Overview
A trading desk that leaves fewer tracks.
Privatus is a Solana trading terminal that runs entirely in your browser. It does what fast terminals do: a live board of new pump.fun launches, one-click buys, token pages with live trades and holders, wallet tracking, limit orders and PnL. On top of that it gives you two things the others don't: Private mode, which buys from fresh wallets funded privately through NEAR Intents, and the Trail audit, which shows what wallet trackers can already link to you.
Non-custodial
You sign every trade, in your wallet or in wallets derived from your own signature. Privatus never holds funds.
Best-price routing
Every swap is routed by Jupiter across Solana's DEXs and pump.fun curves.
Private funding
Stealth wallets are paid by NEAR's bridge, not by you, so no transfer runs from you to them.
Static and open
The app is plain files: HTML and JavaScript you can read, host or run locally.
Wallets
One signature, every wallet.
You connect a normal Solana wallet (Phantom, Solflare, Backpack and others). That is your main wallet. When you first use the instant wallet or Private mode, the terminal asks it to sign one fixed message. The signature never leaves your browser and is never stored. From it, the terminal derives:
SHA-256(signature ‖ path): privatus/instant/0 for the instant wallet, privatus/stealth/0, /1, /2… for stealth wallets.| Wallet | Signs with | Use it for |
|---|---|---|
| Main | Your wallet app, with a popup per trade | Holding funds, funding the others, careful trades |
| Instant | A key in this tab's memory, no popups | quick buys and presets when you trade from it, plus autopilot and snipes. Fund it directly or privately. |
| Stealth | A fresh key per private buy | Buys with no direct transfer from your main wallet |
Recovery
Solana signatures are deterministic: the same wallet signing the same message always produces the same signature. Sign again on any device and you get the same instant and stealth wallets back. Nothing secret needs to be backed up beyond your main wallet.
The terminal stores a short fingerprint of the signature (8 bytes of its hash, which reveals nothing). If your wallet ever signs differently, for example a different wallet app that signs messages another way, the terminal stops instead of opening a different set of wallets.
Every derived wallet has an Export key button, so you can import it into any Solana wallet.
Only sign the Privatus message on Privatus. Anyone holding that signature can rebuild your instant and stealth wallets; the message itself warns that it opens your private trading wallets. Some hardware-wallet setups can't sign messages; with those, instant and Private mode are unavailable and you trade from the main wallet.
Trading
From click to confirmed.
- The terminal asks Jupiter for a quote: your amount, slippage from the active preset, routes limited so the transaction has room for the fee.
- It fetches Jupiter's swap instructions, not a finished transaction, and assembles the transaction itself: compute budget, the fee transfer, the swap, cleanup.
- You sign. Main-wallet trades open a popup; instant and stealth trades sign in the tab.
- It sends the transaction, rebroadcasts it every 2 seconds until it lands or its blockhash expires, and reports the result.
Presets
Three presets set slippage, priority and Jito. Switch with 1 2 3 on a token page; edit them in Settings.
| Preset | Slippage | Priority fee | Jito tip | MEV-protect |
|---|---|---|---|---|
| P1 | 3% | High, up to 0.001 SOL | none | off |
| P2 | 10% | Very high, up to 0.003 SOL | 0.0005 SOL | off |
| P3 | 20% | Very high, up to 0.01 SOL | 0.001 SOL | on |
Jito and MEV-protect
With a tip set, the transaction pays it to one of Jito's tip accounts and is also sent to Jito's block engine, which helps it land in busy blocks. With MEV-protect on, the terminal simulates the transaction first and sends it only to Jito, never to a public RPC node, which keeps it away from sandwich bots watching the network.
Fees
0.5%, in SOL, in the open.
Every terminal trade pays a 0.5% fee in SOL, inside the same transaction as the swap. You see it in the trade panel and in your wallet's preview before you sign.
- Buys: 0.5% of the SOL you spend, transferred before the swap.
- Sells: 0.5% of the minimum SOL the route guarantees, transferred after the swap, so a fill better than the minimum is all yours.
- Private buys: the fee is taken inside the NEAR route (1Click
appFees), not paid from your wallet, so your funding is one plain transfer per route and nothing on it points at Privatus. - Not charged: stealth exits, deposits to and withdrawals from your instant wallet, and limit orders (Jupiter fills those).
Network costs are separate and go to Solana validators: the base fee, the priority fee from your preset, and a Jito tip if set. Jupiter's routing is free.
Private mode · NEAR Intents
The bridge pays your stealth wallet. You never do.
