On this page
- Solana is public: every transfer into your wallet, with amount, time and sender, can be read by anyone, permanently.
- Fianto puts no order ID, email or product name on chain; a payment carries only a random reference.
- Subscription plans are public accounts too: the per-period cap, the period and the receiving wallets can be read on chain.
What can someone see about my business on Solana?
Someone who knows your receiving wallet's address can see its balance and every transfer in and out of it, with the amount, the time and the other wallet, for as long as Solana exists. A public explorer is enough: Solscan's account page shows an address's SOL balance, its token holdings and its recent transactions. No login, no request to you, no request to Fianto.
The address itself is not secret for long. Every customer who pays you can find it: the transaction they sign sends money to it, and every Fianto receipt links that transaction on Solscan. Assume your receiving wallet is known to everyone who has paid you, and to anyone they tell.
| Information | On chain, readable by anyone | Kept off chain by Fianto |
|---|---|---|
| Each payment amount and time | Yes | |
| The paying wallet's address | Yes | |
| Your wallet's balance and outgoing transfers | Yes | |
| A subscription plan's cap per period, period length and receiving wallets | Yes | |
| Your order ID and metadata | No | Yes, in your dashboard and API |
| The customer's email | No | Yes, when one was given |
| Product name and description | No | Yes |
| Your business profile and identity | No | Yes, for review |
Satoshi Nakamoto described the trade-off in section 10 of the Bitcoin white paper in 2008, and it holds for Solana: "The public can see that someone is sending an amount to someone else, but without information linking the transaction to anyone." The privacy that is left lives in that last clause, in whether anyone can tie an address to you.
Can a competitor work out my revenue from my wallet?
A competitor who has your receiving address can add up the USDC that arrives in it and get a figure close to your gross USDC revenue, day by day. Close, not exact: the sum also counts your own top-ups and any transfer that is not a sale, and it misses whatever you sell for other currencies. Your own subscription figures, read from the dashboard, are explained in reading MRR for crypto subscriptions.
Subscriptions reveal a little more. Each Fianto subscription runs under a plan on the Solana Foundation's Subscriptions program, and a plan is an on-chain account holding its terms: the most it can pull per period (the price plus fees), the period length and the wallets money may go to, one of them yours. Renewals are signed by Fianto's charging key, and on plans created since 6 October 2026 each charge currently carries a flat 0.01 USDC network fee, paid by the customer to Fianto's treasury. Someone patient could find your plans, see what they charge, and watch renewals arrive.
One-off payments are plainer: a transfer from the customer to you, and only when a service fee applies, a second transfer to Fianto's treasury. There is no Fianto fee during the beta, so today a one-off payment shows only the transfer to you. How to read a Solana payment on an explorer walks through what each line means.
What does the Fianto checkout tell customers about privacy?
The Fianto checkout tells every customer, right above the button they press, that the payment is public. On a one-off payment the line ends "Your wallet address and payment are public on Solana." On a subscription it ends "Your wallet address and payments are public and permanent on Solana." Fianto's privacy policy has a section on public blockchains that says the same at more length.
The same is true in the other direction. Your customers can look at your wallet, and you can look at theirs: the dashboard shows each paying wallet, and an explorer shows everything else that wallet has done. Treat what you learn that way with the care you would want from them.
Read what a customer is shown and signs before any money moves.
The hosted checkoutWhat does Fianto keep off the blockchain?
Fianto keeps everything that identifies an order or a person off the chain, because once it is written there nobody can remove it. Concretely:
- A one-off payment carries no memo and no order data. The only extra item on the transfer is a reference: 32 random bytes generated for each checkout session, which Fianto uses to find the payment and which mean nothing to anyone else.
- A subscription plan has a field for a public metadata link. Fianto leaves it empty, so the plan carries no merchant or product name, only amounts, a period and addresses.
- Order IDs, metadata, customer emails, product names and your business profile live in Fianto's database, visible to you in the dashboard and through the API. What Fianto collects about payers, and what it never asks for, is set out in do merchants need to KYC crypto payers.
None of that hides the money. Amounts, wallets and times are what a payment is, and they are public by design.
Can confidential transfers hide USDC amounts on Solana?
Not for USDC as it exists on Solana today. Solana's confidential balances documentation describes an extension of the Token-2022 program in which "Only transfer amounts and token balances are private", and it adds that "Token account addresses remain public." The extension applies only to tokens created under Token-2022 with it switched on.
USDC's Solana mint, EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v, belongs to the original Token program: we read its owner from mainnet on 15 October 2026 and got TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA. Fianto accepts only that token, so every Fianto payment has a public amount. Even on a confidential token, who paid whom would stay visible.
How can a merchant limit what a public wallet reveals?
The practical answer is to control what your receiving wallet is linked to, since you cannot hide what arrives in it. In order of effort:
- Use a wallet that receives payments and nothing else. Keep personal holdings, trading and other businesses in other wallets. Then your receiving address tells an observer about this business only, not about your savings.
- Know that moving money out is public too. A transfer from the receiving wallet to your savings wallet links the two for good. Every hop you add is another public record, not a disguise.
- Do not expect a new address per payment. Nakamoto's white paper suggests: "As an additional firewall, a new key pair should be used for each transaction to keep them from being linked to a common owner." Fianto does not work that way: a merchant has one receiving wallet, proven by a signed message, and changing it needs your password, two-factor sign-in, a signature from the new wallet and approval by Fianto. Subscriptions that already exist keep paying the old wallet.
- Decide what you publish yourself. A wallet address on a social profile or in a public post ties the business to the address faster than any chain analysis.
Choosing and protecting that wallet is covered in securing the wallet you get paid to, and the difference between a gateway that holds your money and one that does not is in custodial vs non-custodial crypto payments. The flow of a payment, step by step, is on the docs page how money moves.
If you cannot accept that your sales are readable by anyone with your address, a public chain is the wrong rail for you, and card payments, where only you, your processor and the banks see the numbers, are the better choice. The trade has a benefit too: the same openness lets you and your customer check any payment yourselves. The security page sets out what the program and the checkout check on your behalf.