to access, request, distribute or promote child sexual abuse material or any other content that sexually exploits or endangers minors. We have zero tolerance for this. We block it when we become aware of it and we report it, together with any information we hold about the request, to Offlimits (the Dutch hotline against online child sexual abuse) and, where required, to the police;
• to infringe the intellectual property, privacy or other rights of any person;
• to harass, threaten, defraud or defame anyone, or to distribute malware;
• to attack, overload, probe or disrupt the Gateway, the Tor network, an onion service or any other system, including by denial-of-service traffic, vulnerability scanning without our permission, or by using the Gateway as a relay for attacks;
• for automated mass crawling, scraping, mirroring or indexing of onion services through the Gateway. Occasional automated requests at a rate comparable to a human reader are tolerated; bulk or sustained automated access is not. Proxied pages carry an X-Robots-Tag: noindex header and are not meant to be indexed by search engines;
• to circumvent or attempt to circumvent any block, rate limit, disclaimer or other technical or administrative measure we apply, for example by varying addresses or paths to reach a blocked service;
• to misrepresent the Service as a hosting provider of, or as endorsing, any content, or to present *.onion.pizza links as if they were our own pages;
• to send us false or abusive reports.

We may apply rate limits, block addresses, user agents or networks, and take any other measure we consider reasonable to protect the Service and third parties. We may also share information about abuse of the Service with other gateway operators, hosting providers and authorities (section 8).

5. Third-party content and our role

All content reachable through the Gateway is third-party content. It is selected, stored and published by the operators of the respective onion services, who are solely responsible for it. The Gateway transmits that content at your request, automatically and without human intervention, in a technical and passive way:

• we do not initiate the transmission: you choose which address to open;
• we do not select the recipient: the content goes to whoever requested it;
• we do not select or modify the information transmitted, except for the automatic, content-neutral technical rewriting described in section 1 (links, cookie domains, the banner) that is needed for the proxy to work;
• we have no general obligation to, and do not, monitor what is transmitted, nor do we review onion services before they can be reached;
• we store content only transiently, for as long as is needed to serve the request.

Nothing you reach through the Gateway is endorsed, recommended or verified by us. The availability of an onion service through the Gateway says nothing about its legality, accuracy or safety. Links, names and descriptions shown on proxied pages are those of the onion service, not ours.

Our decision to block an address (section 7) is a voluntary measure taken in good faith; the fact that we block some content does not mean we have reviewed or approved any other content.

Our legal position as an intermediary

European Union. The Operator is established in the Netherlands. Under Regulation (EU) 2022/2065 (Digital Services Act) the Service is an intermediary service of the "mere conduit" type (Article 4): the Operator is not liable for the information transmitted, because it does not initiate the transmission, does not select the receiver and does not select or modify the information transmitted. The Operator does not provide a "hosting" service in relation to onion content. The Operator complies with orders of competent judicial or administrative authorities to act against specific items of illegal content and to provide information (Articles 9 and 10). The single point of contact for Member State authorities, the European Commission and the European Board for Digital Services (Article 11) and for recipients of the Service (Article 12) is admin@onion.pizza; communication in English or Dutch is accepted. Sections 4, 6 and 7 describe the restrictions we apply, the measures and tools we use (manual review of reports, address and pattern blocklists, optionally blocklists shared by other gateway operators; no automated content analysis) and how decisions are taken.

United States. To the extent that United States law applies, the Service is an interactive computer service and the Operator does not act as the publisher or speaker of information provided by others, within the meaning of 47 U.S.C. § 230. The Operator acts as a conduit for transitory digital network communications within the meaning of 17 U.S.C. § 512(a). Copyright notices can be sent to the address given in section 6.

6. Reporting abuse and illegal content

If you believe that content reachable through the Gateway is illegal, infringes your rights or otherwise violates these Terms, please tell us by email at admin@onion.pizza. The banner that the Gateway shows at the top of proxied pages links to the same address. This is also the address for copyright notices and for requests from authorities.

If you encounter child sexual abuse material, please also report it directly to Offlimits (the Dutch hotline) or to the INHOPE hotline of your own country, so that it can be acted on at the source and not only blocked on the Gateway.

A useful report contains:

• the exact *.onion.pizza URL(s) or the .onion address and path;
• what the problem is and, where relevant, why you consider the content illegal (the law or right concerned, and in which country);
• if you are reporting on behalf of someone else, who you are and on whose behalf you act;
• a way to reach you, if you want a reply.

