There’s a few ways I could think of to connect these things together
Perfect VPN opsec is actually pretty hard to achieve, if you ever used the account when VPN wasn’t working they could get your local IP. Could be ipv6 wasn’t going through VPN, VPN wasn’t turned back on after a shutdown, VPN leaked IP, etc.
Reddit likely has a unique browser fingerprint for you, if you used the same device to access two different accounts one on VPN and one off VPN they could still tie them together with a matching unique fingerprint across both accounts.
If your buddy was using one of your devices same thing as above.
With perfect VPN usage and perfect opsec and complete separation of devices and accounts it is very unlikely they would have been able to correlate this activity.
There’s a few ways I could think of to connect these things together
With perfect VPN usage and perfect opsec and complete separation of devices and accounts it is very unlikely they would have been able to correlate this activity.