Skip to content
Back to home

How it works · Identity protection

How anonymity is actually built

Anonymity is not a promise anyone can make at the end of a process. It is a structure, and it has to be in place before the first image exists.

The agency

Midnight Million · April 2026 · 6 min read

Most people arrive at the agency having already worked out that they want two things at once: an audience, and a life that the audience knows nothing about. The second is usually described as a preference. It rarely is. For anyone whose work touches a sensitive category, being identified is not an inconvenience — it reaches employers, families, landlords, and border officials, and it does not expire.

What follows is the mechanism, written plainly. Not the reassurance, the mechanism: who signs what, where money moves, what happens on a set, and what is deliberately never recorded in the first place.

The agency is the counterparty

The single most important decision is also the least visible one: a sponsor never contracts with a creator. It contracts with Midnight Million. The agency signs, the agency invoices, and the agency is the party a brand would have to pursue if something went wrong. A sponsor evaluating a placement sees an alias, an audience, and a rate card — and there is no later stage at which more than that is disclosed, because there is no field in the process where more than that is stored.

Payment is where most arrangements quietly leak. A direct transfer carries a name, a bank, sometimes an address, and it lands in records that outlive the collaboration. Routing payouts through the agency removes that entirely: the sponsor pays an invoice from a company, and the company pays out on a schedule agreed in advance. Commission is a flat percentage, stated before anything is signed.

“Nobody asked me to trust them. They showed me the paperwork and the payment route, and there was simply nowhere in it for my name to sit.”

On the roster since 2023 Anonymous, by arrangement

What happens on a set

Production is where anonymity is easiest to lose and hardest to repair. A shoot runs closed, with the smallest crew the work allows, and everyone present signs before they arrive. The shot list is agreed in advance and it is as much a list of exclusions as inclusions: which angles are usable, which marks stay covered, what cannot appear through a window, which jewellery comes off. A reflection in a mirror has ended more anonymity than a careless caption ever has.

Files are then treated as evidence rather than assets. Metadata — camera serial, GPS, timestamps, editing history — is stripped before anything is delivered. Nothing is published without written approval, frame by frame, and unused material is destroyed rather than archived, because an archive is only ever one breach away from being a disclosure.

When it goes wrong anyway

No arrangement is airtight, and any agency claiming otherwise is selling something. Material gets reposted, scraped, and mirrored. What can be controlled is the response: escalation the same day, takedown requests filed by the agency rather than by the individual, platform reporting through the channels that actually work, and legal support where it is warranted. Because the contracts sit with the agency, none of that requires the person affected to identify themselves in order to be defended — which is precisely the trap most people fall into when they handle it alone.

Where it starts

Before anything is produced, an alias is chosen, a separate contact channel is opened, and payment routing is set up. It takes about a week and it is unglamorous work — but it is the only week during which every later safeguard is still cheap. Everything described above depends on it having happened first.


The process described here reflects how the agency operates. Specific terms, rates, and protections are agreed in writing for each engagement before any work begins.