IPs are not attached to your notes directly, but relay operators can if they want, see the ip from which the note is being made. Or what ip a user uses, so a VPN would be recommended if you care a lot about being a nym.

Before uploading a picture make sure you remove all the exif data, some services might do it for you, also make sure not to dox yourself in your images.

There was a whole internet guide someone shared on being a nym. But that’s not only for nostr, it’s for the internet in general. I’ll see if I can find it.