- private zap is on nostr, non-zap is not on nostr
- comment is e2e encrypted for private zaps, custodians can see comment if sending non-zap
- identity and comment is e2e encrypted for private zaps, no one except the participants can see who the zap was from, so this is already more private than standard nostr DMs themselves. No metadata!