How Whir works

Whir turns traceable coins into private ones by pooling your deposit with unrelated deposits and paying you back from the shared pool. The result is a payout that no longer has a direct on-chain edge to the coins you sent in. There is no account, no email and no KYC — a mix begins and ends with the addresses you provide, and every record is erased 24 hours after payout.

What CoinJoin actually does

A normal Bitcoin transaction has clear inputs and outputs, so chain-analysis firms can cluster addresses and follow value from one hop to the next. A CoinJoin is a single collaborative transaction that combines many participants' inputs and outputs at once. Because dozens of unrelated payments settle together, an outside observer cannot reliably say which input paid which output — the deterministic link that clustering depends on is gone.

Whir builds on this well-studied, community-standard technique rather than a custodial black box. Your coins are routed through the pool and back out; they are never parked in a house wallet that holds customer balances.

The Whir process, step by step

Delays, splits and timing

Two controls put timing analysis in your hands. Splitting lets you send the payout to up to three separate addresses, so a single large amount does not reappear as one obvious output. Delays let you decouple the payout from the deposit in time. Used together, they make it far harder to link the two halves of a mix by amount or by moment.

• Up to three receiving addresses per mix, entered when you create the order
• Delay anywhere from immediate up to 48 hours
• A unique deposit address is generated for every single order
• Payout is made in a single blockchain transaction on your chosen schedule

The threat model Whir defends against

Whir is designed to frustrate the ways ordinary Bitcoin activity gets deanonymised:

• Address clustering — grouping addresses that appear as co-inputs to link your wallet history
• Timing correlation — matching a deposit to the withdrawal that immediately follows it
• Amount fingerprinting — following an unusual, round or exact amount from hop to hop
• Data-retention risk — logs or accounts that could later be seized, sold or leaked

What Whir deliberately does not do

There is no sign-up, so there is no profile to correlate. There is no custody, so there is no balance to freeze or lose to an exit. And there is no long-term logging, because order data is time-boxed and deleted after the mix settles. Privacy comes from holding as little about you as technically possible — not from a promise to guard a database forever.