A course kit can't ship to a hash — so the LP is the only entity that ever knows your address, and that knowledge stays here. What leaves is a signed, zero-address ShippingMandateToken bound to your sovereign device key: it lets a specific Gym order a dispatch without ever learning where the box goes.
1Load your device wallet
Your shipping mandate is bound to your sovereign key. Arriving from a Gym? Your identity came along in the redirect — no file needed.
2Register your shipping address
Your address is stored here at the LP and nowhere else. The Gym receives only an opaque shipRef; dispatch receipts carry a trackRef — never a street, never a name.
3Your ShippingMandateToken
Signed by the LP, bound to your key, no address inside. It returns to your Gym in the URL fragment (never logged) — or download the updated wallet and import it there.