How to stay unzeen.

unzeen (reads as unseen) is a privacy layer for launchpads, paid for with shielded ZEC. You top up once from any shielded Zcash wallet. After that you buy, sell and launch tokens on pump.fun and Meteora DBC from your balance. The trades are made by the pool’s shared Solana vaults, so the feed says “unzeen bought 1.2M $PEPE”. It never says who.

• Your account is shielded ZEC. ZEC is the currency of this market: you top up in ZEC, trade from a ZEC balance and withdraw ZEC. Launch anywhere, the money stays Zcash.
• No Solana wallet, no email, no sign-up. Your account is a 12-word anon key made and encrypted in your browser.
• The price stays public: the bonding curve and every trade are on-chain. The participants do not.
• The only Zcash transaction you make is the top up. Trades are signed requests from your balance, so your deposit is not tied to your trades in time.

The anon key is your whole account. It is a standard 12-word recovery phrase; your browser derives a signing key from it, a separate one for Devnet and Mainnet. Every action you take is a request signed by that key.

• The phrase is encrypted in this browser with your password and never leaves it. Reloading the page locks the key again; it also locks itself after 30 minutes.
• Write the 12 words down. If you lose them and this browser, nobody can recover your balance. Not us either.
• Never paste the phrase anywhere else. The token chat refuses any message that looks like a recovery phrase.
• Your Solana wallet, if you have one, is never connected to the anon key. The app never asks for it.

Create or restore it on /key. “Forget this device” deletes the encrypted key and your local trade history from this browser.

Open Portfolio and choose Top up. You get a QR code with the pool’s shielded address, the amount and a short memo signed by your anon key. Scan it with ZODL or any wallet that supports ZIP-321 payment requests.

• Pay only from a shielded balance. Paying from a transparent address, or straight from an exchange, reveals where the ZEC came from and how much.
• The deposit is credited after 3 confirmations plus a random 0 to 3 blocks. The page shows each step: seen, confirming, credited.
• Below the minimum deposit nothing is credited. The app shows the minimum before you pay.
• Top up in advance: trades are faster, and a trade right after a deposit is easier to guess.

Prices, market caps, volumes, trade sizes and PnL read in ZEC by default, because ZEC is what your account holds. One switch, in the footer or in Settings, shows them in the native coin of the chain instead: SOL for tokens on Solana. The choice is saved in this browser only.

• A converted figure carries “≈”. It uses a public reference rate that the page refreshes in the background once a minute, the same request for every visitor.
• Tokens paired with ZEC, USDC or USD1 keep their own pair: a ZEC pair is priced in ZEC with no rate in between.
• The price of your own trade never comes from the reference rate. It comes from the pool’s quote for that action, shown before you sign.
• In your portfolio a small “≈ $” sits next to balances and positions, only while Peek is open.

Pick the mode next to the Buy and Sell buttons. The default is Delayed; you can change it in Settings. It is stored in this browser only.

On-chain, all three look the same: the same pool vaults, the same fee profile, no marker. What differs is timing. With Now, anyone who can see your connection (your ISP, Wi-Fi, VPN or our hosting provider) can match the moment you sent the request to the trade that follows. Delayed narrows it down only to a batch. Use Tor or a VPN if that matters to you.

On a token page, the Orders tab places limit buys, limit sells, take-profits and stop-losses. They live only in the pool’s ledger and never go on-chain, so nobody can see where your stop is.

• The pool checks prices about once a minute. A stop-loss fires after two checks in a row at or below its price.
• A triggered order trades in Delayed or Max privacy, never Now. Slippage is measured from the price check that triggered it.
• Orders expire after at most 72 hours. Cancel any open order at any time; the reserved amount comes back at once.
• A bracket puts a take-profit and a stop-loss on one position with one hold: whichever hits first sells, and the other is cancelled.
• Retry after slippage sends an order back to open when its trade misses the slippage limit, up to 3 times. A stop-loss with retry may still not exit in a crash.
• Orders work for SOL-paired pump.fun tokens on the bonding curve that the pool already trades. Tokens paired with ZEC, USDC or USD1 are bought and sold directly.

Pulse is a live board in three columns: New launches on their curve, curves about to graduate (70 % and up) and tokens that graduated in the last day. Each card shows price and market cap in ZEC, curve progress with a time to graduation at the current pace, holders, a safety summary (mint and freeze authority) and a “via unzeen” badge for Unzeen launches.

• Buy from a card with your first buy preset and your default execution. With Instant trade off (default) the first tap shows what it would buy and the second signs; on, the first tap signs. It runs the same checks and price limit as the trade panel.
• “≈ 4 min to graduation” is an estimate from how fast the curve has been filling, not a promise.

Privacy · on this device

Nothing: Pulse is the same board for everyone.

What the server sees

That a Pulse page is open. Everyone gets the same stream on the same rhythm; stars and quick buys never change what the page asks for. A quick buy is an ordinary signed buy.

Tap the on a token page or a Pulse card to add it to your watchlist. On a token page, Alert sets a one-shot alert when the price or market cap rises to or falls to a value you choose. It fires once as a toast and, if you allow it, as a browser notification; re-arm it afterwards.

• Both need your anon key unlocked: they are encrypted with it.
• Alerts are checked against the public token list while an Unzeen tab is open, so they work for tokens the pool trades.
• Sparklines show the prices this tab has seen since you opened it.

Privacy · on this device

The watchlist and alerts, encrypted with your anon key in this browser. Forget device wipes them.

What the server sees

Nothing about them. Prices come from the same public lists every visitor loads on a fixed timer; no request names a token you watch or a price you wait for.

On a token page, the keyboard drives the trade panel. Keys never fire while you type in a field; press ? for the list.

