Fund projects together.
Stay private.
Support the projects you believe in. Matching rewards broad support, not big wallets.
Four projects. One pool.
Every contribution is private. Every result is published.
Open Curriculum
Free courses on zero-knowledge proofs and private money, in six languages.
Relay Keepers
Support for the people running Tor bridges and relays under heavy censorship.
Loom
A small library that adds private Zcash payments to an app in a few lines of code.
Audit Commons
A shared fund for independent security reviews of small privacy projects.
From other platforms.
Rounds hosted elsewhere, with their own projects and pools. Mosaic adds the private payment rail and a public, checkable record.
Internet Freedom 2027 (demo)
A live demo of the direct shielded rail. Not a real Tor campaign.
Internet Freedom 2026
Ten projects, one matching pool, and a community that showed up.
How matching works.
Contribute privately
Pay from your wallet. Your name is not attached to the payment.
Matching rewards people
A project with 100 supporters receives more than a project with one large donor.
Results are public
Project totals and matching allocations are published when the round closes.
One donor of 1 ZEC counts as one supporter. A hundred donors of 0.01 ZEC count as a hundred.
Same money. Different support.
What stays private.
- Sender
- hidden
- Amount
- hidden
- Memo
- encrypted
- Recipient
- shielded address
- Amount
- visible
- Pseudonym
- per round
- Your identity
- not collected
- Other rounds
- unlinkable
- Project totals
- published
- Matching
- recomputable
- Contributions
- pseudonymous
- Donor names
- never
One limit: the organiser sees the amount you contributed and a per-round pseudonym. They cannot see who you are.
Check the results yourself.
Download the contribution set and recompute the matching in your browser.
Questions
The long version is in the code.
Do I need a Zcash wallet?
To pay from your own wallet, yes — any wallet that supports shielded payment requests. The demo also ships a local wallet so you can try the flow without one.
What does the organiser see?
The amount you gave and a per-round pseudonym. Not your name, wallet address or email.
Can I contribute twice?
On invite rounds, one code binds to one supporter. Open rounds do not claim to stop duplicate accounts.
How do I know the result is right?
The full contribution set is published with a fingerprint. Anyone can recompute the matching in their browser and check a receipt.