After dinner, Pip tells her parents she needs to work on her EPQ and goes upstairs with a plan for getting past Max Hastings’ Facebook privacy. She calls Cara and, while hiding the full implications of the investigation, asks for help accessing Naomi’s account because Naomi can see more of Max’s fake profile, “Nancy Tangotits.”

Cara confirms Naomi is out, opens Naomi’s laptop, disables login alerts, and gives Pip Naomi’s email and password. Pip logs in as Naomi and searches Max’s hidden profile, finding a timeline full of party and club photos that explain why Max keeps the account separate from his public-facing profile.

Pip scrolls back to 2012 and studies old calamity party photos, especially group shots that might show Andie Bell, suspicious behavior by Max, or evidence connected to the alleged drink spiking. She lingers on photos of Sal and Max together, aware that the images may hide secrets tied to Sal’s fate and Andie’s disappearance.

When Pip reaches the night Andie disappeared, she finds ten photos uploaded by Max from his house, adding to Naomi’s and Millie’s photos from the same night. Pip notices a pattern: Max, Naomi, and Millie all uploaded their photos from that night on Monday the 23rd between 9:30 and 10:00 p.m., shortly before or around the time Naomi said the group decided to tell police the truth about Sal’s alibi.

Pip goes to bed but wakes at 4:47 a.m. with an unresolved thought. She reopens Max’s photos and studies one image showing Naomi, Max, Millie, and Jake all in frame; because the camera is positioned several feet away, Pip realizes someone else must have taken it. The discovery raises a new question: who was present at Max’s house that night but absent from the official story?