Privacy

Private settlement. Clear boundaries.

Kloak is designed to keep settlement private and disclosure selective, while staying honest about what a public payment request page still exposes by design.

Owned by

Kloak product and privacy team

Last updated

April 10, 2026

What this page is for

Use this page to understand what stays private, what is public by design, and what Kloak stores to operate the product.

What stays private

Who paid stays private by default.

Settlement happens through Aleo private records and wallet-held receipts.

Compliance proofs reveal only the statement the proof owner chooses to share.

What is public by design

Payment-link request pages are shareable, so some request details such as title, amount, and merchant-facing request terms can be public.

A proof transaction happening on-chain can still be visible as an event, even when the hidden payment facts are not.

What Kloak stores

Kloak stores the minimum needed to run payment links, analytics, proof history, and product operations.

Sensitive proof payloads and webhook secrets are encrypted at rest.

Wallet-held receipts remain the source of truth for hidden payment facts used in selective disclosure.