The delivery address you hand over
You type a place and send it to a stranger. Everything upstream of that moment was about hiding where you are. This step gives it away on purpose, because the job cannot be done otherwise.
The vendor · The market server · Whoever reads the vendor's records
This is the honest centre of the catalogue. Other branches describe observers who pick things up from the outside: traffic shapes, relay positions, parcel handling, disk remnants. This one describes a disclosure you make with your own hands, because a physical object has to be sent somewhere and no cryptographic arrangement removes the need for a destination.
No browser setting, no bridge, no extra layer of routing changes what happens here. Those things protect the connection. They say nothing about the contents of a form you filled in yourself. If turning on a bridge or adding a VPN to Tor left you feeling covered, this is the page that puts the limit on that feeling.
What the vendor learns
They learn a place. Depending on the postal system, that is a street, a number, sometimes a floor or a unit, a settlement, a region and a postal code. Precise enough to put an object in a specific letterbox, because that is what it is for.
They also learn a place attached to a time, and that is the part people underrate. A place is a fact. A place plus a moment is a much stronger fact, because it says somebody expected to receive something there in a particular window. Two of those, weeks apart, say something firmer again, which is why ordering twice is its own card.
- Learned exactly
- A deliverable location, to the precision the postal system needs.
- Learned by implication
- A country, a region, a time window in which somebody expected a delivery.
- Learned about the person
- Almost nothing. An address describes a place, not a resident.
- Duration
- Unknown to you. Retention on the other side is not visible.
What the vendor does not learn
The address is specific, and also narrower than most readers assume.
- Who lives there. An address identifies a location, not an occupant.
- Whose name is on the utility bill, the tenancy or the deed.
- Whether it is a home at all. It might be a workplace, a building with many occupants, a business that takes parcels, a collection point.
- Whether the person who typed it is the person who collects it. That is the subject of a shared delivery address.
- How long you have been connected to that place, or whether you will be next month.
- Your legal name, if the name written on the parcel is not it. A name on a label is a routing aid, not an assertion.
- Anything about your network, your device or your other activity. The address carries no technical trail with it.
The honest summary: a place is disclosed, and the link from that place to a named person is left to whoever holds the address. That link is not contained in what you sent.
What an encrypted note changes, and what it does not
Addresses are commonly supplied inside an encrypted message rather than a plain form field. It is worth being exact about the swap.
| Question | Plain form field | Encrypted note |
|---|---|---|
| The vendor can read the address | Yes | Yes |
| The platform can read the address | Yes, it is a field it holds | No, it holds ciphertext |
| The platform can see a message occurred | Yes | Yes |
| The platform knows sender, recipient, time | Yes | Yes |
| A later read of platform storage yields the address | Yes | It yields ciphertext |
| The vendor's own copy after reading | Unknown to you | Unknown to you |
The single change is that the platform stops being a reader and remains a carrier. That is not a small change, because it removes the address from a store holding every user's data at once. See sending an encrypted note and typing a delivery address into a form.
What it does not change is the point of the exercise. The vendor reads it, and must, because a parcel cannot be addressed by someone who cannot see the address. Encryption moves the disclosure from two readers to one. It does not move it to zero.
Where the address goes next
The address does not stay with the vendor. It is written on something and handed to a postal or courier operator, and a second institution then holds it in a different form with different retention. See a parcel entering the postal system and the outside of the packet. This is the one flow in the catalogue where information passes from an observer with no formal record keeping to one with a great deal of it.
What changes the answer
6 things change how much this action gives away. None of them takes it to zero, and none of them is a promise.
- Encrypting the note removes one readerIt takes the address out of the platform's readable store and leaves the platform holding ciphertext plus the fact that a message passed. It does nothing about the recipient.
- Supplying only what a carrier needsAn address needs to be routable. Extra context around it, such as when somebody is home or what the building is used for, is read by the same person and adds facts routing did not require.
- A collection point changes which place is disclosedIt substitutes one location for another, as described in lockers and collection points. A place is still disclosed, and the substitution adds a different observer with its own records rather than removing one.
- A name is routing informationWhat is on a label exists so a carrier and a recipient can match a parcel to a hand. It is not a claim the postal system verifies in ordinary handling, though signing for a delivery is where that stops being true.
- Nothing upstream reaches thisBridges, circuits and tunnels operate on the connection. This disclosure happens above all of them, inside a message you composed. They are separate problems.
- Retention on the other side is unknownYou cannot see whether a copy was made, where it lives or how long it stays, and any assurance about it is unverifiable from the buyer side.
What this card is not
This card does not advise on what to write in an address field and is not a method for making a delivery untraceable. It describes what the disclosure contains and what it leaves undetermined.
Questions that come up
Does using Tor protect the address I type?
It protects the transmission. The address arrives at its destination and is read there. Network privacy governs who can watch a message in flight, not who can read it once delivered.
Does the vendor know whether the address is my home?
Not from the address itself. A location does not announce whether it is a residence, a workplace or somewhere a parcel is simply received. That distinction is usually supplied by something the sender wrote.