RELEASE 4Live on Zcash testnet. Testnet coins have no monetary value.
SHIELDED · NON-CUSTODIAL · IN-BROWSER

Private money,
delivered as a link.

Send shielded Zcash to someone who has no wallet yet. CashDrop seals it in a one-time envelope, on your device, and hands you a link. The wallet can come after the money.

NO. 3194021 · SHIELDED 0.25ZEC for Ana. Dinner is on me.
FOR YOU SEALED
#/claim?d=7HqK2vR9…
SHIELDED · ZK

Anatomy of a link

FIG. 01 · WHY THE KEY NEVER REACHES A SERVER
cashdrop.app/app/ Origin The only part any server receives.
#/claim? Fragment Browsers never transmit anything after the #.
d=7HqK2vR9… Ciphertext Seed, amount and note under AES-256-GCM.
&n=Yk3pQ1… Nonce 96 random bits, fresh every time.
&k=Zt8vW2… or &l=1 Key or a lock Add a password and the key leaves the link entirely.
How it works

Three moves for the sender. One for the recipient.

01

Seal

Amount, note, optional password. A fresh shielded address is derived on your device.

02

Fund

Send the amount plus a 0.0001 reserve from any shielded wallet. Save the recovery file.

03

Share

Paste the link into an encrypted chat. The password, if any, travels another way.

→ RECIPIENT

Claim

Open it, make a wallet if needed, and the browser proves and sweeps the funds locally.

Seven modes

One envelope,
many occasions.

Try them in the app →
A CashDrop One private gift, refund or payment. B DropBatch Events, rewards, private payroll. One seed per person. C Private Fund Raise with a public story and no donor list. D Checkout Exact-price point of sale, with a real QR. E Plans Weekly, monthly or yearly. The customer approves each renewal. F Recover Sweep back what nobody claimed. G Wallet A first address, no extension.
FOR MERCHANTS

Take payment.
Keep no customer file.

Checkout turns any phone into a shielded point of sale. Plans sell subscriptions where the customer approves every renewal. To confirm a payment, your browser rebuilds the merchant wallet from its recovery file and scans testnet itself. No account, no dashboard, no customer record.

  1. 01Set a merchant, an item and an exact price.
  2. 02The customer scans the QR and pays shielded.
  3. 03Verify on your own device before you hand anything over.
LOCAL MERCHANT VERIFICATION · TESTNET Ada’s Coffee · Coffee and pastry
✓
CONFIRMED14 confirmations · orchard pool
0.01 ZEC
CONFIRMED PENDING UNDERPAID NOT FOUND
Checked on this device · seed not uploaded · no customer record
0Servers, accounts or databases that ever hold your money.
256BITAES-GCM envelope, sealed with the Web Crypto API.
250kPBKDF2 rounds behind every password.
.0001ZEC reserved so the recipient never pays a fee.
TESTNET EXPLORER VIEWCONFIRMED
Transaction
Shielded
Sender
Recipient
Amount
CashDrop?
Why Zcash

The chain learns less.

On a transparent chain, a payment link would publish who paid whom, how much, and everything they do next. Zcash’s shielded pool hides all of it, and CashDrop keeps both the funding and the claim shielded.

HONEST LIMITS

A link is cash.
Treat it like cash.

Shielding hides the payment from the chain. It can’t hide a link pasted into the wrong chat, so here is exactly where the edges are.

Read the full threat model →
  1. 01Whoever holds the complete unlocked link can claim first.
  2. 02A compromised device or insecure chat can leak it.
  3. 03The lightwallet gateway sees request timing and network metadata.
  4. 04Deadlines are reminders in this beta, not consensus timelocks.
  5. 05Testnet only. Independent security review comes before mainnet.
Under the hood

Two browsers and a blockchain.
Nothing in between.

NODE 01Sender browserWebZjs WASM wallet, fresh seed, AES-GCM envelope.
→ SHIELDED FUNDING TXOne-time addressLives in the Zcash shielded pool. Holds the funds, nothing else.
→ LINK, OFF-CHAINRecipient browserDecrypts locally, scans compact blocks, builds the proof.
→ SHIELDED CLAIM TXRecipient walletAny shielded testnet address, or one made on the spot.

A static PWA. No CashDrop API, user database, custodial wallet or analytics pipeline. There is nowhere for your keys to go.

3-minute walkthrough

See the whole hand-off.

▶ CASHDROP DEMOPRODUCT · PRIVACY · SEND · RECEIVE · 3:20

Before you drop.

Is this real Zcash?

Yes. The beta runs on the public Zcash testnet with real shielded addresses and transactions. Testnet coins have no monetary value.

Does the link contain the money?

It carries encrypted recovery material for a fresh shielded wallet. Treat it like cash: whoever unlocks the complete link can claim first.

Can CashDrop recover my link?

No. It’s non-custodial. Save the recovery file when you create a drop, fund, checkout or plan.

Can a Plan charge me automatically?

Never. CashDrop holds no wallet authority. Every renewal is a payment the customer chooses to send.

Is it mainnet-ready?

Not yet. This release is testnet-only and needs an independent security review before it handles real value.

The money
can be waiting.

Run the full create → fund → claim loop with free testnet ZEC. Nothing to install.

Open the app Source on GitHub