Reports may be made anonymously, but we may be unable to follow up or to reply. We review reports manually and in good faith. We aim to respond to reports concerning child sexual abuse material, threats to life and similar emergencies as a matter of priority, and to other reports within a reasonable time. Knowingly submitting a false or abusive report is a violation of these Terms.

What we can and cannot do

Because we do not host any content, we cannot remove, edit or take down anything from an onion service. What we can do is stop proxying a specific onion service, page, path or pattern through the Gateway (section 7). The content remains reachable through the Tor network directly, and the onion service's operator remains responsible for it. If you want content removed at the source, you need to contact the operator of that onion service, if you can, or the competent authorities.

Copyright notices

If you are a rights holder or their authorised agent and believe that content reachable through the Gateway infringes your copyright, send a notice to admin@onion.pizza containing: identification of the copyrighted work; the exact Gateway URL(s) of the allegedly infringing material; your contact details; a statement that you have a good-faith belief that the use is not authorised by the rights holder, its agent or the law; a statement that the information in the notice is accurate and, where the applicable law requires it, that you are authorised to act for the rights holder; and your physical or electronic signature. We will consider blocking the reported URL(s) on the Gateway. We may forward your notice, or a summary of it, to the operator of the onion service where we are able to identify a contact. Because we are a conduit and do not host the material, we cannot remove it; see "What we can and cannot do" above.

7. Blocking

We may, at our sole discretion and without prior notice, refuse to proxy any onion service, page, path or pattern of addresses, and we may stop proxying it at any time. We do this in particular when we receive a credible report or an order from an authority, when content appears to be illegal, when it harms the Service or third parties, or when a service generates abusive traffic. We are not obliged to block anything, and we are not obliged to give reasons, although we will try to answer reasonable questions sent to admin@onion.pizza.

Technically, blocking works with lists maintained by us: a list of hashed onion addresses and URLs, and a list of patterns matched against the requested address and path. Entries are added by the Operator by hand, after a report or on their own initiative. The software can also import blocklists shared by other Tor2web gateway operators and publish our own hashed list for them; as currently configured we do neither: no third-party blocklist is imported and our blocklist is not published. We may change this, and will update this page if we do. Blocked requests receive an "Access Denied" page.

If you operate an onion service and believe it was blocked in error, you can write to admin@onion.pizza and explain why. We will consider your request in good faith but are under no obligation to proxy your service.

We may also block, rate-limit or otherwise restrict individual users, IP addresses, networks or user agents that violate section 4 or endanger the Service (section 11).

8. Privacy and logging

This section describes what the Gateway actually processes and records, based on the software and configuration we run. We do not claim to keep "no logs". Read it before you use the Service.

8.1 Data processed to serve your requests

To proxy a request the Gateway necessarily processes, in memory and for the duration of the request: your IP address and connection details; the requested hostname (which contains the onion address); the full URL including any query string; the HTTP headers your browser sends (for example User-Agent, Referer, Accept-Language, cookies for the Gateway's subdomain); any request body (form fields, uploads); and the complete response of the onion service. Your IP address is compared against a list of known Tor exit nodes (downloaded from the Tor Project) to decide whether to redirect you to the .onion address instead of proxying. The /checktor endpoint, if called, returns your own IP address to you.

Your IP address is not forwarded to the onion service: the onion service sees a connection coming from the Tor network. Your User-Agent and other request headers, cookies and form data are forwarded to the onion service, which may log or use them according to its own rules, over which we have no control.

8.2 What is logged

The Gateway keeps an access log with one line per request, containing:

The Tor2web software writes a fixed placeholder (127.0.0.1) in the client-address field of the access log instead of your IP address. Your IP address is therefore not part of the Gateway's own access log.

Reverse proxy. Your connection does not reach the Gateway directly. It first reaches a reverse proxy that we operate on a virtual server rented from IONOS SE in a data centre in Germany. That proxy terminates TLS (HTTPS) and forwards your request through an encrypted tunnel to the Gateway, which runs on the Operator's own equipment at home in the Netherlands. To do this the proxy necessarily processes your IP address and connection data transiently, in memory; HTTP access logging is switched off on it, so it does not write access logs. Its operational error logs, if any, may occasionally contain connection details and are kept no longer than needed to fix the problem. No other component we operate records client IP addresses.

The Gateway also keeps a technical (debug) log with operational messages, which include the onion hostnames being requested and error details, and the Tor client keeps its own logs. Emails you send us (abuse reports, questions, requests) are kept as part of our correspondence.

Request bodies (what you submit in forms) and the content of onion services' responses are not written to the logs.

8.3 Statistics

The Gateway counts how many responses it has served per onion service. These counters are held in memory, reset daily, and the previous day's totals (onion address and count only, no user data) are published at /antanistaticmap/stats/yesterday, where anyone can read them.

