> ## Documentation Index
> Fetch the complete documentation index at: https://docs.unipayfi.pro/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy Model

> Understanding Unipay's graph-break privacy and threat model

# Privacy Model

Unipay provides graph-break privacy for Solana transactions, not cryptographic anonymity. Understanding this distinction is crucial for proper threat modeling.

## What We Protect Against

<CardGroup cols={2}>
  <Card title="Passive Chain Analysis" icon="eye-slash">
    Direct transaction links are broken
  </Card>

  <Card title="Competitor Surveillance" icon="user-secret">
    Business relationships obscured
  </Card>

  <Card title="Balance Correlation" icon="chart-line">
    Input and output amounts can differ
  </Card>

  <Card title="Address Clustering" icon="network-wired">
    Fresh addresses prevent clustering
  </Card>
</CardGroup>

## What We Don't Protect Against

<Warning>
  Unipay is not designed for nation-state level privacy. The routing layer can recover transaction linkability if compelled by legal process.
</Warning>

| Threat Vector              | Protection Level |
| -------------------------- | ---------------- |
| **Routing layer subpoena** | ❌ None           |
| **Network surveillance**   | ❌ Limited        |
| **Timing analysis**        | ⚠️ Partial       |
| **Amount correlation**     | ⚠️ Partial       |

## Privacy Architecture

**Without Privacy (Wallet Mode):**

* Direct on-chain link: `Your Address → Recipient Address`

**With Privacy (Private Mode):**

* Broken link: `Your Address → Ephemeral → Routing → Recipient`

### Ephemeral Addresses

Each private transaction uses a unique ephemeral address that is single-use, unpredictable, temporary, and unlinkable to previous or future addresses.

## Threat Model

| User Type            | Primary Threats         | Unipay Protection |
| -------------------- | ----------------------- | ----------------- |
| **Freelancer**       | Client payment tracking | ✅ Full            |
| **Small Business**   | Competitor analysis     | ✅ Full            |
| **Trader**           | Portfolio surveillance  | ✅ Full            |
| **Privacy Advocate** | General surveillance    | ⚠️ Partial        |
| **Whistleblower**    | Nation-state tracking   | ❌ Insufficient    |

## Best Practices

* Use different networks when possible
* Vary transaction timing
* Mix transaction sizes
* Rotate session keys regularly

<Warning>
  Avoid using the same amounts repeatedly or transacting at predictable times.
</Warning>