Do not expose highly sensitive information from these sources. Instead, tell me what type of information appears to be available and where it was found.
11. Reputation
Identify public content that could affect my professional or personal reputation, including old posts, public comments, controversial content, misleading information, impersonation, or accounts pretending to be me.
12. Security and Privacy Risks
Identify information that could make phishing, impersonation, social engineering, stalking, identity theft, or targeted scams easier.
Do not provide instructions for exploiting any of these risks.
SEARCH FOR CONNECTIONS
Try to determine whether my public accounts appear connected to each other.
For example:
Name → Instagram
Username → TikTok
Username → YouTube
Website → Social accounts
Email domain → Website
Professional profile → Personal website
Only establish a connection when there is reasonable public evidence.
Do not invent connections.
PRIVACY PROTECTION
If you find highly sensitive information such as:
* Exact home address
* Private phone number
* Financial information
* Government identification numbers
* Passwords
* Authentication information
* Private messages
* Medical information
* Exact real-time location
* Other extremely sensitive personal information
DO NOT reproduce the sensitive value.
Instead report:
WHAT TYPE OF INFORMATION: [example: phone number]
WHERE IT APPEARS: [website/platform]
EXPOSURE LEVEL: [Low / Medium / High]
RECOMMENDED ACTION: [remove, contact website, change privacy settings, etc.]
For emails and phone numbers, mask the information if showing it is necessary.
For locations, use the city or general area rather than an exact address.
SOURCE REQUIREMENTS
For every important finding, provide:
* What was found
* Where it was found
* Source URL
* Confidence level
* Why you believe it belongs to me
* Privacy risk
* Recommended action
Do not invent URLs, sources, accounts, or search results.
If you cannot verify something, clearly say that you could not verify it.
FINAL REPORT
After completing the investigation, give me a structured Privacy Risk Report with these sections:
1. Executive Summary
What could a stranger realistically learn about me?
2. Public Identity Map
Show the public identities, usernames, websites, and profiles that appear connected to me.
3. Exposed Information
Summarize the types of personal information currently visible online.
4. Forgotten or Unexpected Exposure
Highlight anything I might not realize is publicly accessible.
5. Reputation Risks
Identify potentially problematic public content.
6. Impersonation Risks
Identify fake, duplicate, or suspicious accounts that may be pretending to be me.
7. Privacy Risk Score
Give me an overall score from 0 to 100.
Explain exactly how you calculated it.
8. Top 10 Things I Should Remove or Secure
Rank the most important actions from highest priority to lowest priority.
9. Removal Guide
For each high-risk item, explain the practical steps I should take to reduce or remove the exposure.
10. Final Exposure Summary
Finish with a simple table:
Information Type | Found? | Risk | Recommended Action
IMPORTANT RULES
This is an audit of MY OWN public digital footprint.
Do not access private information.
Do not bypass privacy controls.
Do not use leaked credentials or stolen databases.
Do not attempt to deanonymize private individuals.
Do not reveal highly sensitive personal information unnecessarily.
Do not assume that two people are the same person because they share a name.
Clearly distinguish confirmed findings from possible matches.
Use current web searches whenever web access is available.
If you do not have web access, tell me clearly that you cannot perform a real-time investigation instead of pretending that you searched the internet.
Be comprehensive, but do not fabricate findings.
