Phantom Privacy Shield
The profile already exists
You are being profiled.
Not just watched.
Nobody is following you around. Something quieter is happening, and it works better.
Step 01 of 05
You leave pieces of yourself everywhere.
Each one is dull on its own. A receipt. A page you lingered on. Nobody could learn much from any single piece, and that is exactly why nobody minds collecting them.
Who is doing this
The joining is the business.
Pulling scattered records about a person into one picture is not a side effect of modern software. It is a product, sold under company names, to buyers with budgets.
Palantir
Builds the platforms governments and police forces use to pull separate databases into one searchable view of a person. That is not an accusation. It is what the company says it sells.
Flock Safety
Runs camera networks that log where vehicles travel and makes those logs searchable, often well past the town that installed them.
What entity resolution does
Four records from four unrelated places, none of them revealing on its own. The product is the arrow in the middle, and it does not care which of the four came from a browser.
What Phantom actually reaches
Not those companies. It cannot delete a number plate sighting or reach inside a government platform. Anyone who tells you their browser can do that is selling you something.
What it does is cut off one of the largest and cheapest feeds into that pipeline: the trail your browsing leaves, and how easily separate parts of it can be pinned to the same person.
Three things. Every piece you leave carries at least one, which is what makes the joining possible in the first place.
What they left on your machine
Cookies and stored data, dropped by a site so it knows you when you return.
Clearing them helps, and most people already know about them. It is the one layer that is easy to deal with, which is why tracking companies stopped relying on it.
What your computer gives away
Screen size, processor count, time zone, fonts, the tiny quirks in how your graphics chip draws. Together they make a signature.
You never agreed to this and clearing your history does not touch it. A rare combination points at one person, which is why looking unusual is worse than looking boring.
Where you connect from
Your internet address, attached to every request you make, everywhere.
Anyone who sees it on two different sites can put those visits together. This is the one a VPN addresses, and it is also the one people forget applies equally to every tab they have open.
The gap is a purchase order
These are entity resolution platforms. They take in whatever a customer holds or has bought and work out which records belong to the same person. Nothing in that design cares whether a record came from a police report or an ad exchange.
There is already an established trade selling commercially collected data onward to government buyers. Whether a given platform takes browser data today is a procurement decision, not a technical limit. The capacity is not in question, only the appetite.
Today's data meets tomorrow's tools
Records are kept. Matching that is impractical this year becomes routine in five, and nothing about a fragment collected now stops it being joined later by something better than anything available today.
You get one chance to decide how much is handed over and how easily it ties together, and that chance is the moment it is collected. Everything after that is somebody else's decision.
Privacy law varies enormously. In some places you can demand a copy of your file. In others there is nothing to demand and nobody to ask.
Every one of those laws governs what may be done with data after it is collected. None stops the collecting, and none travels with you.
Phantom works before any of that
It changes what leaves your machine and how hard the pieces are to join once they have. That happens on your computer, before anything is sent, so it behaves the same in a country with strong protections and a country with none.
What Phantom does
Walls, separate exits, and a way to check both.
Spaces
A browser split into sealed spaces. Each keeps its own logins, history and stored data, and reports a different machine to the sites inside it. Nothing crosses.
Type where you are going and it opens in the space that keeps that site. Pick once, remembered after.
A separate way out
Walls are most of the work, but every space still leaves through one front door unless you give it another. Point a space at a proxy, at Tor, or through the VPN you already pay for.
If a route drops, that space stops loading rather than quietly falling back to your real address.
Phantom Mode
One button. Every space moves onto the strongest route it can reach, kill switches armed, then it checks the result with a real request.
Three states: off, partly on, on. It reaches green only when every space was measured leaving by its own route. Pressing harder does not help.
Check before you send
I work at Riverbend Analytics[my employer], I am 34[my age], and my email is j.okafor@riverbend.io[my email].
Paste a message before it goes anywhere. Phantom finds the details that point back at you and hands you the choice on each one.
Runs on your machine. No model, no network request. It also flags details that are harmless alone and revealing together.
Your connection
Traffic leaves the way it normally would. If you run a VPN, spaces use it.
Your spaces stay separate in every other way, but they all arrive at websites from one address, and anyone who sees that address on two sites can put them together.
Trade off Nothing to set up, full speed, and the weakest of the four.
A proxy you choose
Traffic leaves through a server you point it at.
Websites record the proxy instead of you, so two spaces on two proxies cannot be matched by address. Your internet provider stops seeing which sites you visit.
Trade off You are trusting whoever runs the proxy, because they can see where you go.
Tor, a separate path per space
Traffic leaves through the Tor network on a path kept for this space alone.
Each space comes out somewhere different, so a site here and a site in another space see two unrelated addresses with nothing to link them. No single point in the path knows both who you are and where you went.
Trade off Noticeably slower, and some sites block Tor or bury you in captchas. Best for spaces you use occasionally.
Your VPN, then a proxy
Through the VPN you already pay for, then out through a proxy on top.
Your provider sees only the VPN. The VPN sees only that you reached a proxy. The website sees only the proxy. No one link in the chain has the whole picture.
Trade off Slowest of the four, and you are trusting two operators rather than one.
The kill switch
Routes drop without warning. Without one, the browser carries on over your home connection and the next sites you load see your real address. With it on, the space loads nothing until the route is back. On by default.
Each of these cuts one thread. Tracking still works because cutting one leaves the others tied. Phantom is not a replacement for a VPN. It uses one.
| Stops | VPN | Private window | Ad blocker | Phantom |
|---|---|---|---|---|
| Hiding your address from websites | Yes | No | No | Yes, per space |
| Two sites matching you by address | No, one address for everything | No | No | Yes, a different one per space |
| Recognising your machine by its signature | No | No | Some of it | Yes, different per space and per site |
| Your logins bleeding between activities | No | Only until you close it | No | Yes, permanently separate |
| Blocking adverts and trackers on the page | No | No | Yes | Not its job, use one alongside |
| Falling back to your real address if the route drops | Depends on the provider | Not applicable | Not applicable | Blocks instead, per space |
| Telling you whether it is actually working | A connected light | No | A count of things blocked | Runs real tests and reports failures |
Read this part
What Phantom cannot do for you.
This list is in the app too, on screen permanently, where it cannot be dismissed. A privacy tool that hides its limits earns trust it has not paid for.
An account hands a site your name. Use one account in two spaces and you have told both sites they are the same person.
They all arrive from one address, and that address joins them back together whatever else is separate.
Your typing rhythm can identify you. We leave it alone, because faking keystrokes is detectable and being caught faking is worse.
Naming your employer and your town identifies you however well the browser is hidden. The check tool finds patterns, not meaning.
It cannot delete a camera sighting or empty a broker file that already exists. It reduces what gets added from here on. It is not a delete button for your past, and nothing sold to you as one is telling the truth.
Your other browser, your phone and your operating system leave their own trails. Phantom covers browsing inside Phantom.
This raises the cost of tracking everybody. It does not stop someone who has decided to find you specifically.
Phantom is recognisable as a hardened browser, as are Tor and Mullvad. The goal is that your spaces cannot be tied together, not that nobody can tell you are careful.
You do not need a disguise. You need walls.
Windows, macOS and Linux. Works the same in every country, because it changes what leaves your machine rather than what someone may do with it afterwards.
No account. No sign up. Nothing sent anywhere.
