Privacy
What stays private, what is public, and who sees what.
What stays private
- The link between your deposit and your private send, as long as the pool has enough other deposits.
- Your keys and your signature: they never leave your browser. The app stores nothing on a server.
What is public
- Each deposit: the wallet, the amount and the time.
- Each private send: the recipient, the amount and the time. The relayer sends it, not your wallet.
- Each ragequit: it links the deposit to your wallet.
Who sees what
- The ASP sees the public deposit data, the same as everyone.
- The relayer sees the recipient, the amount and your IP address when you send.
- The RPC provider sees your IP address and the requests of this app.
The app has no analytics and sets no tracking cookies.
Small pool warning
Privacy grows with the number of deposits. In a small pool, an observer can match a send to a deposit by amount and time. Wait, send round amounts and do not send right after you shield.