Monero isn’t private ?

it’s private, but a bad usage can lead to being deanonymized.

Ok then what i should do ?

You mean what you should not ?

  • Do no KYC related to cryptocurrency: if you can avoid it then you’re not recorded as a monero user (simple as this).
  • Do no CEX -> CEX XMR swaps: you have (for the minimum) to split the amount and churn funds or RingSignatures wont help you.
  • Do not reuse an address: always generate a new-subaddress when it’s a private payment (like it’s not a donation address).
  • Do not consolidate UTXOs: spend them one-by-one.
  • Don’t broadcast transactions to a remote-node without Tor or I2P.
What you should do: