Privacy
Terp address
The mint dest terp1… is sent only to DREGG over HTTPS (pay-targets, health polling). It is not placed on Zcash, Bitcoin, or EVM memos.
Other rails
Each checkout gets a fresh ZEC unified address. The ZIP-321 memo is a blinded Pedersen commitment (memo_hex, prefix 6431) bound to the dest. The compact indexer sees the payment, not the Terp address.
ETH / Base / BTC use the same commitment idea when those rails are live. They are parked on the current desk.
Interactive assumptions
- DREGG and the house Zcash node are trusted to match
cto the dest and to mint. They are not trusted with ZEC spending keys for the user. - Keplr sees native THIOL sends in the usual way.
- Passkey credentials never leave the device.