Threat Model

• Name who is collecting and why
• List brokers, advertisers, platforms, states
• Decide which data matters most

Your Signature

• Map name, accounts, and devices
• Note the browser fingerprint you leave
• Watch the overlap that ties identities

Separation Model

• Keep real, private, and throwaway identities
• Use burner email and separate profiles
• Never mix identities without need

Device Hygiene

• Keep the OS and apps updated
• Remove unused apps and permissions
• Disable ad ID and telemetry
• Encrypt the disk where possible

Browser And Search

• Use privacy browsers or isolated profiles
• Block third-party trackers
• Run private mode for sensitive lookups
• Separate sessions with container tabs

Network Layer

• Use a trusted VPN to mask your IP
• Remember a VPN hides traffic, not all metadata
• Reach for Tor when the model demands it

Account Hygiene

• Use unique passwords and a manager
• Enable app or hardware-key two-factor
• Assign separate emails per identity
• Use masked aliases where possible

Comms

• Prefer end-to-end encrypted messaging
• Limit personal info in profiles
• Keep sensitive talk off everyday channels