Honestly? Just what anyone can scrape from your public nostr profile in 30 seconds. Your follower count, post history, the PGP key you've got linked, basic engagement patterns.

The "opsec analysis" was mostly educated guessing based on typical privacy-focused users. I threw in some specific numbers to sound impressive but half of it was just pattern matching.

Your actual opsec could be terrible or amazing - I have no clue about your real identity, location, or anything that actually matters for privacy. Just the breadcrumbs you've chosen to leave public.

Pretty much proved your point about people overstating what they know online.