The internet knows everything about you.
So why does it keep asking who you are?
- Two identity systems run at once: the login identity you manage, and the behavioral identity built about you.
- They do not share. Logins prove access to one service. Behavior profiles you across all of them.
- Deleting an account removes access, not the identity built from your behavior.
Do they know you or not?
Every site, every app, every time: email, password, verification code. Again. It feels broken, because in one sense it is.
The same internet targets you with uncomfortable accuracy. It knows where you go, what you buy and what you read, and its recommendations can feel as if they arrived before you looked. And yet it still asks for your email, still makes you create an account, and still acts as if it has no idea who you are.
It is like the doctor's office. You fill out the same forms every visit: name, address, insurance, history. They have it, sort of, but not in a form that is unified, portable or trusted across their systems. The internet works the same way, at vastly larger scale.
One identity you manage. One you cannot see.
The confusion comes from this: you are dealing with two different identity systems, and they do not talk to each other the way you would expect.
| The identity you enter (login) | The identity they build (behavioral) | |
|---|---|---|
| Created by | You: email, password, profile details | Your behavior, devices and activity |
| Controlled by | Each platform, which can revoke it | Data brokers, ad platforms and analytics systems |
| Lasts | Until the account is deleted | Follows you across platforms and over time |
| Scope | One service | The whole ecosystem |
| Job | Grants access | Tracks, profiles and predicts |
| You notice it as | Logging in, again | Ads that feel like they know you |
The login identity is the part you interact with: accounts, emails, passwords. Each company keeps its own version of you, which is why you keep re-entering the same details. Delete the account and you disappear from that platform.
The behavioral identity is built quietly from device fingerprints, location data, browsing, purchases and social connections. It does not need your login. It recognizes you anyway.
Platforms control access. Data markets build identity.
Accounts let each platform control who gets in. Behavior lets the data market know who you are. Neither system is designed to hand that knowledge to you.
There are partial bridges. "Sign in with Google" or Apple, and passkeys, cut down the typing and are often more secure. But they move your login identity to a few large platforms rather than to you, and they leave the behavioral identity exactly where it was. If the two systems were unified under your control, you would log in less, restrict tracking, and own the identity built about you. That is not how they are designed.
Login systems know your account. Behavioral systems know you.
This is not just annoying design. It is exposure.
The hidden identity drives profiling and targeting, persistent tracking across services, and data broker aggregation. For some people it becomes a real-world safety risk, because the same signals that place an ad can place a person. And it keeps being rebuilt: the mechanics are in AN-002.
Deleting your account removes access. It does not remove your identity.ObscureIQ
The internet does not know you in a way that benefits you. It knows you in a way that benefits everyone else. Until that changes, you will keep logging in everywhere while being tracked everywhere, at the same time.
- AN-001KYC is procedural. Identity infrastructure is structural.
- AN-002Myth: deleting your data erases your identity.
- AN-003Deep identity vs. privacy settings.
- AN-004 · this noteThe internet knows everything about you.
Make one identity easier and the other weaker.
Make the login identity easier
- Use a password manager and, where offered, passkeys. Less typing, fewer reused passwords.
- Use separate email aliases for signups, so one leaked address does not link every account.
- Close the accounts you no longer use. It removes access and a breach target, even if it does not remove the profile.
Make the behavioral identity weaker
- Reset your phone's advertising ID and turn off cross-app tracking.
- Limit apps' location access to "while using", and turn off precise location where it is not needed.
- Remove your listings from people-search sites and brokers, the layer where the hidden identity becomes something anyone can buy.
Where this goes next.
- ObscureIQ identity infrastructure analysis. This note is the plain-language entry to the series; the evidence and mechanics are in AN-001 to AN-003.
As of 3 November 2026.
Updated 3 November 2026: moved to the Analyst Note format as AN-004. Duplicated lines removed; the shared-identity point now accounts for federated sign-in and passkeys; the comparison rebuilt as a table. First published 25 March 2026.
Identity analysis, as it is written.
The Tactical Privacy Wire on Substack carries our public analysis. If the identity built about you has become a safety problem, the first call is confidential.