Privacy
What each observer on the road can see, what they cannot, where the weak points sit, and how to keep the privacy intact.
A privacy claim is worth what it admits. This page walks the road observer by observer.
The claim
Start at the holder on Robinhood Chain and walk backward. You can reconstruct the whole road: the delivery, the solver's payment, the NEAR Intents swap, the deposit on Zcash. The walk stops at the deshield. The shielded pool's proofs keep the ZEC that left it apart from any ZEC that went in, any address, any earlier transaction.
So the road is fully traceable from the holder back to a deshield, and not traceable from that deshield to you.
Observer by observer
| Observer | Sees | Does not see |
|---|---|---|
| Zcash | an amount leaving the pool to a one-time t1 address, and the time | your shielded address, balance or history |
| NEAR Intents and the solver | a deposit at an address it generated, the payout and the recipient | who sent the ZEC |
| Relay (fallback only) | the courier paying your envelope | anything on Zcash |
| The courier (fallback only) | which deposit address paid which envelope | anything a chain observer could not already see, except your refund address |
| Robinhood Chain | the envelope, the sweep, the purchase and the holder | an owner |
| The HOOZ site | your IP, the quote you asked for | nothing it keeps: orders live in your browser |
Three things the claim does not say
- Later behaviour is public. What the holder does after delivery is ordinary public EVM activity.
- Amounts and timing are visible. Deshield exactly one ZEC every Monday at nine, and anyone can match your deliveries without HOOZ's help.
- The refund address is a link. NEAR Intents and the courier learn it. Use a fresh transparent address each time.
How to keep it intact
- Send from the shielded pool, never from a transparent balance.
- Use a receiving address that has never touched your other wallets. Do not fund it for gas from an exchange or a known wallet: the first delivery brings ETH, which pays gas.
- Vary amounts and times. Avoid round numbers on a schedule.
- Open the site over a connection you would not mind a web server seeing.
- Connecting a wallet to HOOZ is optional. The send page works without it. If you connect, connect the fresh wallet, not your main one.