Privacy model
Each control, its scope, and the boundary none of them cross.
Solana is a public ledger. Balances, transfers and the links between addresses are readable by anyone, permanently. No interface changes that. What an interface can control is what it displays and which requests it makes.
The controls
| Control | Scope | Effect |
|---|---|---|
| Hide balances | This device | Amounts and values render as placeholders |
| Privacy screen | This device | Masks automatically when the tab loses focus |
| Quick hide | This device | Shift + H toggles masking from anywhere |
| Hide small balances | This device | Dust leaves the list, still counts in the total |
| Mask address | This device | Header and menus show a truncated address |
| Hide activity | Requests | Transaction history is neither requested nor shown |
| Market data | Requests | Price and token lookups stop entirely |
| Custom endpoint | Network path | Chain reads bypass Invisio's relay |
| Idle disconnect | Session | The wallet disconnects after inactivity |
| Forget on disconnect | Session | Cached data and the remembered wallet are dropped |
Where preferences live
In your browser's local storage. They are not sent to Invisio, do not follow you to another device, and are cleared when you clear site data.
Not available
Hiding an amount from the network — rather than from the screen — needs confidential transfers. They exist as a Token-2022 extension, but none of the assets Invisio supports enable it, and the proof system it depends on is not something a wallet can drive today. Invisio ships no switch for it, because a switch that implies protection it cannot deliver is worse than its absence.