@davecb @404mediaco other than that I guess you use the Tor Browser (and not just a standard browser routed over Tor) on a somewhat save OS (no Windows, macOS, Android etc but something like Linux/GrapheneOS)?

@davecb @404mediaco E-Mail content and metadata would be the most obvious way. If you ever used this account for anything that could be linked somehow to your identity they could easily deanonymize you. And otherwise it depends on who wants to get your PII and how many resources do they have. If they have enough ressources they can deanonymize everybody and tor will not help you. But for most people that should be fine I think.