Your IP is recorded and tracked at every website that uses google tag manager for example, and thar is almost all websites. Your IP is sold and resold hundreds of times by Google and the hundreds or thousands of data aggregators. They build detailed profiles of everybody, and it's on the market. It's not just nostr, everyone needs a full time VPN and ad blocking, period, as a bare minimum.