Privacy

Privacy protocols

Four privacy protocols, stacked your way. Each one hides something specific. Switch on the ones you want, put them in the order you want, and see the full cost before you start. ZeroFee adds 0% to any of them.

The four protocols, by what they hide

Confidential crossing on NEAR Intents. Your deposit and your payout aren't publicly linked. It is automatic wherever NEAR allows it, so there is nothing to switch on.
Solana ZK pool (Privacy Cash). A zero-knowledge proof hides which deposit paid which withdrawal. About 3–5 minutes, 0.35% + about $0.63.
Zcash shielded. Inside Zcash's shielded pool, the sender, the receiver and the amount are hidden. Zcash network fees, plus the protocols that carry your coin in and out.
Monero. Monero hides the sender, the receiver and the amount (ring signatures and stealth addresses), built into the chain. About 15 minutes, minimum about 50 USD.

Stack them your way. Use one or several, in the order you choose. NEAR Intents and Relay carry the legs between steps, and the route shows every step before you start. In ZeroFee Pay, the payer can send a payment through the ZK pool, Zcash and Monero the same way.

Built in, every time

Temporary wallets made in your browser. The steps that need a wallet make one in this browser. Its keys are encrypted and never leave it except in the recovery file you save; ZeroFee's servers never see them. Each wallet is designed to end empty, and the swap's page shows its live balance until it does.
No account, no profile. Nothing to sign up for, no wallet to connect, no analytics. There is no ZeroFee-side profile tying your swaps together.
Providers see our server, not you. Confidential NEAR Intents requests, the Monero step's orders and the ZK pool's withdrawals go through ZeroFee's pass-throughs, so those providers see our server instead of your IP address. ZeroFee keeps no record of them.
The full cost and time, before you start. Every step's time and cost are in the total the swap page shows, in dollars. ZeroFee fee 0%.

Switch them on

On the swap page, the Privacy box has one switch per step. Turn on as many as you like and set their order; the route draws the path your money takes, and the cost and the expected time include every step.

Standard: no step switched on. A normal public swap, at the best price.
Confidential crossing: automatic. When both coins are on NEAR Intents and the swap crosses chains, it crosses in NEAR's confidential mode where NEAR allows it.
Solana ZK pool (about 3–5 minutes): your money passes through Privacy Cash's pool on Solana.
Zcash (several minutes): your coin becomes shielded ZEC in a Zcash wallet made in your browser, where sender, receiver and amount are hidden, then leaves it as the coin you want.
Monero (about 15 minutes): Monero hides the sender, the receiver and the amount. Your coins are held for a few minutes on the way.

A deep link can switch steps on too: /swap?…&privacy=zk,xmr opens the page with the ZK pool and then Monero.

A standard swap

Hides: Nothing extra on-chain. This is a normal public swap.
Who can see it: Anyone reading the blockchain, the protocol and anyone running analytics can follow it.
Funds in flight: The protocol’s solvers, for the seconds to minutes the swap takes. Never ZeroFee.
Typical speed: Seconds to minutes. The swap page shows the expected time before you start.
Cost: The protocol’s fee and the spread, and the network fee for sending your deposit. ZeroFee adds 0%.
Best for: Swaps where speed and price come first.

Confidential crossing on NEAR Intents

When both coins are on NEAR Intents and the swap crosses chains, ZeroFee asks NEAR Intents to cross in its confidential mode. There is nothing to switch on. Where NEAR can carry a pair only in public mode, the swap crosses on NEAR Intents publicly and the swap's page shows the route without “confidential”. A pair NEAR Intents doesn't carry goes through Relay, which is public.

Hides: The link between your deposit and the payout. NEAR Intents’ confidential mode is designed so the two can’t be linked from public chain data.
Hidden from: Anyone reading the blockchain.
Funds in flight: NEAR Intents’ deposit address and its solvers hold the funds until they pay out. If a swap can’t complete, it is refunded to your refund address.
Typical speed: Minutes. NEAR Intents gives its own time estimate with the price.
Cost: NEAR Intents’ fee (0.2%) and the solver’s spread, plus the network fee to send your deposit.
Good to know: The unlinking is NEAR Intents’ own design. NEAR Intents sees both sides of the crossing, and our server forwards the request (it adds our partner key and stores nothing).

Two-step routes. When no single protocol can carry a pair, the swap goes in two steps through USDC or ETH on Base or Arbitrum. The NEAR Intents step crosses confidentially where NEAR allows it, and the Relay step is public. Add the ZK pool, Zcash or Monero to break the link on these pairs too.

Solana ZK pool

Your coin becomes SOL in a temporary wallet made in your browser (carried there by NEAR Intents or Relay). That wallet puts the SOL into Privacy Cash's pool on Solana. It comes out to a second fresh wallet, which sends it on as the coin you want. If you pay in SOL and the ZK pool is the first step, you send it straight to the first temporary wallet.

Hides: Which deposit into the pool paid which withdrawal. A zero-knowledge proof shows the withdrawal is allowed without saying which deposit it came from.
Hidden from: Anyone reading the blockchain. The busier the pool, the stronger the cover.
Who sees what: Privacy Cash’s withdrawal service sees the fresh wallet the money comes out to, never your receiving address. Our server forwards the withdrawal request, so Privacy Cash doesn’t see your IP address.
Typical speed: About 3–5 minutes. Keep the swap’s page open while it runs.
Cost: Privacy Cash’s fee of 0.35% plus a small fixed amount (about $0.63 when last checked), plus the protocols that carry your coin in and out, and Solana network fees.
Good to know: Round amounts blend in best. The protocols that carry your coin in and out of Solana see their own part.

