Tor hides the road. Not the car.
This is a field guide to staying unseen. It is also the FAQ.
Hadal keeps you off our server. Nothing keeps you hidden from the rest of the circuit: your browser, your wallet, your habits. This is the manual for those. The rules get heavier the deeper you go. Or skip to the questions.
0 m surface (you are here, in a browser)
-300 m Tor hides the road. Not the car.
-1,200 m Before you connect
-3,400 m The chain remembers
-5,800 m What Hadal collects
-8,200 m Check the whole address
-9,600 m Questions, answered plainly
-10,935 m Go down (the bottom)
-1,200 m — Before you connect
Six rules. Each holds to a depth, and each says where it stops holding.
Get Tor Browser from torproject.org.
Not from a search result, not from a store listing you have not checked, not from a link someone sent you. Download it, then verify the signature the Tor Project publishes beside the file. A modified browser is the one fault nothing else on this page can repair.
Fails when you install a lookalike. They exist, and they look right.
Set the Security Level to Safest.
Shield icon, then Settings, then Security. Safest switches JavaScript off on every site. Hadal is built for exactly that: every page, including this one, reads and works with scripts blocked. This is by design, not a mode we tolerate. These pages need no scripts. If a future console ever needs them, it will say so and tell you why.
Fails when you loosen it for convenience, on any site, even once.
Leave the window the size it opens at.
Do not maximize it and do not drag its edges. Window size is measurable, and an unusual size makes you a smaller crowd. Tor Browser rounds the content area to common sizes to help. Resizing undoes the help.
Fails when you go full screen on a monitor nobody else has.
Install nothing extra.
No browser extensions at all, no themes, no privacy add-ons. Each one changes what your browser looks like, and many can read every page you open. Tor Browser already ships what it needs. Signing happens in a separate signer you control, not in the browser: the launch page describes the flow (an unsigned transaction comes out as text, you sign it in the separate signer, and you paste the result back).
Fails when your browser becomes the only one of its kind.
Log into nothing else in this session.
No email, no social account, no exchange, no cloud drive. A single login puts your name inside the same browser session as your launch. When you finish, close everything and press New Identity.
Fails when “just checking one thing” takes eleven seconds.
Skip the VPN, in either direction.
Chaining a VPN with Tor moves trust around rather than removing it, and it can make you easier to pick out. There are real reasons to do it: a network that blocks Tor, for one. If you know your reason, you are not who this rule is for. If you do not, do not.
Fails when you add it because it sounded safer.
-3,400 m — The chain remembers
Tor protects the connection. The blockchain records the money. A launch is a transaction, and every transaction on Solana is public, permanent and searchable by anyone.
[ Exchange account ] holds your name
| \
| \ direct withdrawal,
| | recorded by them
[ Known wallet ] |
: tied to you |
: |
: dust "for gas" |
v |
[ Fresh keypair ] <--------'
|
| funds the launch
o your token, public
The withdrawal and the dust are the two lines that name you. Neither is hidden by Tor.
The way in.
A withdrawal from an exchange that knows your name, straight to the new keypair, is a statement that the two are connected, and the exchange keeps the record. Any hop between your identity and the keypair is a link that someone else holds. Generate the keypair fresh, on your own device, and use it for nothing else. Any direct transfer from a wallet you have used before to the fresh wallet links the two on-chain, and never reuse the fresh wallet for anything afterward. Fund it from money you already hold in a wallet that has no tie to you, and be honest with yourself about what “no tie” has to mean.
The name.
An ENS or .sol name, a handle from somewhere else, an avatar, a ticker pun only you would make, the way you phrase an announcement. Names are the cheapest thing to correlate. A token named for your inside joke is a signature.
The clock.
Funded at 14:02, launched at 14:09, announced at 14:12. The chain timestamps every step, and so do your habits: the hours you are awake, the day you always buy. Let time pass between steps. Do not do it all in one sitting.
The dust.
A small amount sent from a wallet that knows you to the new one, for gas, to test, to be safe, is a link anyone can read. Never send to the new keypair from a wallet with your name on it.
Hadal cannot fix this.
We never see your IP address. We also cannot reach into Solana and un-write what is already there. The most we can do is avoid adding to it.
