Privacy property ensuring that two actions or identities cannot be reliably linked; goal of mixers, ring signatures, and privacy‑preserving credentials.