Where privacy starts and stops.

Your launch wallet

Each coin gets a random creator wallet generated in your browser. Its private key is encrypted with AES-GCM before the recovery vault is saved to Voidpad.

Unlocking the vault requires a message signature from the same Phantom wallet. That recovery signature stays in your browser. Signing in uses a separate message.

Funding through Cloak

Phantom deposits 0.1 SOL into Cloak. A shielded note is then withdrawn to the creator wallet. The public chain does not show an ordinary transfer directly between those two wallets.

Cloak authenticates your depositing wallet and registers a viewing key. It can associate that wallet with its transaction history. RPC services receive wallet and transaction requests, and timing, amounts and network activity can reveal connections.

Voidpad also knows which connected wallet owns each launch. The encrypted vault protects the spending key from the server; it does not conceal that ownership record.

What remains public

A launched coin, its creator address, metadata and trades are public on Solana and pump.fun. Links, images and posts you publish can also connect a coin to an identity.

Hide from discovery, $50: Removes the coin from Voidpad's homepage and Discover. Listing is free by default. Other explorers, pump.fun and Solana records remain accessible.
Use the pump suffix, $10: Changes the mint ending from lowercase void to pump. The creation transaction remains public. Uppercase VOID cannot appear in a Solana address.

Recovery depends on your Phantom wallet

Voidpad cannot reset the vault's recovery signature. Losing access to that Phantom wallet prevents recovery of the creator key, the saved Cloak funding note and any X management key saved in the vault. The original site address is also required.

Phantom's private key stays in Phantom. The launchpad receives signatures instead.

Your browser is part of the boundary

An unlocked vault can be exposed by a compromised browser, extension or website. A signature-based vault does not protect a key after malicious code can read it.

Managed X accounts and posts

Absorb provisions a selected account and manages its profile and posts. Its management key lets Voidpad submit posts without an X login in your browser. The request key and management key are saved in your encrypted recovery vault.

Voidpad processes those keys when you create or manage the account. Absorb receives the profile and post content. X receives the published content and Absorb's account activity. The account payment is public on Solana.

Follow the launch and recovery flow