A Private Social Network for Public Figures: Face and Phantom

A public figure lives two lives online. One is the public account: polished, followed, quoted and screenshotted. The other is everything else: the jokes with old friends, the half-formed opinion, the photograph that is nobody's business, the question you would like to ask without your name attached to it. For most famous people, that second life has nowhere safe to go.

The large social platforms were built for reach. They are superb at broadcasting and very poor at discretion. This article looks at why public figures need a private layer online, what that layer should look like, and how VOIDEX Space was designed with two identities for every member: a public Face and an anonymous Phantom.

The problem with being known

Fame changes how every word is read. A casual comment becomes a statement. A like becomes an endorsement. A follow becomes a story. Public figures learn to self-censor, and many end up with only two choices: say nothing, or say it in a group chat and hope nobody forwards it.

Both choices have a cost. Silence makes a person feel absent from their own life. Group chats on consumer apps leak through screenshots, lost phones and people who fall out. And the anonymous accounts some people create on large platforms rarely stay anonymous. They are linked by a phone number, an email, a recovery address, a device or simply a writing style, and a platform built on data holds all of those in one place.

What a public figure actually needs

It helps to separate the needs clearly.

1. A public presence they control. A place to share work, appear to fans and be recognised, without an advertising system deciding who sees what.
2. Private conversations that stay private. End-to-end encrypted, with control over screenshots and history.
3. A voice without a name. Somewhere to join a conversation as a person, not as a brand, with real separation from the public identity.
4. A smaller, deliberate network. Fewer strangers, fewer bots, fewer lookalike accounts.
5. No data trade. A platform with no reason to profile them, sell their behaviour or let anyone pay to reach them.

The large platforms meet the first need well and struggle with the rest, largely because their business model depends on the opposite of discretion. We explored that in No ads, no data brokers.

Face and Phantom

VOIDEX is an invite-only, end-to-end encrypted platform owned by CNOTA. It is free, carries no ads and uses no third-party trackers or ad pixels. Nobody can pay for reach.

Inside VOIDEX Space, every member has two identities.

The Face

Your Face is your public self, shown as your @username. It is where a public figure can post, be followed and be recognised. Energy is VOIDEX's word for a like, and it works the way you would expect. Face posts in VOIDEX Space are public and are not end-to-end encrypted, because they are meant to be seen, and VOIDEX labels them as public. That honesty matters: a public post should never pretend to be private.

The Phantom

Your VOIDEX Phantom is an anonymous identity that belongs to you. It can post, comment and take part in VOIDEX Space without your name. The design decisions that make it anonymous are specific:

• VOIDEX never publishes a link between a Phantom and the person behind it.
• Phantom content is stored under the Phantom only, not under the member's public identity.
• A Phantom's public link can be regenerated, so an old link can be retired.

Phantoms carry an Honor score, so anonymity does not mean a free pass to be cruel. A Phantom that behaves well builds a record under its own name, and one that does not has a record too.

For a public figure, the Phantom is the missing layer: a place to be part of a conversation without the conversation becoming about who is speaking. We cover the thinking behind it in real anonymity with VOIDEX Phantom.

Why two identities, not two accounts

Many public figures already run a second account somewhere, often under a nickname. The difference is where the separation lives. A second account on a large platform usually shares the same phone number, the same device, the same recovery email and the same advertising profile as the first, all held by one company that can join them in a single query. On VOIDEX, the Phantom is part of the design from the start, with its content stored under the Phantom alone and no published link to the person. The separation is a product decision, not a trick the user has to maintain alone.

Keeping the two apart

A second identity is only useful if it stays separate, and the person using it has a part to play. VOIDEX keeps its side of the promise by never publishing the link. A member keeps theirs by not giving it away. A few habits help:

• Do not post the same photograph as your Face and your Phantom. An identical image is the easiest link there is.
• Do not reveal details only you would know in a Phantom post if you want it to stay anonymous.
• Mind your timing. Posting as both identities about the same event, at the same moment, invites guesses.
• Let your Phantom have its own voice. It does not need to sound like your public statements.

Media handling works in your favour here. When a photo or video is posted publicly on VOIDEX, images are re-encoded, which removes EXIF data such as GPS, and videos have capture metadata such as GPS, device model and creation time stripped before the post goes public. If a file cannot be cleaned, it is refused rather than published raw. A picture posted as a Phantom does not carry your location or your phone model with it. Read more in photo metadata and GPS.

Private conversations underneath

Space is where members appear. VOIDEX Messenger is where they talk.

Direct messages use a hybrid post-quantum key agreement combining X25519 with ML-KEM-768, the key encapsulation mechanism NIST standardized in August 2024, followed by a double ratchet with post-quantum re-keying, so each message has its own key. Identity signatures pair Ed25519 with ML-DSA-65. Groups and private channels use MLS, the IETF group encryption standard. Keys are created on the member's own devices, and VOIDEX's servers store only public keys and ciphertext.

For a public figure, the practical controls matter as much as the mathematics. Each chat has its own screenshot setting. Messages can disappear. A sent message can be edited within 15 minutes, or deleted for everyone. And every device key change is written to a public, append-only key transparency log that clients check, which makes a quietly substituted key, the classic way to impersonate someone in a chat, far harder to get past.

This matters well beyond fame. In December 2024 the US Cybersecurity and Infrastructure Security Agency advised highly targeted individuals to use end-to-end encrypted communications. Public figures are, by definition, highly targeted.

Why invite-only matters

A private layer is only private if the room is not full of strangers. VOIDEX is invite-only, which keeps the network deliberate and makes it harder for bulk fake accounts and scammers to flood in. It does not make anyone perfectly safe, but it changes the default from "anyone can reach you" to "people who were invited can." We discuss the idea further in invite-only networks.

Honest limits

No platform can stop a trusted friend photographing a screen with another phone, and no anonymous identity survives its owner deliberately revealing it. Face posts and public channels are visible by design. A lost VOIDEX recovery code cannot be restored by anyone, because VOIDEX never holds it. These are clear boundaries, stated plainly, and they are the reason the promises inside them can be trusted.

A place to be known, and a place to simply be

The internet gave public figures a stage. It did not give them a private room, or a way to speak without a spotlight. A healthy online life for a known person needs both: a Face for the world and a Phantom for the moments when the name gets in the way, with private conversations underneath that stay private.

VOIDEX is invite-only. Request your invitation, or read how VOIDEX protects every private message.

Sources

• CISA, Mobile Communications Best Practice Guidance (December 2024): https://www.cisa.gov/resources-tools/resources/mobile-communications-best-practice-guidance
• NIST, Post-Quantum Cryptography Standardization: https://csrc.nist.gov/projects/post-quantum-cryptography/post-quantum-cryptography-standardization
• IETF, RFC 9420, The Messaging Layer Security Protocol: https://www.rfc-editor.org/rfc/rfc9420