How to use this workbook: Work through each section at your own pace. Answer the prompts honestly — there are no grades, and no one sees this but you. When you encounter something you don't know or want to learn more about, write it in the Research Queue at the bottom of each section. After completing the workbook, use the Action Plan at the end to commit to your first concrete steps.
You can complete this online and print it, or print it blank and fill it in by hand.
Section 01 · Foundation
Identity Sovereignty
Constitution
Principles 01–02
Principles 01–02
Your identity is yours. Anything that collects it without your conscious, informed choice is taking something from you. The danger is not that someone is watching — the danger is that you are readable.
Prompt 01
In your own words, what does "identity sovereignty" mean to you? What parts of your identity do you consider most private?
Prompt 02
List three to five platforms, services, or institutions that currently hold detailed information about you. What do they know?
Prompt 03
How "legible" do you think you are right now? Could someone build an accurate model of your habits, preferences, and relationships from publicly available data?
Research Queue — Things I Need to Look Up
Terms, concepts, or questions from this section that you want to investigate further.
Section 02 · The Threat
The Surveillance Economy
Constitution
Principles 03–04
Principles 03–04
The product being sold is a prediction of your future behavior. Being specific about what you're protecting and from whom is not paranoia — it is the foundation of rational security.
Prompt 04
Think about the last week. How many times did you see an advertisement that was eerily specific to something you had recently talked about, searched for, or purchased?
Prompt 05
Build your personal threat model: Who specifically might want access to your data? What could they do with it? How likely is each scenario?
Prompt 06
What is the most valuable piece of information about you that is currently easy to find or buy? Who benefits from that access?
Research Queue — Things I Need to Look Up
Terms, concepts, or questions from this section that you want to investigate further.
Section 03 · Domain
Physical Security
Field Manual
Domain 01
Domain 01
Your physical environment generates data constantly — from the cameras you pass to the WiFi networks your devices probe for.
Prompt 07
Map your daily route. How many cameras, license plate readers, or tracking technologies do you pass on a normal day? Where are you most surveilled?
Prompt 08
What are your phone's current settings for WiFi, Bluetooth, and location services? Are they on by default? Do you know what they broadcast when enabled?
Research Queue — Things I Need to Look Up
Terms, concepts, or questions from this section that you want to investigate further.
Section 04 · Domain
Behavioral Patterns
Field Manual
Domain 02
Domain 02
Predictability is vulnerability. Behavioral tradecraft introduces deliberate variation into your routines to reduce the accuracy of behavioral profiles.
Prompt 09
Describe your typical weekday routine from morning to evening. Where are the patterns that would make your behavior predictable to an algorithm?
Prompt 10
List the loyalty programs and rewards memberships you currently use. For each one, what data are you trading for the discount?
Research Queue — Things I Need to Look Up
Terms, concepts, or questions from this section that you want to investigate further.
Section 05 · Domain
Digital Operations
Field Manual
Domain 03
Domain 03
The digital domain generates the most data and offers the most control. This covers device configuration, communication security, metadata management, and your digital fingerprint.
Prompt 11
How many online accounts do you currently have? How many are dormant (not used in 6+ months)? How many still have access to your personal data?
Prompt 12
What messaging apps do you use? Which ones offer end-to-end encryption? Which conversations should be on encrypted platforms but aren't?
Prompt 13
Do you use the same browser for banking, social media, shopping, and personal research? What would it take to compartmentalize?
Research Queue — Things I Need to Look Up
Terms, concepts, or questions from this section that you want to investigate further.
Section 06 · Domain
Financial Privacy
Field Manual
Domain 04
Domain 04
Financial transactions are among the most revealing data points in your behavioral profile. Every digital transaction creates a permanent, searchable, sellable record.
Prompt 14
If someone gained access to your full transaction history for the past year, what would they learn about your health, relationships, political views, habits, and daily life?
Prompt 15
What purchases, if any, would you prefer to keep private? What payment methods could you use for those instead?
Research Queue — Things I Need to Look Up
Terms, concepts, or questions from this section that you want to investigate further.
Section 07 · Domain
Social Engineering Defense
Field Manual
Domain 05
Domain 05
The social domain is where most data is voluntarily surrendered. Your social graph is not yours alone — it maps your community.
Prompt 16
Think about the last time you shared personal information — with a form, a website, a store, or in conversation. Was sharing necessary? Could you have shared less?
Prompt 17
Map your "trusted circle": Who holds your most sensitive information (medical, financial, legal, personal)? Have you discussed how they handle it?
Research Queue — Things I Need to Look Up
Terms, concepts, or questions from this section that you want to investigate further.
Section 08 · Self-Assessment
Cognitive Biases & The Mirror Card
Mirror Card
Constitution P.06
Constitution P.06
The first threat to overcome is the set of biases that prevent you from taking the threat seriously. Until you see those shortcuts clearly, you won't follow through.
Confirmation Bias
When was the last time I changed my mind about a privacy practice because of new information — rather than finding reasons to keep doing what I was already doing?
Normalcy Bias
Am I continuing this practice because it still makes sense — or because I've always done it this way and changing feels uncomfortable?
Optimism Bias
If I learned that someone had built a complete profile of my location history, purchases, communications, and relationships for the last five years — would I truly feel comfortable with that?
Anchoring
Where did my current beliefs about privacy come from? Who told me that first story — and did they have my interests in mind, or their own?
Sunk Cost Fallacy
Am I staying with this platform or practice because it's still the best option — or because leaving feels like admitting the years I spent on it were wasted?
Availability Heuristic
Am I assessing this risk based on evidence — or based on whether I can easily recall a dramatic example? What about the quiet, chronic risks that never make the news?
Reflection
Which bias do you think most strongly affects your privacy decisions? Why?
Research Queue — Things I Need to Look Up
Terms, concepts, or biases from this section that you want to understand more deeply.
Section 09 · Community
Privacy as Collective Practice
Constitution
Principle 05
Principle 05
Your privacy practice protects more than you. It protects everyone connected to you. When your data is exposed, every person in your network becomes more legible.
Prompt 18
Who is in your Mutual Aid Radius — the people close enough to actually help each other? How does your data exposure affect them?
Prompt 19
What is one privacy practice you could teach to or share with someone in your community this week?
Research Queue — Things I Need to Look Up
Questions about community privacy practice that you want to explore.
Final Section · Commitment
My Personal Action Plan
Based on everything you've written above, commit to specific, concrete actions. Start small. A practice you actually follow is infinitely more valuable than a comprehensive plan you abandon.
This Week — Immediate Actions
Three things I will do in the next seven days:
This Month — Building Habits
Three habits I will establish over the next 30 days:
My Research List
The top five things from my Research Queues that I will investigate:
Domain I'm Focusing On First
Which of the six domains (Physical, Behavioral, Digital, Financial, Social, Psychological) will I prioritize — and why?