Masked in Your Tab
Detectors run as you type and replace each sensitive value with a placeholder. You read the masked text before anything is sent, and switch any kind off when the answer needs it.
Masked in your browserNothing storedHash-only receiptsNo accountRobinhood ChainOpen sourceConfidential compute · planned
Private Inputs. Powerful Intelligence.
Opaq is building privacy-focused AI inference on Robinhood Chain. Today it takes the emails, keys, numbers and names out of a prompt inside your own browser, shows you exactly what would leave, and turns every answer into a receipt you can anchor and check later.
Masked FirstSensitive details become placeholders before sending
A Receipt per AnswerOne hash, anchored by your wallet
No AccountNo sign-up, no stored requests
4 items masked as you type
1
Type the request
Nothing is sent while you type.
2
Mask in this tab
Keys, contacts, addresses and your list become placeholders.
3
Review what leaves
The exact text a responder would receive.
4
Ask the responder
Here: the demo function in your browser.
5
Seal a receipt
One hash of request, answer, model and salt.
6
Anchor with your wallet
In the app, signed by you.
# This console runs entirely in your browser. No request is sent to any server.
# Press "Mask and ask" to watch each step; edit the text to try your own.
keccak256EIP-6963EIP-191Solidity 0.8.28Chain 4663HTTPS
The problem: most AI requests carry more than the question. A signature with an email, a log with a key, a draft with a client's name. Once sent, it is out of your hands. Removing it first is the part you can control today.
What is Opaq?
A privacy layer that sits between you and the model
Opaq reduces what a prompt exposes and lets you prove what was asked and answered.
What is Opaq? A private request page and a small proof layer on Robinhood Chain. Your browser masks the request, a responder answers the masked text, and your wallet can anchor a hash of both. The bigger plan is confidential inference, where even the machine running the model cannot read the request; that part is planned and labelled as such everywhere on this site.
A Receipt for Every Answer
One 32-byte hash binds the masked request, the answer, the model and a salt only you hold. Your wallet records it on Robinhood Chain; the texts never go on chain.
0
Nothing Kept
This site stores no request and no answer. Your word list and receipts stay in your browser.
9 Detectors, One List
Keys, secrets, cards, emails, bank numbers, addresses, phones and IPs, plus the names you add yourself.
Ready to ask without oversharing?
Open the private request page, paste a draft and watch the masked version appear. No wallet needed until you seal.
Features
Take out what matters, keep what helps the answer
Masking, answering and proof, connected in one flow you can follow step by step.
Masking, in your tab
Nine detectors run on every keystroke: private keys, API secrets, card numbers that pass the Luhn check, emails, IBANs, wallet addresses, phone numbers, IP addresses and the words on your own list. Each value becomes a numbered placeholder, and the same value always gets the same one, so an answer stays coherent.
dana.reyes@… →
[EMAIL_1]sk-proj-a1b2… → [SECRET_1]+44 20 7946… → [PHONE_1]Dana Reyes → [NAME_1]Responders, labelled honestly
Without a provider key on the server, a small deterministic demo answers inside your browser and nothing leaves at all. With one, only the masked text is forwarded over HTTPS to a third-party model provider, which can read it while it answers. The server refuses any text that still holds a key, a secret or a card.
demo/local-responder-v1livebrowser
model providernot configuredhttps
server re-checklivekeys · cards
confidential computeplannedtee
secure API gatewayplannedapi
Receipts you can prove
Every answer can be sealed into one 32-byte hash of the masked request, the answer, the model id, a random salt and your address. Your wallet records the hash on a tiny ledger with no admin. Whoever holds the receipt file can recompute it and match the record; one changed character breaks it.
samplereceipt file
model demo/local-responder-v1
request keccak 0x7c1e…a04b
answer keccak 0x2f90…13de
salt kept by you
author 0x3a5f…91c2
receipt 0x0116…8562
stored 32 bytes + tag
texts never on chain
Live network
Read the chain. Know the cost.
Figures on this section are read from Robinhood Chain when the page loads, not typed in.
One chain, read live
The latest block, the gas price and the Chainlink ETH price come from Robinhood Chain through this site's read-only relay. Once the receipt ledger is deployed, its record count shows here too.
Chain status fetching…
| Field | Value |
|---|---|
| network | Robinhood Chain · 4663 |
| latest block | reading… |
| block time | — |
| gas price | — |
| ETH / USD | — |
| receipt ledger | live · … receipts |
What an anchored receipt holds
Each record on the ledger is small and public. The author address is the only identity it carries, and the hash reveals nothing without the texts and salt you keep.
32-byte receipt and a model tag
Author address, block and time
No request text, no answer text, no salt
Record layout illustrative
receiptbytes32hash
modelTagbytes32hash of id
senderaddressyour wallet
blockNumberuint40chain block
timestampuint40block time
Know the cost before you anchor
Masking and the demo answer are free. Anchoring is one small transaction your wallet pays to the network; the estimate uses the live gas and ETH prices.
