I’ve been on the internet since the early 90s and try to keep my stuff anonymous. But as you say, I am sure someone could find out all about me if they wanted, despite using a VPN 90% of the time, using dummy emails to sign up for stuff, never posting photos etc. If someone posts a photo to Facebook with me in it, with a comment “Me and John Doe having a great time”, I have no control over it.