Privacy Guarantees

What is Hidden?

When performing shielded transfers within the AnomaPay app:

• Sender Identity: The on-chain observer sees the Protocol Adapter interacting with the
• Transaction Service, not your address.
• Transaction Amount: The values are encrypted within the Anoma Resource Machine state.
• Receiver Identity: The recipient is known only to the sender.

What is Visible?

• Shielding/Unshielding: When you move funds into or out of the system, the initial deposit or final withdrawal address is visible on-chain. Specifically, the addresses interacting with the forwarder contracts via Permit2 are visible.
• Proving Services: Currently, the Proving and Transaction services receive your witness data to generate proofs. While they cannot steal funds (due to your private key to authorize resource consumption remaining on your system, always), they do have visibility into transaction metadata during this processing phase.