Privacy
What stays private
What anyone can read on Solana, what Opacus's own services see, and what only you know.
On Solana, for anyone
Solana is public: every transaction, forever, for anyone to read. Opacus keeps the moves inside the pool out of view, and the moves in and out of it are public, as any transfer is.
| Move | Anyone can read | Nobody can read |
|---|---|---|
| Deposit | your wallet, the asset, the amount, the time | what you do with it afterwards |
| Payment inside the pool | that a payment happened, and when | who paid, who was paid, the amount, the asset, the note |
| Payment link, made or claimed into a balance | that a payment happened, and when | everything else |
| Link or gift claimed to a wallet | that wallet, the asset, the amount | who sent the link |
| Cash-out | the wallet it reaches, the asset, the amount | whose balance it came from |
| Swap | the amounts, the assets, the market | whose swap it was |
| Short name | the name, the address it points to, when it was claimed and moved, its fee | whose name it is |
| Your balance and history | nothing | all of it |
What Opacus's services see
Two services carry your moves. Neither holds a key or can move your money.
- The relayer sends your payments, cash-outs, swaps and name claims, and pays their network fees, so your wallet never appears in them. It sees the request you send it, your IP address and the time. It never sees an amount inside the pool, a balance, or who you pay.
- The indexer lists the pool's transactions, the same list for everyone. Your app reads the whole list and finds your own notes in it with your keys, on your device, so the indexer never learns which entries are yours. Your app checks the list against the pool's own records on Solana, so an indexer that changed a single entry would be caught.
The app also reads Solana through a public node of the network (on the testnet, Solana's devnet node): for a deposit, your wallet's balances; for a short name, which name you looked up.
What only you know
Your balance in every asset, every payment you sent and received, their notes, your links, and the people you keep by name. None of it is stored by Opacus. The app works it out each time from the pool's public list and your keys, inside your browser.
Staying private
The pool hides who pays whom, but what goes in and out is public, and a careful observer can try to match the two. A few habits make that hard:
- Use round amounts. Deposit 100 or 250, not 137.42.
- Let time pass between moving money in and moving the same amount out.
- Cash out to a new wallet, not to the one you deposited from.
- Do not swap exactly what you just deposited. The app warns you when you do.
- The more people use the pool, the better it hides each of them. On a young testnet, the crowd is still small.