Understanding online safety
Key concepts behind the Where Am I? audit.
What is linkability?
Linkability is how easily someone can connect your online accounts and activity to each other — and to your real identity. It's not about one secret piece of data. It's about correlation: the same username, the same photo, a city mention on Reddit, your real name in a GitHub commit.
What is doxing?
Doxing (or 'dropping docs') means publishing someone's private personal information — real name, address, phone, workplace, family — without consent, often to harass or intimidate. Understanding your linkability helps you reduce the information available for someone to find and publish.
Why username reuse matters
If you use 'coolgamer99' on Steam, Reddit, Discord, and Twitch, anyone who finds one account instantly knows where else to look. Professional investigators and casual harassers both start with username searches. Distinct aliases for different contexts is one of the simplest protections.
Why breaches matter
When a website you signed up for gets hacked, your email and password may leak. Attackers try those credentials on other sites. If you reused the password, they gain access to more accounts — which may contain even more personal information.
Identity anchors
Certain information acts as an anchor that makes everything else easier to find: your legal name, city, workplace, school, face, phone number. Even one anchor combined with a reused username can be enough to identify you.
Sweden: public directories (Ratsit, Hitta, Eniro)
In Sweden, sites like Ratsit, Hitta.se, Eniro, Mrkoll, and Merinfo aggregate data from public registers. If someone learns your legal name — from a breach, a forum, or a LinkedIn profile — they can often find your address, phone number, age, and relatives in minutes. This is one of the fastest dox paths for Swedes, completely separate from username correlation. Adresskydd via Skatteverket and opt-out requests on each aggregator are the main defences.
What this tool does — and doesn't do
Where Am I? is a guided self-audit. It helps you think through your exposure and scores linkability risk based on your answers. It does not hack accounts, access private data, or search for other people. Breach checks only query public breach databases for emails you provide.