• Instant trade (Portfolio → Settings, off by default): a preset key or button signs right away with your slippage and execution. Off, a preset only fills the amount and Enter signs. Max balance always needs one more key.
• Your position shows size, average entry and PnL worked out from your own trades, plus Sell 25 / 50 / 100 %, which fill the sell form (or sign, with Instant trade).
• Open orders appear on the chart as lines: green take-profit, red stop-loss, yellow limit. Drag a line to move it. There is no edit, so a move is a cancel and the same order at the new price, with the time it had left; you confirm it first. Lines show only while Peek is open.
• Quotes include the curve’s price impact and fee, so the default 1 % slippage holds on small curves. When a buy would run past the end of the curve, the panel says it fills only partly.
• Graduated tokens on mainnet show Jupiter’s price impact. The pool asks Jupiter for a rounded amount from its own address, never your browser.

Privacy · on this device

Keys, Instant trade and the position maths. Your average entry and PnL come from your trade history, encrypted with your key.

What the server sees

Only the orders and trades you sign, as always. Moving a line is a signed cancel plus a signed new order.

A toast, with a short chime, when a Delayed or Max-privacy trade settles, an order triggers or fills, or a scenario step finishes. Switch toasts and sound off in Portfolio → Settings. Portfolio also charts your realized PnL over time and exports your trades as CSV.

• Notifications come from the portfolio your tab already checks on a fixed timer. Nothing extra is asked of the server.
• The chime is made in the browser. No sound file is downloaded.
• The CSV is built in your browser and saved by it, in UTC with token amounts in whole tokens. It is never uploaded.

Privacy · on this device

Your trade history, the PnL line and the CSV, all from history encrypted with your key.

What the server sees

Nothing new. The portfolio check is the same timer as before, alerts or not.

Scenarios chain up to 12 blocks into one plan, for example top up → wait → buy → place a bracket → withdraw in shielded ZEC. You sign it once; the pool runs every step in the same batches as manual trades and your device sends nothing while it runs.

• Start from a template or build your own. Privacy floors are added for you (for example a random wait after a deposit), so the plan can’t line its steps up in time.
• Starting a plan needs at least the pool minimum (0.001 ZEC) available, even one that waits for a deposit.
• A plan lives up to 3 days (7 without withdrawals). Cancel it any time before a step runs.

Privacy · on this device

Drafts and plan names, encrypted with your key.

What the server sees

The plan while it runs, for at most its lifetime: blocks, tokens, amounts and triggers. Withdrawal addresses and chat text are sealed and erased once used. Which action belongs to which step is erased 24 h after the plan ends.

Withdrawals always wait. An instant one would link your trade to the receiving address on-chain.

• Use a fresh Solana address. The gas comes from a pool vault, so anyone can see the address was funded by unzeen.
• Withdrawing exactly the amount you bought links the address to that buy. The app warns you; withdraw a different amount or wait.
• Smart withdraw splits tokens into 2–5 unequal parts, each to its own address at its own random time.

Every token page has an anonymous chat. Reading is open to everyone; posting needs an unlocked anon key and a small account balance (ZEC plus tokens), so spam costs money.

• Your nickname is different in every token chat, so your messages in two chats cannot be linked to each other.
• Messages are published in batches together with trades, never the instant you send them. If you just traded this token, posting is delayed a few minutes by default so your message cannot be lined up with your trade.
• Text only. Links are not clickable and nothing is previewed, so a chat message never makes your browser contact anyone.
• You can delete your own messages. The token’s creator can hide messages (readers can still reveal them). Messages reported by several people are hidden automatically.
• The creator badge means the pool checked that this nickname belongs to the account that launched the token. It is a separate nickname, so the creator’s other messages stay unlinked.

/verify lets anyone check that the pool is solvent without learning anything about its users. Once a day the pool publishes signed roots of its liabilities and anchors them on Solana.

unzeen is a custodial pool in this version. The operator holds the keys and could link your anon key to your trades. We say so plainly.

What stays private

• On-chain: who traded. Every trade, launch and withdrawal is signed by a public pool vault, never by you.
• On Zcash: your deposit. Sender, amount and memo are encrypted.
• Between tokens: your chat nicknames, and your launches (each one gets a fresh creator address).
• Amounts in the pool’s records are erased 24 hours after an action; journals after 48 hours.

What does not

• If you are the only unzeen user trading a small token, all unzeen trades in it are yours: a pseudonymous position, not an identity.
• A network observer sees when you talk to the server, though not what. Delayed and Max privacy hide you in a batch; Now does not.
• Privacy grows with the number of users. While unzeen is small, batches are small.
• Creator rules (24 h lock, 5% cap) apply to the launching key; a second key could get around them.
• Anyone with your unlocked device can see that you use unzeen.

Switch SOL | HOOD in the header to trade launchpad tokens on Robinhood Chain (mainnet). You still pay in shielded ZEC; trades settle in ETH on Pons, and on-chain they read “unzeen” just the same.

• Robinhood Chain has its own anon key and its own balance, separate from your Solana ones.
• Withdraw tokens to a fresh 0x address. A small ETH drop pays the gas, and the same rules apply: always delayed, never the exact amount you bought.
• When the pool’s price for a token is older than a few minutes, Buy and Sell show Price updating… and wait for a fresh one: a trade never goes out without a price limit.
• Verify works the same way. Vault and operator signatures are EVM signatures (EIP-712 and EIP-191), checked in your browser and by the offline script.

Privacy · on this device

Its own encrypted anon key, history, watchlist and alerts.

What the server sees

The same as on Solana: only what you sign. The two chains' keys are never linked.