Stealth addresses, plainly.

The math

1. 01 · Your keys

   S = s·G V = x25519(v)

   Derived from a random recovery key generated in your browser. Meta-address = ql1 + base58(S | V).

2. 02 · Payer picks a secret

   shared = x25519(e, V)

   e is a fresh ephemeral key. Only e and your view key v can compute shared.

3. 03 · One-time address

   P = S + t·G t = H(shared | S)

   A normal Solana address. Nobody without v can connect it to S.

4. 04 · You find it

   S + H(x25519(v, E) | S)·G == P

   A one-byte view tag rejects almost every non-match before any curve work.

5. 05 · You claim it

   p = s + t P = p·G

   Only you can compute p. You sign the claim in the browser with it.

Threat model

An outside observer sees a payment to an unfamiliar address and a public announcement. Without your view key they cannot tell the payment is yours, and separate payments to your link cannot be grouped together. The server only serves public chain data. It never receives your view key, spend key, or signature.

Honest limits

• Amounts and timing are public. A one-time address hides who receives, not that a payment happened.
• Claiming to a wallet already linked to you undoes the privacy. Claim to a fresh address.
• Quietline is not a mixer. It never pools or holds funds, and cannot recover keys or payments.
• Your recovery key is the only way back in. Lose it and Quietline cannot restore your inbox.
• Use it lawfully. You are responsible for compliance where you live.