When privacy is optional, networks fracture into public and private activity, shrinking anonymity sets and weakening protection for those who do opt in.