Privacy Model

How Husher reduces on-chain exposure through architecture, non-custodial execution, and optional privacy-enhancing routing

Husher incorporates privacy as a design principle, not as a marketing promise.

Rather than relying on user accounts, internal balances, or custody, Husher reduces unnecessary exposure during swaps through non-custodial execution, minimal data retention, and optional privacy-enhancing routing.

Privacy in Husher is primarily structural. No accounts, no internal balances, no custody of funds. The architecture reduces what is created and retained, not just what is disclosed.

What this section covers

Privacy by Design

The architectural choices that reduce metadata creation and retention by default.

Non-Custodial Execution

Why Husher never holding funds is itself a privacy and security guarantee.

Private Mode Overview

The optional mode that adds privacy-enhancing routing to reduce on-chain linkability.

Execution Flow (Conceptual)

A step-by-step view of how Normal and Private Mode orders travel from input to output.

Privacy Networks: Monero and Zcash

How XMR and ZEC shielded transactions are used as optional routing intermediaries.

What Private Mode Does and Does Not Do

The specific protections Private Mode provides, and the honest limits of what it does not guarantee.

Multi-Wallet Distribution and Privacy

How splitting output across multiple addresses adds discretion without claiming anonymity.

Shared Responsibility Model

The four parties whose behavior collectively determines privacy outcomes.

Why Transparency Matters

Why Husher documents both the benefits and limits of its privacy approach.