but how? just hosting them on an aws bucket? bad for privacy, no?

you basically send a note (with event kind 0) to the world that says “this is my name”. others can have the same name though, so it’s still your public key that identifies you