Privacy
What data Nox sees, what it never sees, and where your secrets live. Privacy is the product — this page explains the boundaries.
On-chain data
Commitments, nullifiers, roots, and compliance statuses are public on L1 — as required for a privacy mixer. Amounts and routes are not: the links between depositor and note, and note and recipient, are shielded by ZK proofs.
Plaintext amounts
Plaintext amounts exist only inside the TEE enclave (fhe-zk), transiently. The relayer and L1 only ever see ciphertexts and digests. Nothing outside the enclave sees an individual amount.
Off-chain data
The website stores your keystore locally in your browser (IndexedDB, nox_wallet_db). There is no central database of user data. Note secrets never leave your device.
Scanner data
The graph scanner is self-hosted and reads only public on-chain data — no external vendors, no third-party APIs, no personal data.
What Nox never sees
- Your note secrets and private keys
- Your plaintext amounts (outside the enclave)
- The link between your identity and your shielded activity
Your responsibilities
Loss of the keystore means permanent loss of notes — there is no recovery mechanism by design. Back up your keystore securely.