Privacy Modes
You decide how much information leaves your device before the batch closes. Three modes, different trade-offs.
Why it matters
Even in a blind pool, metadata leaks. If solvers can see that someone wants to buy a large amount of a thinly traded token, they can position themselves before the batch settles. Privacy modes let you control exactly how much of that signal you emit.
Full visibility after the batch closes
| Asset pair (e.g. BTC → USDC) | Visible to solvers |
| Exact amount | Visible to solvers |
| Minimum output | Visible to solvers |
| Your wallet address | Visible to solvers |
Use when: Small orders where front-running risk is low and you want maximum solver competition.
Direction visible, amounts hidden until settlement
| Asset pair (e.g. BTC → USDC) | Visible to solvers |
| Exact amount | Hidden — only a commitment hash |
| Minimum output | Hidden — only a commitment hash |
| Your wallet address | Visible to solvers |
Use when: Mid-size orders where you want solvers to know the direction but not the size.
Nothing visible until after the batch closes
| Asset pair | Hidden — encrypted payload only |
| Exact amount | Hidden — encrypted payload only |
| Minimum output | Hidden — encrypted payload only |
| Your wallet address | Visible (it's on Starknet) |
Use when: Large orders, sensitive positions, or any situation where you don't want to signal intent.
What's always visible
Regardless of privacy mode, your wallet address is always visible on-chain — it's the account that signed the commitment transaction on Starknet. If your wallet address is known, the fact that you placed an order is public even in Hidden mode. What stays hidden is what you ordered and for how much.
How amounts stay hidden
When you pick Hidden Amount or Hidden mode, your browser computes a Pedersen hash of the amount and a random nonce. This hash — called the amount commitment — is what goes on-chain and what solvers see. The actual number is never written to the chain.
When the batch settles, the BatchSettlement contract checks that the solver's fill matches the commitment. If the numbers don't match the hash, the transaction reverts.
Does privacy mode affect my fill price?
Slightly, in practice. In Hidden mode, solvers have less information to work with, so they may price their solutions more conservatively. Public mode gives solvers the most to work with and typically produces the tightest competition on price. For most orders the difference is negligible.