Operations security

Operations security (OPSEC) is the practice of protecting sensitive information from adversaries. Originally a military term, it has been widely adopted in information technology and, increasingly, in personal privacy management.

Non‑consensual disclosure of one's kink identity can have serious real‑world consequences. In the context of Risk-Aware Consensual Kink (RACK), OPSEC means preventing personally identifiable information (PII) from being exposed in ways that could jeopardise an individual's social life, career, or physical safety.

Personally identifiable information

Personally identifiable information (PII) is any data that can be used to identify an individual, either on its own or when combined with other information. This can include:

• Legal name
• Home or work address
• Phone number
• Personal email address
• Date of birth or age
• Face photographs (including partially obscured faces)
• Recognisable backgrounds (e.g. your home, workplace, or frequently visited places)
• Distinctive body markings: tattoos, piercings, scars, birthmarks
• Voice recordings or videos that can be linked to your identity

Risks

Poor OPSEC leaves individuals vulnerable to doxing (or doxxing), the malicious, non‑consensual publication of your private information. When one's kink activity is linked to their legal identity, they may face:

• Social repercussions: loss of friendships, estrangement from family, or community ostracism.
• Professional consequences: job termination, difficulty finding future employment, or damage to professional reputation.
• Legal and physical threats: harassment, stalking, blackmail, or even physical violence.

Protecting others

Practicing good OPSEC is not limited about protecting oneself. They may also have ethical and sometimes legal obligations to protect the identities of their partners, associates, and bystanders. Before sharing any photograph, screenshot, or personal story that involves someone else:

• Obtain explicit, fully informed consent.
• Agree on what may be shared, on which platforms, and for how long.
• Do not assume that because someone gave consent once, it applies to all future sharing.

A partner’s consent is just as important as the risk‑aware consent negotiated before a scene. Failing to protect a partner’s identity can be a serious violation of consent, and may expose them to the same social, professional, and physical risks.

Practical mitigations

Steps can be taken to reduce one's digital and physical footprint. No single measure is comprehensive, but layering several of them significantly reduces the overall risk of inadvertent exposure.

Some skeptics of practicing personal OPSEC may argue that if an individual is a target, they will be hacked. Attackers look for vulnerabilities; these can come from users who are exhibiting poor cyber hygiene, such as by not following best practices or revealing too much personal information. Studies show that basic cyber hygiene reduces the likelihood of being targeted, and is highly effective at preventing from successful hacks. This section describes some examples of practical steps that apply to many RACK-related online activities.

Personal data and accounts

• Using a separate, pseudonymous email address for all kink‑related activity. Services like Firefox Relay or DuckDuckGo Email Protection offer easy ways to auto-generate untraceable emails that all forward to a unified inbox, which helps prevent web platforms from aggregating PII across different services.
• Choosing a screen name that has never been linked to one's legal identity, and using it only within kink spaces.
• Using a separate phone number (such as a prepaid SIM or a VoIP number) for kink contacts.
• Using a VPN to mask your IP address when accessing kink sites.
• Using a password manager to generate unique passwords for different accounts, and enable multi-factor authentication whenever possible, to help reduce the possibility of multiple accounts being compromised.

Photographs and media

• Stripping metadata: Before uploading any photo, removing EXIF data (which can include GPS coordinates, device information, and timestamps). Dedicated metadata removal software exists, and many operating systems and apps have built‑in tools.
• Obscuring backgrounds: Using a plain, neutral backdrop when taking new photos. Blurring or cropping out windows, landmarks, furniture, artwork, objects, layouts of the living spaces, and loose documents with readable information.
• Covering or editing out tattoos and scars: Using clothing, bandages, or digital editing to make body markings unidentifiable. Even a distinctive freckle pattern can be identifying.
• Checking reflections: Mirrors may unintentionally reveal areas not meant to be photographed. Reflections in polished surfaces, latex, glasses, or even the cornea of the eye may also carry usable reflections of an individual or background details.

Behavioral habits

• Avoiding reuse of profile pictures across kink and vanilla platforms. Reverse image searches can surface links between profiles.
• Avoiding sharing personal stories that include specific dates, locations, or events that could be cross‑referenced.
• Avoiding logging into kink accounts on shared or work devices.
• Regularly reviewing the privacy settings of social media and dating apps. Turning off location services for apps that do not require them.

Meeting in person

• Meeting new partners in neutral, public places first. Sharing personal locations only with trusted individuals.
• Sharing personal or work addresses with trusted individuals.

Known incidents

RACKWiki incident reports

• None filed.

See also

• Risk-Aware Consensual Kink
• Consent
• Negotiation
• Risk mitigation