I've already retorted to Vitor's post but the stupid shit poster I am it's buried deep down, somewhere I can't find. A simple VPN can go a long way. Yes relays can track your metadata and can correlate it with your npub, but your npub doesn't need to have any information about you in the first place. For example I challenge any relay operator to find out who created any of the forms in the

Formstr

A decentralized forms application which lets you custody your own data made possible through the power of the nostr protocol.

global section. It is not possible. Claiming nostr isn't private is stupid. You are responsible for any data you give out, which is what privacy is about.