Yep; transactions are handled over DMs, so metadata is leaked (sender, recipient, timestamp), but the contents of the messages are encrypted, so the exact purchase, address, and amount are all unknown. Payments are then finalized with a DM from a random pubkey, so there’s no association with the buyer or seller once a sale is made. Plus, Cashu is used as the settlement layer for payments, adding greater anonymity to the transaction.