oa-chat · The Open Anonymity Project

The Open Anonymity Project

3 min read Original article ↗

Capabilities and privacy features

  • Unlinkable inference

    Unlinkable inference separates your queries from each other and from your identity. The Open Anonymity Project (OA) does not know which queries you send, and model providers receive them without knowing your identity.

  • Verifiable privacy

    OA’s public verifier runs in a Trusted Execution Environment (TEE). It checks that the API keys used for your conversations belong to OpenRouter accounts with prompt logging, response logging, and data sharing disabled. You can inspect the verifier and the rest of OA’s open-source code.

  • Full-featured AI assistant

    OA provides access to open and closed AI models as well as unique features such as Parallel and Council modes, prompt scrubbing, and personal memory agents.

  • Confidential query rewriting

    Prompts can reveal personally identifiable information or a distinctive writing style. To hide these details, OA comes with a query rewriter (try tab-tab on your input) implemented with a small LM running in a GPU enclave.

  • User-owned memory

    With OA, your conversation history remains on your device. Memory agents running in secure GPU enclaves manage your memory and select relevant context to include in each prompt, without sharing your complete history.

  • In-browser network proxy

    Network-level metadata may also be revealing; for this reason, OA has partnered with the Refraction Network to provide an in-browser network proxy.

FAQs

  • Does using Google or Stripe compromise my anonymity?

    Google and Stripe mainly serve to identify your account, so you can use encrypted sync and manage payments. The inference itself is unlinkable because of blind tickets. Think of a VPN company: it knows who paid, but not where the traffic goes.

  • Why are zkAPI deposit and withdrawal fees high?

    We agree the fees can be frustrating, especially for smaller deposits. Fees depend on both Ethereum’s current gas prices and the amount of computation our contracts require. Withdrawing when network fees are lower can help. We’re also working toward protocol improvements to reduce that computation and bring costs down.

  • Who can see my prompts?

    OpenRouter and the selected model provider process your prompt to generate a response. OA does not see your plaintext prompts and therefore cannot retain them.

    Our privacy protocol uses blind tickets to separate your account and payments from your model requests. You obtain tickets through your account, then redeem them without revealing which account received them.

    This protects the link between your identity and your requests; it does not hide the prompt from OpenRouter or the model provider. Their data policies still apply, and personal details you include in a prompt can identify you.

  • Can I use zkAPI with an OpenAI-compatible app or API client?

    Yes! zkapi-clientd runs a local OpenAI-compatible API on your computer and handles zkAPI funding and authorization. Check out our local client on GitHub.

  • Are you affiliated with any zkAPI tokens?

    No. We were lucky to collaborate with the wonderful team at the Ethereum Foundation on the zkAPI protocol, but we are not affiliated with any tokens or coins.