

You need to jump through several hoops to have privacy while ordering online. I mean per default they need your address to deliver the thing to you, need some bank details to get the money, you’ll be motivated to create an account (for example for warranty/returns…). And there’s always some things running in the background with your IP address and bank details because there’s fraud and shops have to mitigate for that. So… I’m sure it is possible to order online with varying degrees of privacy. But it loses all the convenience that online shopping is supposed to provide.
I like shopping offline. And maybe my small contribution is going to help some real-world stores stay afloat in our modern world. I have GrapheneOS on my phone, I don’t think Google Pay works on my phone. And even if it did, I wouldn’t provide my credit card number to Google. I’ll just pay with my card in the usual supermarket or at the gas station for convenience, or use cash if I don’t want to leave a trail. And I don’t do all the discount programs. They’re mostly there to keep track of my shopping behaviour. I’m going to need at least some 10 or 15% discount for me to start with that shit.
At least that’s how I do it. It’s not 100% privacy, by any means. But my dislike of Amazon etc at least makes me order few things there. So they only know about a small chunk of my life. Not what kind of washing detergent or phone or computer I use, what size of clothes fit my body. I buy all of that in offline stores. And I’ll keep doing that as long as there’s still some around. And the only thing they know about me is whatever number an EC terminal leaves when I swipe my card. Unfortunately they’re all being displaced by online shopping. I hope my government regulates what kind of things proper German stores can do with my credit card numbers.







If that traffic is going through an encrypted Wireguard tunnel, I don’t see a reason to encrypt it a second time. Judging by your description, it’s already encrypted on transport between the router and VPS. HTTPS would add nothing there. It will however add encryption within your DMZ, if you expect something nefarious going on within your DMZ.