Cost of anchoring live gas · live ETH
—in ETH gas at the current price, paid by your wallet to the network; masking and answers cost nothing here
Demo responderdemo/local-responder-v1live · in browser
$0nothing sent
Model provideroperator-configurednot configured
$0to you; the operator pays
Confidential computetrusted executionplanned
—not built
Secure API gatewayfor developersplanned
—not built
Comparison
Where Opaq fits
An honest side-by-side with the two usual options.
| Paste into a chat | Run a model yourself | Opaq | |
|---|---|---|---|
| Privacy | |||
| Sensitive details removed before sending | Nothing leaves your machine | ||
| You see the exact text that leaves | Nothing leaves your machine | ||
| Requests kept by this service | Often stored for a period | On your own disks | None |
| Who can read the text while it runs | The provider reads all of it | Only you | Provider reads masked text; confidential compute planned |
| Proof of what was asked and answered | |||
| Effort | |||
| Account to create | Yes | No | No, a wallet only to seal receipts |
| Cost today | Plan or credits | Hardware up front | Free; gas only to anchor |
| Setup time | Minutes | Weeks | Open a page |
| Answer quality | Full model | Depends on your hardware | Demo now; full model when the operator adds one |
Want the full picture of what this does and does not protect?
Read the honest limitsVerify a receipt
Proof you can check without asking us
Paste a receipt file. The hash is recomputed in your browser and, once the ledger is live, matched to the author's record.
Paste a receipt file
The file holds the masked request, the answer, the model id, the salt and the author. Change any byte and the hash no longer matches.
Result idle
# Checked inside this page only; the pasted file goes nowhere.
# The full verifier with file upload is at /app/verify.
Check the ledger itself. One click.
Your browser reads the code deployed at the ledger address and compares it with the contract compiled from this site's open source, byte for byte. A full check with the creation transaction runs from the repository.
Ledger code not checked yet
# 1. read the runtime code at the ledger address
# 2. hash it and compare with this build
# 3. no admin functions exist in the source to call
$OPAQ policy
The product comes first. The token is planned around it.
Nothing below is live. $OPAQ is not needed for anything on this site, and no rewards, discounts or returns are promised.
The plan
Planned: $OPAQ as credits for inference once paid requests exist, as the unit for fees on the developer gateway, and for access to service features. None of these is built; each will be described in the docs and the open code before it goes live.
The receipt ledger does not use the token, takes no fee and has no owner.
Status live
# read from Robinhood Chain once the address is published
contract 0x8eafc8d9f1d6e954b745f7a955ac1c3fec57a0bf
needed for nothing on this site
ledger fee none
uses planned, not live
Developers
Masking before forwarding, as an API
The developer side of the plan. Shown as a preview; nothing in this section is live.
A gateway that masks first
The planned secure API gateway would apply the same detectors on the way in, forward only masked text, return a receipt with every answer, and show usage in a developer workspace. Today the same logic is open source and runs in the browser.
support-desk
workspace preview
—requests today · shown once the gateway exists
Masked items per requestsample
Requests refused by the server checksample
Shape of a day, illustrative
Open checks
Checks you can run yourself, in the open
The detectors, the receipt formula, the ledger and its tests are open source. Encryption in transit is not privacy while a model runs, and a chain is public, not private; Opaq says which layer each part covers.
9Detectors in your tab
0 bytesRequests stored by this site
32 bytesPer receipt on chain
LiveLedger on mainnet
FAQ
Short answers to common questions
About Opaq, masking, receipts and what stays private.
Opaq is a private AI request layer on Robinhood Chain. It masks emails, phone numbers, keys, wallet addresses and the names you list in your own browser before a prompt is sent, and turns each answer into a receipt you can anchor on chain and verify later.
You type a request. Detectors in your tab replace sensitive details with placeholders such as [EMAIL_1], and you see side by side what stays and what leaves. Only the masked text is sent. The answer, the masked request, the model id, a random salt and your address are hashed into one receipt, which your wallet can record on the receipt ledger.
Not yet. Today the masked text travels over HTTPS to a model provider, which can read it while it answers; without a provider, a demo function in your browser answers instead. Running models inside trusted hardware is planned and not part of this build.
That the texts in the receipt file existed together, unchanged, when the author's wallet recorded the hash. It does not prove which model ran, that the answer is correct, or what the provider did with the masked text.
Robinhood Chain mainnet, chain id 4663, with ETH for gas. The wallet dialog adds the network to your wallet when you connect.
$OPAQ is live on Robinhood Chain at 0x8eafc8d9f1d6e954b745f7a955ac1c3fec57a0bf. That address, shown on the token page and in the navigation bar, is the only one this site uses.
No. Private requests, receipts and the verifier are free. Token uses such as inference credits, API fees and feature access are planned and not live; nothing is promised about them.
Pattern masking can miss details it has no rule for, so read the masked text before you send it. Anything you record on chain is public and permanent. A configured model provider sees the masked text. Contracts and code can contain mistakes; use small, non-critical requests first.
Ready to ask without oversharing?
No sign-up. Paste a draft, read the masked version, and keep a receipt of the answer.
Send a Private Request