Privacy and public information

sNIGHT is a shielded token. That does not make all activity involving it private. In particular, wrapping and unwrapping cross the boundary between unshielded NIGHT and shielded sNIGHT.

What is public?

Activity or data	Privacy boundary
Wrapping NIGHT	The funding address, token, and amount are public.
Unwrapping sNIGHT	The unshielded recipient address, token, and amount are public.
Transaction records	Transaction identifiers and timing can be observed publicly.
Pool backing	The contract’s locked NIGHT balance is public and readable by the SDK.
Holding and moving shielded tokens	Uses Midnight’s shielded-token system; this does not hide public wrap/unwrap activity or information you disclose.

The app’s Ledger and Stats use public contract activity. Its history code explicitly treats the paying-in address and paid-out address as public on-chain data. An address count is not a count of unique people.

Shielding is not an anonymity guarantee

Observers can compare public amounts, addresses, and timing. Matching those patterns may suggest relationships between entry and exit activity. This is a privacy risk to consider, not a claim that every wrap can be conclusively matched to an unwrap. No guaranteed anonymity set, unlinkability, or protection against every observer is established by the reviewed code.

Do not assume that wrapping hides the origin of NIGHT, makes an unwrap recipient private, or removes existing public records. Sharing addresses or transaction details can reveal additional context.

The wallet and proving boundary

The connected wallet owns keys, proving, balancing, and submission. The app requests addresses and balances from it to provide the interface. Shielded information is therefore not hidden from your own wallet or necessarily from services it uses.

Check whether your wallet proves locally or uses a remote service. The proof-server trust disclosure explains the risk of exposing the coin secret key to a proving service.

These token-privacy statements do not establish a website or wallet provider’s data-retention policy.

Implementation references are listed in Sources and verification.