Zcash shielded

Your coin becomes ZEC, carried by NEAR Intents into a shielded Zcash wallet made in your browser. That wallet sends it all on to NEAR Intents, which turns it into the coin you want. Before you start, you save that wallet's 24 words; ZeroFee never sees them.

Hides: Inside Zcash's shielded pool, sender, receiver and amount are hidden, so the chain doesn't show which payment in became which payment out.
Who sees what: NEAR Intents sees the ZEC it pays into the wallet and the ZEC the wallet pays back to it. The wallet's keys stay in your browser.
Typical speed: Several minutes: the wallet waits for the ZEC to land in a Zcash block (about every 75 seconds), then builds a zero-knowledge proof in your browser before sending it on. Keep the swap's page open while it runs.
Cost: Zcash network fees (about 0.00015 ZEC to send it on), plus the protocols that carry your coin in and out.
Does not protect: Amount and timing: what goes in and what comes out are close in size and minutes apart, so they can be matched, especially when the pool is quiet.

Monero

Monero hides the sender, the receiver and the amount (ring signatures and stealth addresses), built into the chain. On its own, the Monero step is a single deposit: you pay one deposit address and the coin you want arrives at your address. When the Monero step can't take your coin, or can't pay the one you want, NEAR Intents or Relay converts it first or after, paying the next deposit address directly. Stacked with other steps, it runs from one temporary wallet in your browser to another.

Hides: The sender, the receiver and the amount on Monero’s chain, so the chain doesn’t show which coins in became which coins out.
Hidden from: Anyone reading the blockchain.
Who sees what: One side of the step sees your deposit and your refund address; the other sees the payout and the receiving address. Neither sees both, so the refund address must be one you pay from, never the receiving one: the swap page won’t start otherwise. Our server forwards the requests while the orders are made, and stores nothing.
Funds in flight: Your coins are held for a few minutes on the way.
Typical speed: About 15 minutes: the payout waits for Monero confirmations.
Cost: The spread in the rate (inside the price shown) and network fees on each part and on Monero. The minimum is about 50 USD.
If it needs a hand: Talk to support from the button on the swap’s page. The swap is attached, and the page has already told our team.

Through the API

The REST API and the MCP server offer three privacy options. The ZK pool and Zcash steps run through wallets made in a browser, so they live on the swap and pay pages.

standard: public, as above.
private: NEAR Intents' confidential crossing. A route that isn't fully confidential says so in its notes.
xmr: the Monero step, with a NEAR Intents or Relay conversion before or after when needed.

Who sees what

Everyone who touches a swap, and what each one can see.

Anyone reading the blockchain. They see every on-chain transaction: which addresses sent and received, the amounts and the times. In a standard swap that includes the wallet you paid from and the address you receive in, tied together. That is the link the privacy protocols break.
The protocols. NEAR Intents or Relay issues your deposit address and fills the swap. It sees the addresses and amounts of the part it carries, and its solvers hold the funds from your deposit until they pay out.
Privacy Cash, in the ZK pool step. Its pool holds the SOL between deposit and withdrawal, and its withdrawal service sees where the money comes out to: a fresh temporary wallet, not your address.
The Monero step's services. Each sees one side of the swap, never both, and keeps its own record of its order. They are listed on the Security page.
ZeroFee's servers. Small pass-throughs sit between your browser and some providers: confidential NEAR Intents requests, the Monero step's orders, the ZK pool's withdrawal service, and the network requests of the Solana and Zcash wallets made in your browser. They forward each request, so they see it in transit, including the addresses in it; the code stores and logs none of it. If a swap fails or stalls, its page also sends our support team a short report: the swap's id, its deposit address, the coins, chains and amounts, the step and the error. It never contains a key or your receiving address. Details are on the Security page.
Your own device. While a swap runs, this browser keeps its page and, for privacy steps, the temporary wallets' keys (encrypted, in this browser only). When the swap finishes, the page is forgotten. Like any wallet, it relies on a clean device: malware or a hostile browser extension could read a running swap, or swap an address you paste for theirs.

Good to know

Privacy protocols break the public links between your wallets. They don't make you anonymous: distinctive amounts and tight timing can still let an analyst match a deposit to a payout, which is why round amounts and a little patience help. A part of a route that crosses publicly (Relay, or NEAR in public mode) links its two ends like any bridge. Rules on privacy tools differ by country, and following the law where you are is up to you; the risk disclosure has the wider picture.

Getting the most from it

Receive at an address with no history. Use an address that has never touched your other wallets, exchange withdrawals or public profiles.
Pay from a wallet you are happy to link. The deposit comes from wherever you send it. If it comes from an exchange account in your name, that exchange knows the deposit is yours.
Use round amounts. Round, common sizes blend in: 0.5 ETH rather than 0.4873 ETH. An amount you have mentioned publicly is easy to match.
Give it time. Let the received funds sit, and move them on in pieces later. Sending them straight to your main wallet recreates the link the swap just broke.
Pick the protocol that fits, or stack them. A confidential crossing adds no extra time. The ZK pool is quick and strongest when the pool is busy. Zcash and Monero hide the sender, the receiver and the amount on their own chains. Stack two or more for more than one break.
Keep the page open. During a private swap, keep the swap's page open until it finishes, and don't clear this site's data: the temporary wallets live in this browser.
Use a VPN you trust. Public NEAR Intents requests and Relay are called straight from your browser, so they see your IP address, as any website would.
Read the route. The swap page shows the path, the cost and the time before you start; the swap's page names each protocol as it runs.

Ready? Open ZeroFee Swap, switch on a protocol and see the full cost before you start, or make a pay link your payer can send privately. New words are in the glossary.

PreviousWallet NextREST API