Privacy Guarantees
What Morana protects
Shielded transaction contents
When funds move through shielded (Z) addresses, the following are hidden from anyone without your viewing key:
- Sender address — not revealed on-chain
- Recipient address — not revealed on-chain
- Amount — hidden using ZK-SNARK value commitments
- Memo — up to 512 bytes, encrypted to the recipient
The blockchain records only a note commitment and a nullifier. Even a full-node operator cannot link a spent note to its creator without the spending key.
Local key storage
Your private keys and seed phrase are encrypted on disk using Argon2id key derivation + XChaCha20-Poly1305. They are never sent to the lightd gateway, never embedded in transactions, and never leave your machine.
No telemetry
The Morana wallet does not phone home. There is no telemetry, no crash reporting, no analytics. The lightd gateway sees your IP address when you connect — use a VPN or Tor if you need network-level privacy.
What Morana does NOT protect
Transparent transactions
Transparent (T) address transactions are fully public, similar to Bitcoin. Anyone can see amounts, senders, and recipients. Use transparent addresses for exchanges, mining payouts, and situations where auditability is required. Use Z-addresses for private payments.
Transaction graph for mixed flows
If you receive funds at a T-address and then shield them (T → Z), the shielding transaction itself is visible. An observer knows you shielded some amount. The amount and subsequent movement are then hidden, but the act of shielding is not.
Network-level privacy
The lightd gateway sees your IP address and which blocks you're scanning. To hide this, connect through Tor or a VPN before launching the wallet.
Timing correlation
If you are the only person sending a shielded transaction at a given time, timing analysis could correlate your activity even if amounts are hidden. Higher shielded transaction volume improves the anonymity set.
Our honesty policy
We do not claim Morana provides absolute anonymity. The ZK-SNARK layer provides strong cryptographic privacy for transaction contents, but on-chain metadata (timestamps, transaction sizes, fee amounts) remains visible. Privacy is a spectrum — Morana gives you strong tools, and we explain their limits honestly.
For the highest privacy: use Z → Z transactions exclusively, connect over Tor, and avoid reusing addresses.