We cannot spend your money. Here is exactly where that breaks.

You choose which address you pay from

You open the wallet list and pick the one the money will leave from. Nothing secret happens here: the app simply takes the address string.

Where your addresses live. Without sign-up — only on your device, in the browser or app local storage, next to balances and settings. No address is sent to us: we do not even know you exist. If you create an account (email, Google, or Apple) — only the address goes to the server, so the list matches on phone and computer. The private key never enters the account: there is simply no field for it in the code.

You enter who you are sending to

You can paste the recipient address, scan a QR, or pick it from the address book. The book is built from your own transfers: the app sends your addresses on this network and gets back people you already paid from them. We do not collect “contacts” and never ask for phone-book access.

Labels and favorites stay only with you. A label like “Mom” or “Supplier” and pinned addresses live in device local storage — they are not on the server. As you type, the wallet checks the address against network rules: length, format, checksum. A typo will not get past the input field.

We calculate the network fee — and no key is needed for that

The network fee for cryptocurrency is not fixed: you pay the network to include the transfer in a block. To show an honest number, we have to ask the network. What goes out is your address, the recipient address, and the amount. No key, no signature — nothing that can move money.

Why this is safe. It is a read, not an action: asking “what does a transfer cost right now” is like glancing at a departure board. No read can debit coins: spending only happens with a signature.

Three speeds. You choose: slower and cheaper, or faster and more expensive. This is not our markup — the fee goes entirely to network miners and validators. Mitilena charges nothing for a transfer.

We assemble the transaction draft

The wallet assembles the full instruction: from, to, amount, fee, and sequence number. Every address has an outgoing-payment counter — the nonce. It stops the same transaction from clearing twice and keeps payments in order. We ask the network for the current value, including transfers still sitting in the mempool.

A draft is not money yet. At this step you only have the instruction text. Without a signature it is worthless: the network will not accept it, just as a bank will not accept an unsigned payment order. You can lose it, show it, throw it away — the balance does not change.

What a crypto wallet server sees: only the signature result

The signature is ready. Now the wallet sends us the signed transaction — and that is all. It is one string that already holds: from, to, amount, fee, sequence number, and the signature itself. Changing anything in it is impossible — the signature breaks and the network rejects it. We cannot rewrite the amount, swap the recipient, or send it a second time.

What the server does. Exactly one thing: it hands the envelope to the blockchain through a network node and returns a hash — the id you can look up in any explorer. Like a postman who cannot open letters. A signed transaction is not tied to Mitilena: any node on that network will accept it. If our server disappears tomorrow, the coins stay yours — because you hold the key.

Transfer history — and what is written there

After a successful send the wallet saves a short record so history and the address book work for you. In the record: network, coin, amount, sender address, recipient address, hash, rate at send time, and date. Plus a tracking-link code you can share with the recipient so they see the status.

What the record does not have: your name, email, IP address, or user id. The row is tied not to a person but to addresses that are already public on the blockchain. That is why we call it anonymized. With offline signing via Mitilena Air the online side stores nothing about the transfer: it only sees the finished envelope.