Privacy & trust
What Veilo does not claim
Being precise about the boundaries is part of the design. A privacy tool that overstates itself is worse than one that does less and says so.
Veilo hides you from the public chain, not from a counterparty
Veilo hides users from the public chain, not from a counterparty they deliberately transact with. A venue still knows the order it filled; it does not know whose it was. If you identify yourself to a service, Veilo cannot un-identify you to that service.
A withdrawal is public in three respects
The amount and destination of a withdrawal are public, as is the fact that a withdrawal occurred. What this does not reveal is which deposit funded it. Balances can be split and merged in arbitrary amounts inside the pool, so a withdrawal amount need not correspond to any deposit amount.
This is where habits matter most
Activity on an external protocol is visible while it happens
A position exists on-chain. An order rests on a book. A swap moves through liquidity. All of that is visible. It has to be, or it could not be filled. What is hidden is who it belongs to, and that it has anything to do with any other activity. See Private execution.
Privacy is statistical, not absolute
It rests on the size and activity of the anonymity set. Unusual amounts or tightly coupled timing reduce it. There is no setting that makes a one-of-a-kind transaction blend into a set it does not resemble.
Anything after the pool is as public as it would otherwise be
Once funds leave the pool, they behave like any other funds on any other chain. Onward transfers, consolidations, and interactions from the destination address are fully traceable from that address forward. Veilo severs the link to your past, not to your future.
What Veilo also does not do
For completeness, since these are commonly assumed of privacy tools:
Not claimed
No batching or artificial delay. Veilo does not hold your transaction to mix it with others on a timer. Timing privacy comes from the pool's ongoing activity and from your own choice of when to move.
No hiding of on-chain history. On-chain transactions are permanent and publicly visible. Nothing can delete them. See Delete your account.
No protection against a compromised device. Your secrets live on your device. Malware, a phishing signature or an unlocked phone defeats every guarantee on this site.
No identity verification, in either direction. Veilo operates none and collects none, which also means it cannot vouch for anyone, including the counterparty you are sending to.
Why state all this
Because a user who believes a guarantee that does not exist will act on it. The list above is the difference between using Veilo effectively and being surprised by it. What is guaranteed is set out in Privacy guarantees.