Privacy
No account is not the same as no identifier
An upload without an account still arrives from an IP address at a time, and that pair narrows a person down more than most people assume.
Skipping the sign-up form feels like the private option, and in one narrow sense it is: there is no account row linking your name to your uploads. But a server does not need an account to know something about who sent a request. Every connection arrives from an IP address, and most services log it by default, as a normal part of how web servers operate rather than anything specific to that site.
What an IP address actually tells a server
On its own, an IP address is closer to a household or a mobile carrier than to a person. A home connection usually maps to one address or a small rotating set assigned by an internet provider, and a mobile connection maps to a much larger shared pool that changes as you move between cell towers. Neither is a name. But combined with a timestamp, an IP address becomes a fact a provider can, if compelled, match back to a subscriber - which is the same mechanism that makes IP logs useful in unrelated contexts like fraud investigation or abuse reports.
For a site handling intimate photographs, the relevant question is not whether the IP alone identifies you. It is whether the pairing of IP, timestamp and the fact of a specific upload could be reconstructed later, by the service itself, by a legal request, or by a breach. What server logs actually record covers the wider set of fields that sit alongside the IP in a typical log line, and the IP is rarely the only thing written down.
Why a VPN changes less than it seems to
A VPN routes your connection through a different exit address, so the server sees the VPN provider's IP instead of yours. That is a real change, and it does break the direct IP-to-ISP-subscriber chain for the service you are visiting. It does nothing for anything else that identifies a session: an account email, a payment method, a device fingerprint, or a cookie set before the VPN was turned on. A VPN hides your IP from the tool and not much else is worth reading in full if IP address is the concern that brought you here, because the other channels are usually the ones that actually matter.
IPv6 changes the arithmetic
Most of the reasoning above assumes IPv4, where address scarcity forces providers to share addresses across many customers through carrier-grade translation, which is exactly what makes a bare IPv4 address closer to a household than a person. IPv6 removes that scarcity: a residential IPv6 connection is typically assigned a large, dedicated block, and depending on how a provider allocates it, a single device can end up with an address that is far more specific to that one connection than an IPv4 address ever was. Whether an IPv6 address is more or less identifying than IPv4 in a given case genuinely depends on how the provider assigns and rotates addresses within that block, which varies enough between providers that no single rule of thumb covers all of them, and it is not something an uploader can check without knowing their own connection's allocation policy.
What a careful service does differently
A service that takes this seriously logs IP addresses for a short, stated retention window tied to abuse prevention, rather than indefinitely, and says so. It separates the log line from the upload record rather than storing them together as a bundle keyed to the same request ID forever. Neither of those is something you can verify from outside without reading the policy closely, and most policies do not go into this level of detail unprompted.
Device fingerprinting works even when the IP and cookies are both cleared, which is the next layer worth understanding if IP logging was the layer you thought covered everything. Rate Cock states its logging and retention practices in its policy, and reading that document against this list is a better test than assuming "anonymous" upload means untraceable. Method-based tools carry a comparable question about what gets logged during a session; Measure My Cock's data page is where that tool addresses it. For the tool-comparison angle rather than the mechanism, Penis Rater's write-up on evaluating a scoring tool covers what to check before trusting any given service's claims. A commissioned human review sidesteps IP logging as a concern in a different way, since the reviewer on Rate Penis is a named arrangement from the start rather than something logged quietly in the background.