Private tokens,
kept on your device.

Can be linked to you

• Your payment. Sending USDG or $ANYR is a public transaction on the chain, and the router reads it from there. Anyone, the router included, can see that your wallet paid, how much, and to which one-time key (USDG) or to the escrow address ($ANYR).
• The purchase. The router records that the one-time key spent an amount on tokens: how many, and of which sizes. For $ANYR the credit sits on your wallet’s account, so the purchase is recorded against that wallet. Put together, “this wallet bought N tokens” is on record.
• Your network address, and when. Buying over the clearnet shows the router your address, and buying right before you spend links the two by time. This page also works at the router’s onion address, where the router sees no address; the USDG route lets you pay from any wallet app, so the rest can run in Tor Browser.

Cannot be linked to you

• Which prompts the tokens paid for. The router signs each token blind: it never sees the token it signs. When you spend one, the router can check that it is genuine and unspent, but it cannot tell which purchase or wallet it came from. A call paid with a token is recorded against a hash of the token, with no key, account or wallet, and its receipt says the same.

What tokens do not hide

• The text of a request. On every lane the router reads a request in memory to route it, and that includes a call paid with a token. Tokens hide who is paying, not what is sent.
• Your address while you spend, unless you use Tor. Spend tokens through the router’s onion address to keep your network address from it. Calls on one Tor circuit can be linked to each other.
• Nothing is refunded. A token pays for one call, up to its value, and the unused part is not returned. Tokens stop working after the date shown with them, and the router keeps no record of who holds them, so a lost token cannot be replaced.