In the last week:
I started using Syncthing. I was using cloud storage as a way of copying files from one device to another. Syncthing is so much better.
I signed up with Mullvad VPN yesterday.
Deleted my Surfshark account today which I signed up with over two years ago when I didn’t care about privacy.
Finally convinced my sister to start using Signal.
I would assume IP address, browser fingerprint, and handle if you reuse it are all being tracked between sessions, even assuming no tracking cookies.
Obviously some of these are more trackable than others, but there’s the risk of re-establishing identity between sessions-- say if your user-agent resets when you close your browser, but you sign in to a site that keeps track of you and shares it.
I’m very lax about opsec places like here or Reddit, my username is enough for you to find my city without much effort, and almost certainly find me in person with significant effort, and is certainly an easy start for trying to find me elsewhere online. My main defense there is that my password is different across every site, but many people aren’t even that careful, and that’s like the barest level of careful