Trackers link wallets by following SOL: whoever funds a wallet is assumed to own it. Private mode breaks that link by never sending SOL from your wallet to the stealth wallet. Instead it uses NEAR Intents, a cross-chain settlement network where independent solvers fill requests. Through its 1Click API, you pay into a one-time deposit address, and NEAR's Solana bridge pays the stealth wallet out of its own wallets.
- The terminal derives the next stealth wallet from your signature and checks the chain that it has never been used, so a cleared browser or a new device never reuses one.
- It asks 1Click for a SOL → SOL route to the stealth wallet, with Confidential Intents on: the sender, amount and route stay off NEAR's public record. It asks for the advanced level first, then basic. If neither will route it, nothing is sent; a public route only happens if you choose it.
- It checks the quote before sending anything: the recipient must be the stealth wallet, refunds must go to your wallet, the amount and assets must match, and the deposit address must not be one of yours. Otherwise it refuses.
- You approve the funding in one wallet prompt: a plain transfer to each deposit address. The 0.5% fee is taken inside the route. In Strong mode (the default) the amount is split into up to three uneven, non-round routes, sent at random intervals of 4–16 seconds.
- NEAR Intents settles and the bridge pays the stealth wallet, usually within a minute or two. The terminal follows the route's status.
- After a random 8–28 second pause, the stealth wallet buys on Jupiter, keeping 0.01 SOL for network fees and token-account rent.
Exiting
What it costs
The Privatus fee, Solana network fees, and NEAR Intents' route fee. Without a partner key, 1Click charges about 0.1–0.2% per route; with a key held by the proxy that fee goes away. Private buys are capped at 5 SOL while Private mode is in beta.
If something goes wrong
A route that can't complete is refunded by NEAR Intents to the wallet that sent it. Stealth wallets can always be rebuilt by signing again, and Portfolio scans your stealth wallets on-chain and lists every one with funds, with buttons to exit or export its key, so nothing is stranded. If you've made many stealth wallets, Scan further looks deeper.
What Private mode does not do. Nothing makes a wallet untraceable. NEAR's 1Click service sees both ends of a route. An observer who sees SOL leave your wallet and a similar amount reach a fresh wallet soon after can guess; Strong mode's split amounts and random timing make that harder, not impossible. Vary amounts, and don't send funds between stealth wallets and wallets you've used publicly. Private mode makes tracing expensive and uncertain; it doesn't make it impossible. Privatus doesn't run a mixer and never touches the funds in transit.
Why NEAR Intents
It settles quickly, needs no wallet or account on NEAR, pays out from bridge-owned addresses used by everyone, and offers Confidential Intents for keeping the request itself private. Monero would need a swap in and out through third-party exchanges, slower and with more counterparties.
Proof
Don't take our word for it. Check it.
Three things you can verify yourself, without trusting this page.
1. A live route, right now
This asks NEAR Intents' 1Click API, from your browser through the Privatus gateway, for a real confidential SOL route of 0.1 SOL with the Privatus 0.5% fee built in (appFees), exactly as a private buy does. It's a dry quote: nothing is created or sent.
2. Transactions on-chain
Private buys and exits made through the terminal, each linked to Solscan so you can see what the chain shows: the funding is a plain transfer to a one-time NEAR address, and the stealth wallet is paid by NEAR's bridge.
| Step | What to look for | Transaction |
|---|
3. The code
Private mode is stealth.js (routing, quote checks, transactions) and the private-buy flow in terminal.js, served as plain files you can read in your browser: stealth.js, terminal.js, config.js.
Pulse data
Where the board comes from.
Pulse is three live columns: New pairs, Final stretch (tokens past 60% of their bonding curve, adjustable) and Migrated. Each token is merged from several sources by its mint address.
- Live trades on a token page come from the chain: pump.fun trades are decoded straight from program logs, other DEX trades from the transaction's balance changes.
- Holders come from the token's largest accounts, with the bonding curve and the dev wallet labelled, plus mint and freeze authority.
- Charts are DexScreener's. Images and socials come from the token's own metadata. If a token arrives without it (a migration, a pasted address), the terminal reads its metadata account on-chain. Images are tried through several IPFS gateways, and an avatar drawn from the address shows until one loads. Every card links straight to the token's X, Telegram, website, pump.fun and DexScreener pages.
- Hover a column to pause it while you read. Filters by market cap, name and socials apply live.
Orders
Orders that run without you, and orders that run with you.
Migration sniper
Tap on a Pulse card to arm a snipe. When PumpPortal reports that token's migration, or the on-chain curve shows it complete, the instant wallet buys right away, and can set take-profit and stop-loss rules for the new position (Settings → After a snipe). Like autopilot, it needs the tab open.
