The Bitcoin whitepaper's focused discussion on privacy is in Section 10, 'Privacy' (PDF page 6), with background provided in Sections 1 and 2. The core idea is: public transaction records protect privacy by isolating the link between public keys and real identities. Here’s what it means in detail: Traditional payments require users to disclose extra information. Section 1 points out that because transactions can be reversed and merchants need to guard against fraud, customers are often required to provide information they otherwise wouldn’t need to. This sets the context for the privacy issue, but the paper doesn’t expand it into a dedicated privacy solution. Public transactions are a prerequisite for solving double-spending. Section 2 explains that without a trusted third party, the network needs to make transactions public and reach consensus on their order. Therefore, privacy cannot rely on hiding transaction records. The key to privacy protection is 'keeping public keys anonymous.' Section 10 compares two models: banks restrict access to transaction information, while Bitcoin makes transactions public but tries to sever the link between transactions and real identities. The public can see transfer amounts and transaction relationships, but identities shouldn’t be directly exposed. The paper uses stock exchanges as an analogy: market data is public, but the identities of the parties involved are not. Using a new key pair for each transaction reduces linkage. The paper refers to this as an additional safeguard, aimed at making it harder for outsiders to determine that multiple transactions belong to the same person. This refers to new key pairs—it doesn’t mean that simply not naming the same address is enough. Transaction linkage weakens privacy and may expose history. The paper explicitly acknowledges that in the typical multi-input transactions it describes, multiple inputs reveal relationships between shared owners. Once the identity tied to one key is identified, other linked transactions may also be attributed to that person. The whitepaper proposes conditional identity privacy, not unconditional anonymity. The key to protecting privacy lies in whether the link between real identities and public transactions can remain severed. At the same time, the paper acknowledges that the transaction structure itself may allow this link to be re-established. It does not propose a complete mechanism for hiding transaction amounts, obscuring fund flows, or preventing all identity tracking.