www.priva-z.app
“Priva-Z — Private Crypto Swaps”
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
What it is
- The Internet Archive has never saved this site, so it is probably new.E38
- The site describes itself as: “Private crypto swap with no account: swap SOL, BTC, ETH, LTC, USDT or USDC through Zcash’s shielded pool or Monero to a fresh address, or ge”E2
- It's built with React (common tools for building web apps).E8
- In your browser it can copy text to your clipboard, installs a background script (offline use, push messages) and saves small bits of data in your browser.E10E11E12
- It has sections such as /swap, /how-it-works, /status, /referrals, /request and /partners.E15E16
- While loading, it called 1 endpoint on its own servers, such as /api/v1/info.E14
Where your data goes
On a first visit the page only talked to its own servers (priva-z.app, www.priva-z.app, privaz-api.vercel.app).
Crypto and wallets
How key features work
What it can ask your wallet to sign
Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E36
signTransactionConnecting your wallet
It connects to crypto wallets using Phantom and signTransaction. Connecting shows the site your wallet address; it doesn't move funds by itself.E9
PhantomsignTransactionLoading its content
Its content loads from its own API while you browse (/api/v1/info).E14
/api/v1/infoPages and API calls
Pages it links to
//swap/how-it-works/status/referrals/request/partners/terms/privacy/compliancezecxmr-zecrelaywidgetswaphow-it-worksstatus/*payreferralspartnerstermsprivacycomplianceunavailableholderrequest/newrequestzpayzpay/dashboard*Endpoints
Called while loading (seen) or named in the code (code).
| privaz-api.vercel.app/api/v1/info | seenE14 |
Evidence
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
Limits
- We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
- Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
- Some trackers only load after you accept cookies or log in, so the real list can be longer.
- We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
- The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
- This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
- The code reader hit its size budget on parts of 7 large bundle file(s); those parts weren't fully analysed.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id g1azy1O4.