Skip to main content

Privacy Model

Unipay provides graph-break privacy for Solana transactions, not cryptographic anonymity. Understanding this distinction is crucial for proper threat modeling.

What We Protect Against

Passive Chain Analysis

Direct transaction links are broken

Competitor Surveillance

Business relationships obscured

Balance Correlation

Input and output amounts can differ

Address Clustering

Fresh addresses prevent clustering

What We Don’t Protect Against

Unipay is not designed for nation-state level privacy. The routing layer can recover transaction linkability if compelled by legal process.

Privacy Architecture

Without Privacy (Wallet Mode):
  • Direct on-chain link: Your Address → Recipient Address
With Privacy (Private Mode):
  • Broken link: Your Address → Ephemeral → Routing → Recipient

Ephemeral Addresses

Each private transaction uses a unique ephemeral address that is single-use, unpredictable, temporary, and unlinkable to previous or future addresses.

Threat Model

Best Practices

  • Use different networks when possible
  • Vary transaction timing
  • Mix transaction sizes
  • Rotate session keys regularly
Avoid using the same amounts repeatedly or transacting at predictable times.