> For the complete documentation index, see [llms.txt](https://docs.husher.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.husher.io/documentation/privacy-model.md).

# Privacy Model

- [Privacy Model](https://docs.husher.io/documentation/privacy-model/privacy-model.md): How Husher reduces on-chain exposure through architecture, non-custodial execution, and optional privacy-enhancing routing
- [Privacy by Design](https://docs.husher.io/documentation/privacy-model/privacy-model/privacy-by-design.md): Husher reduces metadata creation and retention by design, through non-custodial architecture and the absence of accounts, internal balances, or persistent user profiles
- [Non-Custodial Execution](https://docs.husher.io/documentation/privacy-model/privacy-model/non-custodial-execution.md): Husher never holds user funds, relying instead on one-time ESP-generated deposit addresses that route directly from input wallet to destination wallet
- [Private Mode Overview](https://docs.husher.io/documentation/privacy-model/privacy-model/private-mode-overview.md): Private Mode is an optional, user-controlled execution path that reduces on-chain linkability and exposure to MEV and behavioral wallet analysis
- [Execution Flow (Conceptual)](https://docs.husher.io/documentation/privacy-model/privacy-model/execution-flow-conceptual.md): A conceptual walkthrough of how a swap travels from the user's wallet to final delivery in both Normal and Private execution modes
- [Use of Privacy-Focused Networks (Monero & Zcash)](https://docs.husher.io/documentation/privacy-model/privacy-model/use-of-privacy-focused-networks-monero-and-zcash.md): Private Mode may route swaps through Monero or Zcash shielded transactions as intermediaries, reducing on-chain linkability without changing the non-custodial nature of execution
- [What Private Mode Does and Does Not Do](https://docs.husher.io/documentation/privacy-model/privacy-model/what-private-mode-improves.md): What Private Mode improves, including reduced linkability and MEV exposure, and the honest limits of what it does not guarantee
- [Multi-Wallet Distribution & Privacy](https://docs.husher.io/documentation/privacy-model/privacy-model/multi-wallet-distribution-and-privacy.md): Multi-wallet distribution allows a single swap to deliver output to multiple addresses, reducing one-to-one linkage and supporting portfolio or operational separation
- [Shared Responsibility Model](https://docs.husher.io/documentation/privacy-model/privacy-model/shared-responsibility-model.md): Privacy outcomes in crypto trading depend on four parties: the user, the underlying blockchain networks, Exchange Service Providers, and Husher
- [Why Transparency Matters](https://docs.husher.io/documentation/privacy-model/privacy-model/why-transparency-matters.md): Husher documents both the benefits and limits of its privacy model to build durable trust and enable informed decision-making