WIKI · How is my payment unlinked from my account?

How is my payment unlinked from my account?

Two things stay apart: the payment you send, and the account it turns on. Nothing on file joins them — the invoice never records who paid, and what adds time to your account never points back at the payment. Here is exactly how, and where we stop short of pretending.

Kept apart on purpose

When you pay, Twiga writes down that a payment arrived and, separately, that an account has more paid-through time. Those two records share no field. There is no column that says “this payment was for that account”, so there is nothing to look up and nothing to hand over — not to us on a bad day, not to anyone who copied the database.

It’s the same move as your sealed login, applied to money: we don’t protect the link, we decline to store it. What isn’t written down can’t leak.

Monero does the other half

The payment itself carries no name because it’s Monero. Its ledger hides the sender, the receiver, and the amount, so what Twiga sees is simply that funds landed — never a card, a bank, or a person. There’s no identity attached for us to record even if we wanted to.

Where we stop short of pretending

We won’t tell you it is mathematically impossible to ever guess a connection. Anything that happens in time leaves a faint trace, and a claim of perfect unlinkability would be the kind of thing we don’t say. What we can tell you is what we built against it: the two records hold nothing that joins them, we keep no timestamp on the part that grants your access, and the dates we do keep are rounded to the day rather than the second. The direct link isn’t there, and the little that timing could hint at, we’ve blunted.

Quick answers

Can Twiga tell which payment came from my account?

No. The payment and the account are stored as separate records with no field joining them — nothing says a given payment was for a given account. There is no link to look up and none to hand over.

Is it truly impossible to link them?

We don’t claim mathematical impossibility — coarse timing always leaves a faint trace. What we do is store no direct link at all, keep no timestamp on the part that grants access, and round the dates we keep to the day. The join isn’t there, and the timing signal is blunted.

Does paying reveal my identity on the Monero side?

No. Monero’s ledger hides the sender, receiver, and amount, so the payment carries no name. Twiga only sees that funds arrived — never a card, a bank, or a person.

If nothing links the payment to me, how does my account get the time?

The join happens as you pay and is never written down. Your confirmed payment adds days to the account you’re signed into, but the payment record names no account and your account references no payment — so afterwards there’s nothing on file that says which payment bought your time.

Is there a receipt or payment history I can look up?

No, by design. Keeping a list of your payments would be keeping the exact link the rest of this avoids. What you can see is what’s true and useful: the days left on your account. Your own Monero wallet holds your record of what you sent.

The whole picture — see what Twiga costs