Specification, not yet live. See Shadow Protocol.
In the proposal, the sender is hidden, the amount is encrypted and the merchant remains public. In the proposal, the sender is hidden, the amount is encrypted and the merchant remains public.

​
Fully private (zero-knowledge)

​
Partially private

​
Public by design

  • The merchant’s phone or wallet.
  • The settlement contract address.
  • Network fees, which Numpay pays.

​
Guarantees by role

  • The amount is hidden.
  • The sender’s wallet isn’t in the proof.
  • The sender’s balance is never disclosed.
  • The sender’s phone number is never public.