The autopilot chip in the top bar counts armed rules and snipes. Portfolio → Orders lists all of them.
Tracker & PnL
Follow wallets. Keep score.
Tracker checks any wallets you add every 20 seconds and lists their new swaps, read from the chain. on a row buys the same token with your quick-buy amount, from whichever wallet you trade from (main or instant).
Portfolio shows each wallet's positions with average cost and realized and unrealized PnL, priced in SOL. It counts trades made in the terminal; Import on-chain history reads the wallet's last 100 transactions so trades made elsewhere count too. Private buys are logged under the main wallet that paid for them. Everything is stored in this browser only.
Trail audit
What trackers already know.
The Trail audit reads any wallet's public history and scores how linkable it is, 0 to 100, the way commercial trackers score it. It's read-only: nothing to connect or sign. Your browser sends its queries through Privatus's gateway to the RPC node, or straight to your own node if you set one under RPC node.
It reads up to 100 recent transactions, the earliest ones it can reach, and one hop out to the funder and the most-linked wallets. It also flags address-poisoning attempts. Scores: Low under 25, Moderate 25–49, High 50–74, Exposed 75 and up.
Infrastructure
Keys stay off the page.
Anything in a static site is public, so API keys can't live in it. Instead every browser sends its requests to Privatus's gateway, a small server that holds the keys and forwards them, so all visitors share paid capacity instead of free, rate-limited endpoints:
Rather not go through the gateway for reads? Paste your own RPC URL (Helius, Triton, QuickNode) in the terminal's Settings, or under RPC node in the Trail audit, and your browser reads the chain from that node directly.
Token
Utility tied to the fees.
The token is live: FepxP15gLqWBW3pHV9Mmcb625UtPst7dFk1v2Ffhpump. Nothing on this page is an offer or financial advice. Its uses all run on the fee the terminal already earns in SOL:
Fee tiers
Hold more, pay less than the 0.5% base fee.
Buybacks
A share of SOL fees buys the token back.
Private limits
Holders get higher Private mode limits per buy.
Referrals
A cut of referred traders' fees, paid in the token.
Security
What lives where.
| Thing | Where it is |
|---|---|
| Main wallet keys | Your wallet app. Never seen by the terminal. |
| Privatus signature, instant and stealth keys | This tab's memory only. Gone when you close the tab or disconnect; rebuilt by signing again. |
| Settings, watchlist, tracked wallets, trade log, rules | This browser's local storage. Never uploaded. |
| Stealth wallet list (addresses, route status) | This browser's local storage, under your main wallet's address. It links the two, so clear site data on a shared computer. The terminal can rebuild it from the chain. |
| Limit orders | On-chain, in Jupiter's Trigger program, under your wallet. |
| Private routes in transit | NEAR Intents, refundable to the sender. |
- Check the transaction preview in your wallet. A Privatus buy shows the swap, one fee transfer to the Privatus treasury, and a Jito tip if your preset sets one. Nothing else.
- Keep the instant wallet to trading money. Its key sits in an open browser tab.
- Bookmark the site. Never sign the Privatus message anywhere else.
Shortcuts
Keyboard.
| Key | Does |
|---|---|
| / | Search tokens by name, ticker or mint |
| P | Back to Pulse |
| B / S | Buy / sell on a token page, focus the amount |
| 1 2 3 | Switch preset on a token page |
| ↑ ↓ Enter Esc | Move through search results, open, close |
FAQ
Questions.
Can Privatus take my funds?
No. It has no server holding funds or wallet keys, and its gateway only forwards requests: it never signs anything. Every transaction is built in your browser and signed by you or by a key derived from your own signature. Private funds in transit are held by NEAR Intents and refunded to you if a route fails.
Why did my trade fail?
Usually the price moved past your slippage, or the transaction didn't land before it expired. Nothing but the network fee is spent when a swap fails. Try a faster preset or more slippage.
Is Private mode anonymous?
No tool makes you anonymous. Private mode removes the direct on-chain link between your wallet and the wallet that buys. Timing and amounts can still be matched by someone watching closely, so vary them.
Where are my instant and stealth wallets if I clear my browser?
Their keys were never stored, so nothing is lost. Connect the same main wallet, sign the same message, and they come back with their balances. Clearing the browser also deletes the local list linking your stealth wallets to your main wallet; the terminal finds them again on-chain.
Do limit orders pay the 0.5% fee?
Not today. Jupiter fills limit orders itself; terminal market trades and private buys pay the fee.
Why is a sniper or stop loss tied to the open tab?
Because it signs from the instant wallet, whose key only exists in your tab. Nothing on a server can sign for you. For orders that must fill while you're away, use a limit order.