Skip to content

Privacy

Who can see what, and the limits of each trading route.

Robinhood Chain is a separate public-wallet flow. Its balances, approvals and swaps are visible onchain; its RPC traffic is not OHTTP-shielded. The Zcash/private-wallet architecture below applies to supported Zcash-funded venues, not Robinhood swaps.

Your wallets, as the public sees them

No live private wallets. Each one you fund shows up here with exactly what a copy trader can find.

Who sees what

  • Your browserSeesEverything: your words, your balance, which wallets are yoursNeverSends any of it anywhere. It is encrypted in this browser's vault
  • Umbra Trade relay (Cloudflare)SeesYour IP address, the public markets you look at, and that sealed requests went byNeverWhat a sealed request asks, or which wallet it is about (OHTTP seals it for the gateway)
  • Umbra Trade gateway (Ireland)SeesWhat one request asks, like one address's balanceNeverWho asked: no IP, no cookies, no account. It writes no logs of its own and caches only public market data
  • HyperliquidHyperliquid, PolymarketSeesOne fresh wallet's trades, coming from the gateway's addressNeverYour other wallets, your ZEC, or your IP
  • NEARNEAR IntentsSeesEach swap: a standard ZEC amount into a fresh wallet, or a wallet's balance back to a fresh shielded addressNeverWhich swaps are yours: no two share a deposit, refund or payout address
  • ZcashThe Zcash chainSeesThat shielded transactions happened, plus the hops through NEAR: a standard amount in, a trip home's amount outNeverYour balance, your addresses, or any amount inside the shielded pool

Umbra Trade asks NEAR for confidential mode on every quote; this shows what it grants once one answers.

What Umbra Trade does so nothing links

  • A new wallet for every trade, on its own key path from your words.
  • Standard sizes only (0.01 to 1 ZEC), so a funding looks like everyone else's.
  • Each funding starts at a random moment, never the moment you tap.
  • Money that arrives from a public address rests 2–6 hours before it can fund anything.
  • Every funding refunds to a fresh shielded address, and every trip home pays out to one.
  • No memos, and the standard transaction shape, so nothing stands out on chain.
  • Everything about your wallets goes sealed with OHTTP; public prices and pictures come through Umbra Trade's relay.
  • Each wallet is read on its own random schedule, so no venue sees them asked about together.

The leak meter

On every send it checks what an onlooker could match: a funding that isn't a standard size or would spend resting money; a withdrawal to a public address that equals or comes soon after money that came home. Red stops a funding; on a withdrawal it warns, because the choice is yours.

What stays public

Each wallet's own trades on its venue; its funding, at a standard size, and its trip home, at whatever it held; and NEAR Intents' record of each swap. None of it carries your name, your IP, or a link to your other wallets.