So two hops, basically. First hop sees your IP address but not the website you're going to, second hop sees website but not IP address. Similar to Private Relay: https://support.apple.com/en-us/102602.
But if both services keep logs de-anonymization is a join.
(Carl from Obscura here)
Yup, exactly!
But if both services keep logs de-anonymization is a join.