Not much and I don't plan to do much.

It's easy to think "I have nothing to hide", but that's not what I mean. A better analogy is risk analysis/attack surface area you expect. The privacy requirements of someone doing investigative journalism are wildly different from a regular joe who only needs to worry about targeted ads.

I'm generally in that bucket, where my only real privacy concern is ads, and I'm ok with tailored ads... Especially since ad blockers remove over 95% of them anyway. And since I rarely buy stuff.

I take significant steps for security (yubikeys, password managers etc.), and mental health (regular social media breaks and such). But "privacy" is too vague a word without a risk assessment.