A practical guide
Anonymous Social Media: What Is Actually Private?
Separate what other members can see from what a service stores, and learn how details in a post can reveal more than a profile name.
By Sonder · Updated
Anonymous to whom?
Anonymous social media can hide your name from other members while still connecting posts to an account internally. Before joining, separate three questions: what readers see, what the service stores, and what your own words reveal.
A hidden profile is a useful boundary. It does not establish that your activity is technically unlinkable, that the service cannot read it, or that another person cannot recognize a situation you describe.
The Electronic Frontier Foundation recommends thinking separately about protecting information from other users and from the platform itself. Its guide to protecting yourself on social networks explains how account information and reused images can connect identities.
A post can identify someone without naming them
Consider this fictional example: “I’m the only night-shift receptionist at the hotel beside the station, and my manager changed my schedule on Tuesday.” There is no name, but the combination of role, location, and event could be recognizable.
“A change at work unsettled me this week” shares a feeling with fewer identifying details. That is an editorial example of reducing detail, not a guarantee of anonymity. Readers can also copy or describe what they see; a platform’s deletion controls do not control every copy someone else makes.
Questions to ask before sharing
- Can other members see your name, email, profile, or posting history?
- Does the service link activity to an account internally?
- Who processes the text for storage, moderation, or optional AI features?
- Is the text end-to-end encrypted, or can the service read it?
- What can you export or delete, and what retention periods apply?
- Could details in your post identify you or another person?
How public anonymity works on Sonder
Other Sonder members do not see your email, profile, or trace history. A trace is a short reflection you choose to share. Sonder associates traces and witness marks with your account internally for ownership, safety, export, and deletion.
Shared traces are processed for moderation and are not end-to-end encrypted. Your journal encrypts entries on your device before saving them. Only your journal passphrase or recovery key can open them; Sonder does not receive those secrets. Journal text is not sent to moderation or AI providers. Older entries remain readable on our servers until you unlock your journal and your device encrypts them. The privacy policy explains these limits and backup retention.
Removing a trace hides it from user-facing surfaces immediately. It remains recoverable for seven days and is then purged in background batches along with its witness marks. You can delete your entire account from Account after fresh password confirmation. Access is blocked immediately, and background cleanup removes account data. Export your journal and traces first if you want copies.
Read the privacy policy for current processing and retention details, and how moderation works for review boundaries. These explanations describe the product; Sonder is not therapy or a continuously monitored crisis service.