0. How to use this site
The short version
- This is a practical guide to privacy, security and free speech in everyday UK life, not a manual for living in a bunker.
- Security is risk management. You can cut the odds and the damage; you cannot reach zero.
- No tool is a silver bullet. Know what each one does and does not do.
- Change a little at a time. Every page opens with "The short version" and ends with "Do this now" (or "Remember"), so you can skim, act and come back for the detail later.
- General information, not legal advice. Check the linked sources and get a solicitor when it matters.
Purpose and limits
This site is a practical guide to privacy, security, freedom of speech and everyday life in a world where digital systems record, infer and remember.
It covers how common technologies work, what they expose, and how to make sensible choices without turning daily life into a security project.
It is grounded in real behaviour, not perfect models. Expect ordinary examples, because risks and trade-offs are clearest in familiar settings:
- using a phone on public transport;
- working from a coffee shop;
- reporting on a council meeting;
- organising a community event.
Who this site is for
The audience is broad: anyone who wants to understand what is happening to their data, plus professionals who handle sensitive information. Journalists, activists, technologists, students and the quietly curious are all welcome.
You do not need a technical background. Technical readers should still find the guides precise and rigorous.
The site assumes curiosity and a willingness to learn. It does not assume you want to overhaul your life, change your politics or move into a bunker. It does assume you care how you are observed and how to set realistic boundaries for your situation.
Who this site is not for
This site is not for people seeking confrontation, illegality or performative resistance. It will not help you break the law, harass others or evade legitimate safeguards.
It does not glorify extreme measures or treat ordinary users as enemies of society. There are better places for bravado; this is for people who want to make careful, defensible choices.
Privacy and security as risk management
Privacy and security are not absolutes. They are risk management, like seat belts or smoke alarms: you can reduce the likelihood and impact of harm, but not eliminate it.
- A strong password reduces the chance of account takeover. It does not make your account unbreakable.
- Encryption protects the contents of a message. It does not stop someone learning who you contacted or when.
Myth: one good decision makes you safe for good. Reality: safety depends on context, behaviour and change over time.
An activist facing targeted harassment, a software engineer working on proprietary code and a parent sharing photos with family all have different risk profiles. The same tool can be essential in one situation and unnecessary in another.
No tool is a silver bullet
Tools are useful, but they are never complete solutions. A few examples:
- A secure messaging app cannot stop you screenshotting a conversation and sending it elsewhere.
- A virtual private network (VPN) can stop a local Wi-Fi operator reading your traffic, but it does not stop websites tracking you, and it shifts trust to the VPN provider.
- Two-factor authentication helps defend accounts, yet it will not protect you from a scammer who talks you into handing over your login details.
Every privacy tool protects against some threats and leaves others untouched. The fix is not chasing perfection: understand what each tool does, what it cannot do, and whether it fits your needs. Know the boundaries and you can combine tools sensibly without expecting miracles.
How to read the guides without changing everything at once
Many people make their worst decisions in the first burst of enthusiasm: install several apps, change a dozen settings, then give up because it is too much.
Better: start with one or two changes that address your most likely risks and that you can keep doing without effort. Turning on automatic device updates and setting a strong passcode are high-impact steps that do not change your routine.
The guides are built in layers, and every page follows the same shape:
- "The short version" at the top: the key points in a few bullets.
- The detail in the middle, for when you want the reasoning and the caveats.
- "Do this now" (or "Remember" on more conceptual pages) at the end: a few small, concrete steps or takeaways.
So you can skim, act, and come back for the depth later. You are not expected to implement everything at once. Gradual change is more secure than dramatic change followed by fatigue.
Why normality and restraint often provide more safety
The safest approach is often the one that blends into your ordinary life. Extreme measures can attract attention, cause operational mistakes, or make you stand out in ways you did not intend.
Using a different phone for every purpose sounds protective. In practice it can mean missed updates, forgotten logins and inconsistent habits. A simpler setup you can maintain reliably often protects you better.
Restraint matters when sharing, too. You may have the tools to anonymise a post, but the content itself can identify you. A local journalist writing about a small council meeting might give away their location by mentioning a specific exchange with a councillor. The fix is not a cleverer tool; it is careful judgement about which details are necessary.
Legal and ethical responsibility
The UK has a mix of privacy protections, surveillance powers and sector-specific regulation. This site gives general information, not legal advice, and it cannot tell you what is lawful in your particular circumstances.
Law also differs between England and Wales, Scotland and Northern Ireland.
Pages on current law give a review date and link to primary or official sources. Check those sources, because legislation, commencement dates, regulatory guidance and government proposals can change after publication.
If police, an employer, a regulator, a court or anyone else is demanding access to a device, account, encryption key, identity document or confidential material, do not treat this guide as a substitute for a solicitor qualified in the relevant jurisdiction.
Work in a regulated field (healthcare, law, finance, education or journalism)? You may have professional duties beyond those that apply to the general public.
Ethics matter even where the law is silent. Respecting other people's privacy, getting consent where appropriate and avoiding harm are practical obligations that affect your credibility and safety. The most durable privacy practice is one you can defend in daylight as well as in private.
Do this now
- Turn on automatic updates on your phone and laptop.
- Check your device has a strong passcode, and set one if not.
- Pick one page from the contents that matches your most likely risk and read its short version. That is plenty for today.