Privacy Model

What is private?

• The link between deposit and withdrawal addresses — no one can determine which deposit corresponds to which withdrawal
• The depositor's identity during withdrawal — relayers submit the transaction, not your wallet

What is NOT private?

• Deposit transactions — visible on-chain (address, amount, timestamp)
• Withdrawal transactions — visible on-chain (recipient, amount, timestamp)
• Amounts — deposit and withdrawal amounts are public

Privacy Set

Your privacy depends on the privacy set — the number of deposits that a withdrawal could plausibly correspond to. A larger privacy set means stronger privacy.

Best Practices

1. Wait before withdrawing — more deposits between yours and the withdrawal increase the privacy set
2. Use a fresh address — withdraw to an address with no prior transaction history
3. Don't withdraw the exact same amount — use partial withdrawals to obscure the connection
4. Use relayers — never withdraw directly from your depositing wallet