I'm planning to develop and operate a web service that might agitate a certain authoritarian government (not in G20, not known for its good human-rights record).
I'd like to prevent any kind of leak of my personal information. However, since the target audience of my web service will be regular citizens of this authoritarian government running an onion service is not practical. (Also, it will just be a Reddit-like entertainment website with a political twist, meant for mainstream consumption. Tor is a no-no.) Because of this, I will use public cloud providers and public domain registrars. I will be paying for these services using my personal credit card.
What kind of precautions should I take to prevent revealing my identity while managing a web service running on a popular cloud provider and registered on a popular domain registrar?
I'm only aware of the WHOIS protocol. Are there any other technical or legal "loopholes" the aforementioned government can exploit to access my identity? The consequences of such a leak will be serious for me, people close to me, and everyone else that will be involved in this project.