Hi,

I've been searching for hours without any success. I'm sure this question has been asked alright but can't find it.
I'd simply like to know if when sending let's say ETH to someone from an exchange (kraken for example), the receiver can trace back your "personal" ETH key address you typically use to deposit and withdraw ETH on that exchange or just know anything that could lead to infos on your ETH public key(s) on this exchange (provided you didn't give them to begin with).


I know that on Etherscan it shows the Exchange's key (often called the name of the exchange, e.g. "Kraken 5") so it means that you don't send it directly to the receiver but basically allow the exchange to take the indicated amount from your wallet and the exchange will itself sends the ETH to receiver via its wallet (that's what i deduced from looking at etherscan). But then, does that mean the receiver could theoretically just check the public transactions on that exchange's at the exact same date and time and retrieve our own public key at around the time he received it (minus the time needed to send ETH on avg at that time)?

Even if hundreds of transactions are made each seconds, the receiver would only have to receive multiple amounts at different times to practically be 100% sure to locate the actual public sender key by elimination (manually or using a simple algorithm) and from there he can know all the transactions linked to that public key even though it wasn't given to him. It would be like being able to read all the past and future transaction of someone's else bank account just be receiving fiat money from that someone.

Is this how it works? Am i missing something? Is this how it's supposed to work ? I know Ethereum blockchain is supposed to be transparent, but that's from one personal wallet to another. Exchanges never really specifically mentionned what information they give to the receiver but at first glance one could have guessed it's "anonymous" since it comes from the exchange's wallet and not the public key they provided to you, but if it's not the case, they should specifically say so cause some people could be deceived by this lack of informations/knowledge.

If it's too complicated to answer or don't want to delve into it, thank you for at least linking me to a guide that would explain that issue, since i couldn't find any. Thank you for help.