Receiving tokens

Take control of the schedule first

A claim link carries a key your sender generated. Until you replace it, they can act as you, and so can anyone else the link reached along the way. The claim page offers to derive a key from your own wallet and move the schedule onto it. Do that, and the sender loses the ability to withdraw or sell it out from under you.

Re-keying costs 6 STRK from your shielded balance like any other Nagare operation, so you need private balances turned on and a little STRK shielded before you can do it.

It also makes the schedule portable. The key from a link lives in the browser that opened it and nowhere else, so clearing site data before you re-key puts the schedule out of reach permanently. A key derived from your wallet can be rebuilt on any device. Keys and recovery spells this out.

If you were asked for a key instead

Open the schedule page your sender points you at, connect your wallet, and use Show my Nagare key for this schedule. Send them the value it gives you. It is a public key, so it reveals nothing on its own, and it is not a wallet address. Once they transfer the schedule onto it, it appears on your list.

Checking what you have

The claim page states whether the sender can cancel. If it says they cannot, the schedule was opened with a published constant in place of a sender key, no private key for it exists, and the full amount will vest on the dates shown. You can verify that against the contract yourself.

If it says they can, they are able to take back whatever has not vested, at any time until the schedule fully vests. Before the cliff that is everything. Withdraw as it vests and less of it stays exposed to a cancel.

If you bought the schedule

A purchase moves the schedule onto the key you made when you placed the offer. Nagare promotes that key to your recipient role as soon as the contract shows the sale went through, so the schedule starts behaving like any other one of yours, and a fresh browser finds it from your wallet.

What you did not buy is protection from the sender. A sale leaves the sender key untouched, so on a cancelable schedule they can still cancel and take the unvested part back from you. Withdrawing promptly is what limits the exposure, and an uncancelable schedule removes it.

Withdrawing

Nothing can be withdrawn before the cliff. After it, the schedule page shows what is available and the button takes it. The amount lands in a private note inside the pool, so your visible wallet balance will not move. The withdrawal is public as an amount and a time, with no indication of the wallet it belongs to.

Withdrawals are yours to time. Taking everything the moment it vests and taking it all at the end are both fine, though a single distinctive amount is easier to correlate with a deposit than several ordinary ones.

If the sender cancels

You keep everything that had vested at that moment, and it stays withdrawable afterwards. The schedule shows as canceled and still claimable until you take it, then as canceled and settled.