What is hidden
Inside the pool, a transfer shows no sender, no recipient, no token and no amount. An observer sees only that some notes were spent and some new notes were created. The values are encrypted and the proof is the only public evidence.What is public
Deposits and withdrawals touch your public wallet, so they are visible. Only the time spent inside the pool is private.
What limits your privacy
The size of the group you hide in. Privacy depends on how many other people use the pool. If few people use it, or amounts are rare, an observer can often match a deposit to a withdrawal by amount and timing. More users and more activity make this harder. Early in the life of a pool, the group is small. Amount and timing. A distinctive amount, such as 1,247.83, can be matched from a deposit to a withdrawal. Round amounts and a gap between steps help. Public steps. A deposit shows your wallet and a withdrawal shows the receiving address. If you withdraw to a wallet that is linked to you, you undo the privacy of that path. The relayer. The relayer or bundler sees a transaction and when it arrived. It does not see who you are. Use one you trust, or run your own. Registration. Registration links your wallet to your shielded account in public. It lets people pay you. It does not show what you hold.Where the privacy is conditional
Privacy toward the public is not privacy toward the disclosure network. The revoker and a threshold of Decom guardians can de-anonymize any transaction. The revoker alone can recognise which registered account spent a note. The revoker also keeps what it de-anonymized on Palliora, as an encrypted report that it, or any third party it grants access to, can open. See Accountable privacy and disclosure and Palliora integration.Private Sub-accounts
A Private Sub-account hides the link between you and a trading address. The position itself is public. Read Private Sub-accounts before you trade.Practical advice
- Deposit round amounts.
- Leave time between deposit and withdrawal.
- Withdraw to an address that is not linked to your wallet.
- Keep your view key private, since it shows everything.