alaaarm: the official PP (@0xprivacypools) website leaks the deposit <> withdrawal link to the ASP (Association Set Provider). This link is what it is supposed to protect, and the ASP is a centralized party who should never receive it.