Privacy & Analysis
What the public ledger reveals
The design decision at the centre of this section is that Bitcoin records transactions rather than balances. There is no account to look up and no name attached to an output; there is a chain of signed instructions, each spending an output created by an earlier one. That structure is what makes the ledger independently verifiable, and it is also what makes it analysable. An observer who can link two addresses to the same owner has learned something the protocol never intended to publish, and the linking is done with heuristics rather than proof.
The pages here are written for a reader who wants to understand the mechanics rather than a checklist. Each one names the heuristic or the practice, states what it assumes, and says where it fails. Nothing in this section is legal or tax advice, and nothing here should be read as a claim that any particular practice makes a user untraceable. Where a calculation would genuinely help, the writing points to a tool that does that work properly rather than embedding a calculator in the reference material.
What the Ledger Shows
If every transaction is public, who can be identified?
Bitcoin's ledger is often called anonymous, and the label is wrong in a way that matters. Every transaction is public, permanent and linked to the outputs it spends, so the record is a complete graph of movements rather than a set of isolated payments. What the ledger does not contain is a name. That is the whole of the pseudonymity: an address is a persistent identifier that anyone can watch, and the question is only whether something else connects it to a person. This strand sets out what an address actually identifies, how an analyst builds a cluster of addresses that appear to share an owner, and the specific heuristics — common-input ownership, change detection, timing — that the clustering rests on.
Start with Anonymous vs PseudonymousWhat a Wallet Can Do
Which choices actually change what an observer can infer?
Most privacy advice about Bitcoin is about behaviour rather than software, and the behaviour that matters is the selection of which outputs to spend. A wallet that always spends the oldest output first, or that always sweeps everything it holds, produces a transaction graph that is easy to read. A wallet that lets the user choose produces one that is harder. This strand works through the practical levers: coin control, the change output that most transactions create and how it is identified, batching several payments into one transaction, and the small outputs that accumulate until consolidating them becomes a decision with both a fee cost and a privacy cost. None of these is a guarantee, and the pages say so.
Start with Coin ControlWhere the Analysis Stops
How much should a chain-analysis conclusion be trusted?
Chain analysis is presented as a science and practised as an inference. The clustering heuristics are probabilistic, they produce false positives, and a single wrong assumption can attach an innocent address to a cluster it has nothing to do with. This strand takes the limits seriously. It sets out where the standard heuristics fail, why a cluster is a claim about ownership rather than a fact, and how Bitcoin's transparent ledger compares with designs that hide the amounts or the participants entirely. The comparison is not a scoreboard: each approach trades something away, and the pages here are explicit about what.
Start with The Limits of Blockchain AnalysisEvery page in this section
The strands above are the way in. This is the full contents of the section, grouped by whether the page describes what the ledger exposes or what a user can do about it.
What the Ledger Exposes
The public record itself: what an address identifies, how addresses are clustered into apparent owners, and why reuse collapses the separation between them.
- Anonymous vs PseudonymousWhy Bitcoin is pseudonymous, and what an address actually identifies.
- How Transactions Are TracedThe heuristics chain analysis applies, and where they break down.
- Address ReuseWhy reusing an address links every payment to it, and what wallets do instead.
- The Limits of Blockchain AnalysisWhere chain analysis stops being reliable, and why a cluster is an inference.
Practices That Change the Picture
The wallet-level choices that alter what an observer can conclude, each with its own cost in fees, effort or convenience.
- Coin ControlHow choosing which outputs to spend changes what an observer can infer.
- Change AddressesWhy a transaction sends value back to the sender, and how change is identified.
- Transaction BatchingHow combining payments lowers the fee per payment, and what it reveals.
- Dust TransactionsWhy a tiny output can cost more to spend than it is worth.
- UTXO ConsolidationWhat consolidating small outputs costs, and the privacy trade-off it carries.
- Bitcoin Privacy vs Privacy CoinsA transparent ledger against privacy-focused designs, and what each trades away.
The reference pages behind the strands
The strands above explain the analysis. These pages hold the underlying record and the methodology, for when you want to check a figure or follow a source.
The mechanics underneath the analysis
Every heuristic in this section rests on how Bitcoin actually records ownership. These pages explain that model directly.
- Protocol, Transactions & MiningThe supply schedule, transaction mechanics and mining economics behind the price.
- Proof of WorkThe hash puzzle, the target and nonce, and why accumulated work secures the chain.
- Difficulty AdjustmentThe 2,016-block retarget, its caps, and the ten-minute target it defends.
- HashrateWhat hashrate measures, why it is estimated, and how it differs from difficulty.
- Mining PoolsPooled hash rate, share accounting, payout schemes and centralisation.
- Miner RevenueThe block subsidy plus fees, and how the mix changes across subsidy epochs.