Privacy and safety
What stays private, what is public, what ZATS holds for you, and how to keep your account safe.
What stays private
- Your purchases. You pay from your account's Ironwood pool, which is shielded. A shielded payment does not show on the Zcash chain who paid.
- Your identity. The market asks for no name, no email and no password on a server. Your account is twelve words made in your browser.
- Your history. ZATS's server keeps your deposits, withdrawals and purchases so they come back when you import your account in another browser. Each record is encrypted in your browser, under a key made from your twelve words, before it is sent. The server sees your account's address, the kind of record, its id and when it changed. It never sees what is inside.
What is public
- $ZATS and zZEC. Robinhood Chain is a public chain. Anyone can see what an address holds and every payout it receives.
- A deposit's first step. The ETH you send to a deposit address is an ordinary transfer on Robinhood Chain. It becomes shielded ZEC only when it reaches your account.
- A payment to a transparent address. When ZEC leaves Ironwood for a transparent Zcash address, the amount and that address are visible on the Zcash chain, but not which account sent it. A withdrawal leaves this way. Each category's page says how its payment leaves.
What ZATS holds
- Nothing of your account. ZATS never has your twelve words, your keys or your password, so it cannot open, reset or recover your account.
- What you buy stays yours. The codes, keys, links and passwords that purchases give you are encrypted in your browser under your account before anything else can hold them.
- Some purchases pass through ZATS. For domains and proxies, you pay ZATS in shielded ZEC and ZATS buys the item for you. A domain stays held by ZATS for you, with no personal name on it. AI credit is exchanged with ZATS directly. The page for each category says exactly who holds what.
Keep your account safe
Your twelve words are your account. Anyone who has them controls everything in it. ZATS asks for them in one place only: the import screen of the app, and only when you choose to import.
- Keep the recovery sheet offline, or copy the words onto paper and delete the file.
- Lock the account when you step away. The app also locks it on its own after a few idle minutes.
- Copy an address, such as the $ZATS contract, only from zats.market or these docs. Anyone can launch a token with the same name.
- Forgetting the account on a browser deletes it from that browser only. Import the same twelve words to open it again. Your history comes back with it.