ville.cash
Robinhood
Pool

Privacy pool

Stealth addresses hide who gets paid. The pool hides who paid: a payment leaves from a crowd of screened deposits, proven in your browser and carried to the chain by a bundler.
Asset
Notes are kept per asset
01

Pool status

Read from the contract and the association set it currently accepts.

Deposits
…
reading…
Association set
…
Private spends wait for a published set; ragequit never does
Fees
…
Plus the bundler's gas fee, shown before you prove
Contract0x5f5aa015a3d23c56a29191b6f930f53722ea69b0
02

Your pool

Connect to deposit and to see your notes.

Connect a wallet to use the pool.
04

How it works

Four steps, each one checked by the contract, not by this website.

Association set
screened
Private spends must come from a deposit in the set the Ville association set provider publishes. Its rule: approve after a wait unless the wallet is on its deny list. It is a screening policy, not a legal guarantee.
Public exit
always open
Ragequit returns a deposit to the wallet that made it without asking the provider. The provider can leave a deposit out of the set; it can never move or freeze it.
Proofs
in your browser
The note keys come from the same signature as your inbox keys and never leave the tab. Only the proof goes out.
Works without the pool too: sending from your wallet to one-time addresses and finding them in your inbox. Then the receiver is hidden and your wallet shows as the payer.Pool payments are on: choose the privacy pool on the Send screen.
Pool0x5f5a…69b0
Announcer0x5564…5564
Registry0x6538…6538
The steps
live Deposit
You put ETH or USDG in from your wallet. That step is public: wallet, amount, time. The pool gives the deposit a label and writes a note only your keys open.
live Screening
The association set provider adds the deposit's label to a published set after a wait, unless the depositing wallet is on its deny list. The pool only accepts private spends from labels in the set.
live Private payment
Your browser proves in zero knowledge that it owns a note from some approved deposit, without saying which, and a bundler submits the transaction. The money lands on the receiver's fresh one-time address with its announcement; your wallet is not on it.
live Ragequit
A deposit that is never approved, or later removed, can always go back to the wallet that made it, in public. The provider cannot hold it.