Your Digital Shadow

I came up in a trade where a man could simply leave. You closed a door, you crossed a border, you became someone else's problem in another country, and the record of you was a few sheets of paper in a drawer that may or may not have been filed correctly. That world is gone, and I do not entirely miss it, but I do mark its passing, because something replaced it that most people still do not take seriously.

You now have a second body. It is more honest than the first one. The first body can lie to a doorman and hold its nerve in a tight spot. The second body cannot lie at all. It records where you went, who you spoke to, when, and for how long, and it hands all of that to anyone who asks the right system. You cannot delete this second body. The best you can ever do is teach it to say less.

The danger is the join

Let me kill the most comforting illusion first. People imagine the threat is a single damning fact — one photo, one location, one slip. It almost never is. The danger is correlation. It is the join.

The craft of assembling a person from public scraps even has a name in the trade — open-source work — and its entire power is the join. A username you reused across three sites. A photograph with the coordinates still baked in. A check-in here, a leaked password from a breach you forgot years ago, a face that appears in someone else's holiday album. None of it is secret. Each fragment, alone, is nothing. The danger is that a patient person connects them into one picture — who you are, what you can do, where you are soft.

The enemy thinks in links. That is the whole method, and once you understand it, your defence becomes obvious: break the joins, and the dossier falls apart in their hands.

So you separate your identities, deliberately and from the start.

• Real. Your legal name, your finances, the things that simply have to be true.
• Private. Personal email, secure messaging, a pseudonym for the everyday accounts that have no business carrying your name.
• Throwaway. A burner email and disposable accounts for one-off signups, kept behind a separate browser profile that touches nothing else.

And then you do not mix them. Not once. The moment a throwaway account shares a phone number, a recovery email, or a reused password with your real one, the wall comes down and all three become one. There is no "mostly separate." Linkage is exposure, and a single crossing is a full crossing.

The part that tells the truth

Here is the thing people get exactly backwards. They worry about the content of what they say and protect it with encryption. Good. But encryption only hides what you said. It does nothing about everything around what you said — who, when, where, how often, for how long. That is metadata, and metadata is the part that tells the truth.

Often the pattern is far more damaging than the words. I do not need to read your messages to your lawyer if I can see that you called the same lawyer four times in the week before you suddenly resigned. The content is locked. The story is wide open. The appointment book gives up everything the diary refused to.

Two traps catch people constantly, and both are quiet.

File metadata. Nearly everything you upload carries hidden cargo — the program that made it, the time, the device. Photographs are the worst offender: by default a camera writes its own make and model into the file and, far more dangerous, the exact coordinates where the picture was taken. People post a photo to prove they were somewhere and the file quietly broadcasts exactly where. Strip the metadata before you share anything. And read the image itself with a cold eye — a reflection in a window, a street sign, a number plate, a logo on a wall behind you. Any of those can place you as surely as a tag would.

The phone in your pocket. This is the loudest part of the second body, and the part people most want to believe is quiet. It is not. Every moment it is on, it is in conversation with the network, and the network knows roughly where you are — within tens of metres in a city — from the timing and angle of its chatter with the towers, long before any app reports a single thing. There is no truly private active connection. The only phone that genuinely cannot be located is one that is off and, ideally, sitting inside a sleeve that blocks signal.

The discipline that actually works

I want to be honest about the goal, because chasing the wrong one gets people caught. You are not going to become invisible. Perfect anonymity is rare and almost never the real aim. The practical aim is narrower and entirely achievable: reduce the linkage, shrink the footprint, and make assembling a picture of you slow, costly, and unreliable. You are not vanishing. You are raising the price of finding you until it is more than anyone is willing to pay.

That price is paid in small, dull habits, kept consistently. Separate emails for separate lives. A password manager so that no two logins share a secret — because a reused password is the single seam that collapses every compartment at once. Two-factor that lives in an app or a key, not in a text message, because a number stolen from your carrier defeats the text in an afternoon. And the constant, slightly tedious vigilance of never letting one world's detail wander into another.

I have watched people who were genuinely careful in person — who would never write a name down, who swept a room out of habit — leave their digital shadow wide open because it did not feel like the trade. It is the trade now. The shadow is where the modern dossier gets built, quietly, while you are looking at the door.

Details moved, the warning unchanged.

The danger is never the single fact. It is the patient join between facts. Break the links between your identities and keep them broken, because linkage is the whole of exposure — and the join, once made, cannot be unmade.

— M.