8.4 Cookies

These cookies are strictly necessary for the function you requested. They contain no identifier and are not used for tracking or advertising. In addition, cookies set by an onion service are passed on to your browser with their domain rewritten to the corresponding *.onion.pizza hostname; those are the onion service's cookies, not ours, and we do not read them. We do not use analytics, advertising or third-party tracking of any kind.

8.5 Purposes

We process and log the data above only to: operate and secure the Service; detect, investigate and stop abuse (including attacks, mass crawling and the use of the Service for illegal purposes); handle reports, orders and legal obligations; troubleshoot problems; and produce the aggregate statistics described in 8.3.

8.6 Retention

Access and technical logs are kept for about 24 hours and are then deleted, unless we need to keep specific entries longer to handle a specific abuse report, to comply with a legal obligation, to preserve evidence of a crime, or to establish, exercise or defend legal claims; in that case only the entries concerned are kept, for as long as that purpose requires. Abuse reports, requests and related correspondence are kept for as long as needed to handle the matter and at most one year after it is closed, unless a legal obligation or a pending dispute requires longer. In-memory statistics are lost when the Service restarts and the published daily totals contain no personal data.

8.7 Disclosure

We do not sell, rent or trade any data about users of the Service, and we do not use it for advertising. We disclose data only:

• to IONOS SE (Germany), which provides the virtual server on which our reverse proxy runs (section 8.2) and acts as our processor under a data processing agreement. The Gateway itself runs on the Operator's own equipment in the Netherlands. Our internet access provider and domain and certificate services see only the connection and domain metadata that any internet service necessarily exposes to them;
• to law enforcement, courts or other public authorities when we are legally required to do so, or when we believe in good faith that disclosure is necessary to prevent or report a serious crime, in particular child sexual abuse, or to prevent imminent harm to a person;
• to other gateway operators, hosting providers or security organisations, limited to technical data about attacks or abuse (for example abusive IP ranges or user agents, or blocked onion addresses), where needed to protect the Service or third parties;
• to our legal advisers where necessary to establish, exercise or defend legal claims.

We will try to inform affected users of requests from authorities where we are legally allowed to and able to identify and contact them, which, given the nature of the Service, is usually not the case.

8.8 Security

We take reasonable technical measures to protect the Gateway, but no system is perfectly secure, and the Gateway by design can read all traffic that passes through it (section 3). Use it accordingly. If you discover a security vulnerability in the Service, please report it to admin@onion.pizza rather than publicly.

9. Data protection (GDPR)

The Operator is established in the Netherlands, so Regulation (EU) 2016/679 (GDPR) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG) apply to the processing described in section 8.

• Controller. The volunteer operator of onion.pizza, a natural person residing in the Netherlands, contact admin@onion.pizza. For the Operator's own safety and privacy, their name and home address are not published on this page; they are disclosed to competent authorities and, where the law requires it, to a data subject on request through the email address above. All data-subject requests can be made, and are answered, by email. No data protection officer has been appointed, as the processing described here does not require one (Art. 37 GDPR).
• Personal data processed. Those listed in section 8: IP address and connection data (processed transiently), requested onion addresses and URLs, browser headers (user agent, referer), timestamps, cookies described in 8.4, and the contents of reports and emails you send us.
• Legal basis. Our legitimate interests (Art. 6(1)(f) GDPR) in operating and securing a free public service, in preventing and investigating abuse and in handling reports and legal requests; compliance with legal obligations (Art. 6(1)(c)) where authorities require disclosure; and, for the technically necessary cookies, Art. 5(3) of Directive 2002/58/EC as implemented in Article 11.7a of the Dutch Telecommunications Act (Telecommunicatiewet), which exempts cookies that are strictly necessary for a service you requested from the consent requirement. Where we rely on legitimate interests we have weighed them against your interests; the measures in section 8 (no IP address in the access log, short retention, no tracking) are the result.
• Recipients, processors and transfers. See 8.7. Our only processor is IONOS SE, Germany, which hosts the virtual server running our reverse proxy under a data processing agreement (Art. 28 GDPR). The Gateway itself runs on the Operator's own equipment in the Netherlands. All processing by us or on our behalf takes place in Germany and the Netherlands; we do not transfer personal data outside the EU/EEA. Note that the onion services you visit, and the Tor network itself, are outside our control and may be located anywhere; what you send to them is not a transfer by us.
• Retention. See 8.6.
• Your rights. You have the right to request access to, rectification or erasure of your personal data, restriction of processing, data portability where applicable, and to object to processing based on legitimate interests. Note that because the Service does not identify its users and the access log does not contain IP addresses, we will usually be unable to link log entries to you, and we may ask for additional information to verify a request. To exercise your rights, write to admin@onion.pizza.
• Complaints. You have the right to lodge a complaint with a supervisory authority, in particular in the EU/EEA member state of your habitual residence, place of work or of the alleged infringement. Our supervisory authority is the Dutch Data Protection Authority, Autoriteit Persoonsgegevens.
• No automated decisions. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Blocking of addresses (section 7) concerns onion services, not individual users, and is decided by a person.

