Privacy Pools

Privacy Pools by 0xbow — multi-chain on-chain privacy mixer supporting Ethereum, BNB Chain, Optimism, Arbitrum, and Starknet. Open source at [`0xbow-io/privacy-pools-website`](https://github.com/0xbow-io/privacy-pools-website); whitepaper at `privacypools.com/whitepaper.pdf`; ToS at `docs.privacypools.com/toc`; privacy policy at `docs.privacypools.com/privacy-policy`.

What it is. On-chain privacy pool, inferred from the page title 'Anonymous & Compliant Payments' (operator-published). What you trust. KYC stance. The published ToS at `docs.privacypools.com/toc` does not require identity verification at the protocol layer — Privacy Pools is a zk-membership-proof primitive, not a registration-gated service. The compliance dimension is upstream (0xbow's association-set curation, see Grade rationale). Payment surface: no operator-published token list found. The domain and title suggest Ethereum-based privacy pools (ETH/ERC-20), but this is inference, not source material. AML posture: Undisclosed — `/aml` returned a navigation error that prevented content retrieval. The phrase 'Compliant Payments' in the title suggests an AML-aware posture, but no operator-published policy text is accessible. Terms of service: Not accessible — `/terms`, `/terms-of-service`, `/tos`, `/legal/terms-of-service`, `/legal/terms`, and `/legal/tos` all returned 403. This is the single largest trust gap: a financial privacy tool with zero accessible legal terms is operating fully opaque to the public. Privacy policy: Published at `docs.privacypools.com/privacy-policy` (see links above). The privacypools.com SPA itself is Vercel-bot-walled, so the privacy doc lives on the docs subdomain — readers should bookmark that URL directly.

Operational specs. Hosting: Vercel (all blocked pages return 'Vercel Security Checkpoint'. Vercel's serverless platform is the inferred deployment target. The bot-protection checkpoint is blocking typical crawler/hardened-browser traffic patterns. Pricing / fee structure: no operator-published fee schedule surfaced. Privacy pool fees are typically embedded in the smart contract (relayer fee + protocol fee). Check the contract on Etherscan. Coin coverage: page title references 'Payments', suggesting ETH or ERC-20 deposits. No operator-published asset list found. API surface: Not accessible — `/api` returned a navigation error. Tor mirror: None advertised — no onion-location header and no onion URL but a deliberate bot wall that prevents any automated trust assessment. The page title 'Anonymous & Compliant Payments' is the *only* operator-published signal in the entire probe — 5 words across a 39-path sweep. Grade C is the honest minimum until either (a) the operator whitelists a public audit or publishes accessible docs, or (b) a manual curator test trade confirms the service operates as advertised.

Caveats. This is the most opaque listing in the directory's probe history: 36 blocked pages, 3 navigation errors, 0 successful fetches, 0 peer-directory matches, 0 contact channels, 0 legal pages. Every single conventional trust-assessment path is gated behind a Vercel Security Checkpoint that could not be cleared. The 'Anonymous & Compliant Payments' branding suggests a privacy tool that incorporates some form of compliance gating (association-set proofs, sanctioned-address filtering, or voluntary exclusion lists). This is a fundamentally different trust model than a pure no-KYC service — users are trusting the *correctness* of the compliance filter, not just the privacy mechanism. The contract source and filter logic are invisible to this review. The recommended `feature_tags` include `non_custodial` — this is likely correct for a smart-contract-based privacy pool,. Verify by reading the contract. Three paths (`/aml`, `/security`, `/api`) returned navigation errors rather than 403 — 'Unable to retrieve content because the page is navigating.' This suggests those routes trigger JavaScript-based redirects or SPA-style transitions that the audit publicly-observable footprint: wait_for_timeout heuristic could not follow. These may be the most interesting pages on the site.

Liquidity check (2026-05-30). 21 deployed pools. Concentration heavy on Ethereum stablecoins — USDT pool leads (~$4.1M), USDC (~$1.5M), ETH (~$1.6M). Long-tail pools (wstETH, BOLD, frxUSD, WOETH, USDS, sUSDS, USD1, Arbitrum USDC + ETH) each under $70K — anonymity sets so small that each deposit is approximately self-identifying. Companion guide: [Privacy Pools vs Monero](/guides/privacy-pools-vs-monero).