A messaging feature that minimizes metadata exposure by hiding sender identity from service infrastructure when possible.