The default assumption anyone should make is that whatever they do online is completely public. Don’t ever assume you have privacy, because you probably don’t. Then take necessary steps to try and hide/obfuscate whatever info you wish wasn’t public. VPN is a good start. And if it absolutely needs to be private, then don’t do it online.