The instrument
An instrument is a thing built to do one job precisely, without ornament and without pretending to be more than it is. This one does a single thing. It carries value from you to someone else and leaves nothing behind that joins the two of you together.
This is not a figure of speech and it is not an exaggeration for effect. A blockchain address is a ledger entry that anyone can read, and everything attached to it is readable in the same way, by the same people, with the same effort. The effort required is roughly that of loading a web page.
What most people have not internalised is how much of a life fits inside that record. Not just what you bought and sold, but who you paid, and how often, and in what amounts, and at what hours of the day. Patterns emerge from that without anyone trying very hard. A regular payment of the same size on the same day of the month reads as a salary. A single large transfer to a new address reads as a purchase. A series of small ones reads as a supplier relationship.
None of this requires breaking encryption or compromising anyone. It requires reading. The record is designed to be read. It is the entire point of the thing.
So the question is not whether your finances are private. They are not. The question is whether you have any way to make a transfer that is not automatically published, and until recently the honest answer was no, not really, not without moving to a system with its own problems.
We use the phrase deliberately. Settlement is the moment a transfer stops being a promise and becomes a fact. Private settlement means that at the moment the fact is established, nothing is written down that would let a stranger connect it to you.
It does not mean the transfer is hidden. Blockchains do not hide things. Every movement of value is still visible on the network where it happens, and anyone who looks will see movements. What they will not see is a movement that is attributable to you, at either end, or any thread running between the two.
Concretely, this changes what a search for your address returns. It returns your history, because that history already exists and nothing can unwrite it. It does not return the transfers you made through this instrument, because those transfers were never recorded against your address in the first place.
Privacy is not a setting. It is a property of how a thing was built.
That distinction is why we describe this as architecture rather than a feature. A feature is something that can be turned off, misconfigured, or quietly removed in an update. A property of the construction is present whether or not anyone remembered to enable it.
Nothing about private settlement is free, and it would be dishonest to pretend otherwise. Carrying a transfer through several independent carriers costs more than carrying it through one, and that cost is real. It is also not the kind of cost that can be absorbed indefinitely by someone hoping for scale.
There is a fee on entry, taken once, on the asset you are sending. It is small enough that it does not change whether a transfer is worth making, and it is visible before you confirm rather than discovered afterwards. Every number that will be charged to you is on the screen before you approve anything.
Where that fee goes is a separate matter and it is set out on the token page. In short, it does not accumulate in a treasury and it does not pay a salary. It goes back into the token that the protocol is built around.
It is easier to trust a product that tells you what it refuses to be. So:
A mixer pools funds from many people and pays out from the pool. That is a specific technique with a specific profile, and it is not this. Nothing here pools your money with anyone else's. Your transfer travels as your transfer, through carriers that do not know whose it is. The difference matters both technically and in how the system behaves under pressure.
Anonymity would mean that no one anywhere could form any view about you. That is not on offer and it is not achievable by moving value around. What is on offer is narrower and more useful: the permanent, public, machine readable link between you and the person you paid does not exist.
Privacy is not a loophole and we do not sell it as one. If you owe tax, you owe tax. If a court has ordered you to disclose something, that order does not evaporate because the transfer is hard to follow. The instrument removes a public record. It does not remove the law, and anyone who tells you otherwise is selling something else.
The status page says exactly which parts exist and which do not, and it is kept current. Read it before you decide anything. A product that will not tell you what is missing is a product that is hoping you will not ask.
You open the terminal. You choose what you are sending, how much, which network the recipient should receive on, and the address that should receive it. You get a quote, itemised, with the fee and the estimated settlement time shown plainly. You approve once.
Then you wait a few seconds. A progress indicator runs through five stages, each one naming the carrier currently at work, and then it stops. The recipient has their funds. You have a receipt that says a transfer happened and nothing that says where it went.
There is no account to create, no email to confirm, no identity to verify. There is nothing to log into because there is nothing being kept. We cannot send you a statement, because a statement is precisely the thing we exist to not produce.
It is for anyone who has looked at their own address on an explorer and felt the particular discomfort of seeing a life summarised in a table. That includes people running a business who would rather their supplier list were not public. It includes people paid in stablecoins who would rather their income were not a matter of public record. It includes anyone who has moved, or is about to move, and would prefer that the two addresses not be obviously the same person.
It is also, frankly, for people who simply think that a financial system where everything is visible to everyone is a bad system, and would like to use something else without leaving the ecosystem they already use.
It is not for anyone hoping to do something that depends on being untraceable. The instrument is narrow on purpose. It removes one specific link. It does not make you invisible, and it was never going to.
There is a version of this industry that treats privacy as a marketing angle, a word to put in a name and then quietly not deliver. There is another version that treats it as a technical curiosity, interesting to build and impossible to use. We are not interested in either.
What we are interested in is the plain case. A person wants to send value to another person, and neither of them wants the transaction to become a permanent public exhibit. That should be possible. It should be possible without trusting a company, without pretending to be someone else, and without moving to a different financial universe. That is the whole of the ambition.
Make the transfer ordinary. Make the record impossible.
No account, no statement, no history written against your address.