Blind Mode

Most privacy tools hide one thing. They either obscure how much you sent or who you sent it to, rarely both, and almost never in a way that still looks like a normal payment. Blind Mode hides both at once.

A blind transfer answers two questions for an outside observer, and refuses to answer either:

• How much? The amount is carried as a confidential balance. What lands on chain is a ciphertext and a set of proofs, not a number.
• To whom? The funds go to a fresh one-time address that only the recipient can derive. Nothing links it back to their public identity.

Everyone watching sees that a Protocol15 transfer happened. They do not see the value and they cannot follow the destination to a known wallet.

The product contract

Blind Mode is one toggle on an ordinary send. The dApp keeps two layers and is explicit about which one you are in:

• Normal is the public wallet. Balances and sends are visible to everyone, the way they always were.
• Private is the hidden layer. One private balance, private send and receive, accept incoming, and withdraw.

The only public moments are the two crossings between the layers. Making funds private is a deliberate step, and withdrawing back to public is another. Both are marked as public in the interface. Everything that happens inside the private layer stays hidden.

What a send looks like

A blind send is two wallet approvals and nothing more. The first funds a short-lived session key that pays fees; the second is the transfer itself. If your private balance is short, the send stops and tells you, instead of quietly wrapping more public funds. That keeps the public amount you wrapped decoupled from the private amount you sent, which matters: if the two always matched, an observer could line them up.

Why it composes

There is no separate pool to enter and exit, and no bridge to trust. A blind transfer is a normal transaction with confidential amounts and a stealth destination. That is what lets it sit inside existing wallets and apps, and read on an explorer as just another Protocol15 transfer.

See Privacy model for what actually proves the amount is valid, and Stealth & announce for how the recipient finds a payment nobody else can see.