A privacy claim you cannot check is a slogan.
Every position on molfi is stored under a commitment, and every commitment is public. This page reads one straight off the deployed contract and lays out what an observer learns from it — so the claim on /privacy can be tested rather than believed.
CONTRACT 0x0215dc0b029cfa4d3671494ad4ddcd9ceede531867487a9970b094a665a3aaf9
Look up any position. You do not need to own it.
A commitment is public — it is an indexed key on every PositionOpened event. Paste one and this reads get_position straight off the deployed contract, with no wallet and nothing of molfi’s in between, and shows you exactly what a stranger watching the chain can and cannot learn.
Every open emits PositionOpened with the market id and the commitment as indexed keys, so they can be listed straight from the chain with no help from molfi:
curl -s https://api.cartridge.gg/x/starknet/mainnet \
-H 'content-type: application/json' \
-d '{"jsonrpc":"2.0","id":1,"method":"starknet_getEvents","params":[{
"from_block":{"block_number":0},"to_block":"latest",
"address":"0x0215dc0b029cfa4d3671494ad4ddcd9ceede531867487a9970b094a665a3aaf9","chunk_size":50}]}'It starts at block 0, where this contract's first event landed, because the node answers a scan in fixed windows and one begun at block zero comes back empty with a continuation token — correct, and no use to anyone who runs it once.
That is the same list anyone watching this market already has. It is why the band being in storage matters, and why a market's totals are public on purpose while the positions behind them are not.