10. No warranty, availability and liability

10.1 As is

The Service is provided free of charge, "as is" and "as available", without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, security or availability, to the fullest extent permitted by law. In particular we do not warrant that the Service will be uninterrupted, timely, secure or error-free, that any onion service will be reachable, that content will be transmitted unaltered, or that the Service provides any anonymity, privacy or protection from malicious content.

10.2 Availability

We may suspend, restrict or discontinue the Service, in whole or in part, at any time and without notice, including for maintenance, security, legal reasons or because we choose to stop running it. We have no obligation to keep the Service available or to proxy any particular onion service.

10.3 Limitation of liability

The Service is a free, non-commercial volunteer service. To the fullest extent permitted by applicable law, the Operator is not liable for any damage arising out of or in connection with the Service or your use of or inability to use it, including:

• the content, actions or omissions of onion services or their operators, or anything you do with content obtained through the Service;
• loss or disclosure of data you send through the Service (see section 3), malware, or interception by third parties;
• interruptions, errors, blocking or discontinuation of the Service;
• any indirect or consequential damage, or loss of profits, data, goodwill or privacy, even if we have been advised of the possibility of such damage.

This exclusion does not apply to damage caused by the Operator's intent or deliberate recklessness (opzet of bewuste roekeloosheid), or in any other case where mandatory law does not allow liability to be excluded. Some jurisdictions do not allow the exclusion of certain warranties or the limitation of certain damages, so some of the above may not apply to you; in that case our liability is limited to the greatest extent permitted by law.

10.4 Your responsibility

You are responsible for your use of the Service and for complying with the law that applies to you, including any restrictions on accessing the Tor network or particular content where you are. If a third party brings a claim against us because of your breach of these Terms or your unlawful use of the Service, you agree to compensate us for the reasonable costs and damages we incur as a result, to the extent permitted by law.

11. Changes to these terms and termination

We may change these Terms at any time. The current version is always published at https://onion.pizza/antanistaticmap/tos.html with its effective date at the top. Changes are announced on this page by updating that effective date and take effect when published. By continuing to use the Service after a change you accept the changed Terms. If you do not agree, stop using the Service.

You may stop using the Service at any time. We may terminate or restrict your access to the Service at any time, with or without notice, if you breach these Terms, if your use endangers the Service or third parties, if we are required to by law, or for any other reasonable cause. Because the Service has no accounts, restrictions are typically applied to IP addresses, networks, user agents or request patterns. Sections 5, 8, 9, 10 and 12 survive any termination.

12. Governing law and contact

These Terms, and any dispute arising out of or in connection with them or the Service, are governed by the law of the Netherlands, excluding its conflict-of-law rules and the United Nations Convention on Contracts for the International Sale of Goods. Disputes are submitted to the competent court in the Netherlands. If you are a consumer, this choice of law and court does not deprive you of the protection of the mandatory consumer-protection provisions of the law of the country in which you habitually reside, and you may also bring proceedings before the courts of that country where the law gives you that right. We are not obliged to, and do not, take part in alternative dispute resolution procedures before a consumer dispute body.

If any provision of these Terms is held invalid or unenforceable, the remaining provisions remain in effect and the invalid provision is replaced by a valid one that comes closest to its purpose. Our failure to enforce a provision is not a waiver. These Terms are the entire agreement between you and us about the Service. They are written in English only.

Contact. The volunteer operator of onion.pizza, a private individual residing in the Netherlands.
Email: admin@onion.pizza (abuse reports, copyright notices, requests from authorities, privacy requests, security reports and everything else). This address is the single point of contact for all purposes, including those of Articles 11 and 12 of the Digital Services Act; messages in English or Dutch are accepted.

Why no name or address is published. The Service is run by one private person from their home, without any commercial purpose, and the content reachable through it attracts hostility. Publishing the Operator's name and home address would expose them to harassment and physical risk. The Operator therefore publishes a working contact email address instead, answers it, and discloses their identity and address to competent courts and authorities, and to anyone else to whom the law gives a right to it, on request through that address.