-5,800 m — What Hadal collects: nothing
The server is built to keep no record of you. In plain words:
| The server never stores | Public regardless |
|---|---|
|
These live on Solana, not on Hadal. Anyone can read them on any explorer, whether Hadal exists or not. If the creator wallet is yours, every record attached to it is yours too. Hadal being blind to you does not make Solana blind to you. |
-8,200 m — Check the whole address
A v3 onion address is 56 characters followed by .onion.
hadalxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.onion
Below, a clone that matches the first six and last six characters, read in groups of eight. The groups that differ are in bold. It is not Hadal.
| Characters | Real | Clone |
|---|---|---|
| 1–8 | hadalxxx | hadalxxx |
| 9–16 | xxxxxxxx | xxxxxxxx |
| 17–24 | xxxxxxxx | xkxxxxxx |
| 25–32 | xxxxxxxx | xxxmxxxx |
| 33–40 | xxxxxxxx | xx7xxxxx |
| 41–48 | xxxxxxxx | xxxxxxxx |
| 49–56 | xxxxxxxx | xxxxxxxx |
Compare all 56.
The first six and the last six are what people check, so they are what a clone copies. Vanity generators can match a prefix cheaply. Read the whole address, in pieces if you have to, and match every piece.
Bookmark it once, in a clean profile.
Verify the address the first time, then save the bookmark in a Tor Browser profile you use for nothing else. After that, never follow a link to Hadal. Open the bookmark.
Clones are the real threat.
An onion service has no registrar to lean on and no DNS to poison. What goes wrong is a look-alike that asks for your seed phrase. Hadal never will. Any page that does is not us.
-9,600 m — Questions, answered plainly
Is this legal?
Hadal is privacy tooling. Using Tor, running a wallet you control and launching a token are lawful in many places and restricted in others, and we cannot tell you which applies to you. You are responsible for the laws where you live and for whatever you launch.
Privacy is not a license. Fraud, impersonation and deceiving buyers are illegal wherever you are, however you reached the keyboard. Nothing on this site is legal advice; if the stakes are real, talk to a lawyer who works with digital assets.
Do you hold my keys?
No. Signing happens on your device, in a wallet you control. Hadal never sees a seed phrase or a private key, and it will never ask for one. A page that asks is a clone.
The same goes for funds: launches are paid from your wallet, and nothing is deposited with Hadal first.
What happens if the onion service goes down?
The site becomes unreachable. Onion services can be slow or absent for ordinary reasons: network trouble, load, maintenance. Wait, and try again later.
Do not accept a “mirror” from anyone who messages you one. A mirror someone sends you is a clone. Anything already on Solana stays on Solana, and because Hadal holds no funds, an outage cannot freeze a balance on our side. What you can still do with a token while the site is down depends on the on-chain program; the launch page will say.
Can I use a phone?
Yes, with care. On Android, use Tor Browser for Android, from torproject.org or the Tor Project’s own store listing. On iPhone, the Tor Project points people to Onion Browser; every iOS browser is built on Apple’s web engine, so it cannot match what Tor Browser does on a computer.
Set the Security Level to Safest there too. Hadal works with scripts off, so you lose nothing. Then think about the rest of the phone: it is full of accounts, notifications and apps that know your name. A phone is a hard place to follow the rules above.
Are there fees?
Sample numbers, not a promise: a network fee of 0.02 SOL (sample), and a creator fee of 0.30% of every curve trade (sample). You also pay Solana’s own network fees and the rent for the accounts a token needs. Tor itself costs nothing.
The real schedule will be printed on the launch page before anything goes live. If a figure here disagrees with that page, that page wins.
Why is there no clearnet mirror?
A clearnet site needs a domain, a registrar, DNS, a host and usually a CDN. Each is a company with records, payment details and the power to take the site away, and each is a place a log can exist. An onion service has none of them: the address is the key, and your connection never leaves Tor.
A clearnet mirror would also give clone-makers a normal-looking URL to copy. The inconvenience is the feature.
Can I launch from a normal browser?
No. Hadal is onion-only, and an ordinary browser cannot reach it. Do not use a web-to-onion gateway to get around that. The gateway sees everything you send, can change what you receive, and ties your real address to your request, which is the exact thing this site exists to avoid.
How do I report a scam token or abuse?
There is no account system and no email intake, so there is nowhere to send a report. The criteria for delisting will be published here.
Know the limit in advance. Hadal can choose what it lists on its own pages. It cannot delete a token from Solana.
What can’t you do?
- Hide anything that is on the chain.
- Protect you if your computer or browser is already compromised.
- Fix a funding trail made before you arrived.
- Stop people who know you from recognizing your art, your phrasing or your ticker.
- Recover a lost key or reverse a transaction.
- Promise a token will have buyers, or hold its price.
- Guarantee that the onion service is up.
- Keep you out of trouble where launching is restricted.
-10,935 m — Go down
If you have read this far, the rest is a form.
[ Launch a token ] [ How the descent works ]
The dark is not a hiding place. It is only a place where no one is looking yet.
Last modified: (set at deploy). Contact: none. See the reporting question above.