The most common mistake is assuming a private browsing window hides you. It does not. It clears your history on that device, which matters if a sibling borrows your laptop, and it does almost nothing against the network your traffic passes through.
That gap is where a lot of trouble starts. A closeted student in a dorm, a nurse in a provincial hospital with one shared Wi-Fi, an organiser mapping out a Pride action: all of them can be careful about passwords and still leave a readable trail.
Here is what tends to matter more.
Who you are hiding from changes everything else
Before picking tools, name the actual risk. For most readers it is not a state agency. It is a parent paying the internet bill, a barangay-level official with a grudge, an HR manager who also administers the office network, or an ex with your old passwords.
Each of those has different reach. A family member can see the router’s device list and a billing portal. An employer can see what domains you visited on company Wi-Fi. Writing this down, even roughly, keeps you from buying complicated protection against the wrong threat while leaving the easy door open.
Encrypted messages still leak who talked to whom
Signal and similar apps protect the content of what you send. They do not hide the fact that a conversation happened, and group chats expose a membership list to everyone in the room, including whoever gets added later.
Organising chats usually get compromised socially, not technically. Someone screenshots, someone’s phone is unlocked at home, someone adds a friend of a friend before a protest. Keep sensitive planning groups small, use disappearing messages, and treat the member list as the most sensitive thing in the chat.
Your network sees the sites, even when it cannot read them
HTTPS keeps the contents of a page private. The domain name usually is not. A Wi-Fi administrator, a residential router log, or an ISP record can show that a device reached an HIV testing provider, a legal aid site, or a queer community forum at two in the morning.
This is the specific problem Tor was built for. It routes a connection through several relays so that the network you are on sees only that you connected to Tor, and the site at the far end does not see your home address.
Orbot is the version of this most people here end up using
Orbot, from the developer listed as The Tor Project, is a free proxy app that pushes other apps’ traffic through the Tor network. That is useful when you want to read a PrEP clinic’s page or check a sensitive forum from a shared household connection without it landing in a router log. For those who do their reading and writing on a bigger screen rather than a phone, Orbot VPN for Windows covers the same ground on a desktop. Expect pages to load slower, and expect some Philippine banking and government sites to block Tor outright.
Device habits beat tools almost every time
A strong privacy setup collapses when the phone unlocks with a thumbprint a relative can press while you sleep. Use a PIN for anything you would not want opened in your absence, turn off message previews on the lock screen, and keep a separate account for community work if you share a computer at home.
Audit the boring things too: Google Photos backups, autofill, notification mirroring on a smart TV, a laptop logged into a shared family account.
Privacy tools protect information, not people. In a small community, information travels through friends long before it travels through a router log or an app’s servers. Decide early who actually needs to know a name, an address, or a meeting place, and keep that circle honest about it.
