The Normal Connection: What Your ISP Sees
When you open a website without a VPN, your device sends a DNS query to translate the domain name into an IP address. Your ISP handles this query and logs the destination. It also sees the IP address of every server you contact and the size of each data packet.
Because most sites now use HTTPS, the ISP cannot read the content of your messages, passwords, or bank details. However, it can still see the domain names you visit, how long you stay, and how much data you transfer. This information alone can reveal your interests, work habits, and travel plans.
On public Wi-Fi, anyone on the same network could try to intercept your traffic. HTTPS prevents them from reading the content, but they can still see which domains you access. A VPN adds an extra layer by encrypting the entire connection before it leaves your device, making it harder for others on the network to see where you are going.
In short, the ISP is the main observer of your online activity without a VPN. It acts as the gateway and can see everything except the encrypted content inside HTTPS pages.
What the VPN Operator Can Observe
When you switch on a VPN, your device creates an encrypted tunnel to the VPN server. This tunnel wraps your DNS queries and all your traffic inside it. The ISP can no longer see the destination domains or the content of your data.
The VPN operator, however, can see the IP address of the VPN server you are connected to, the time and duration of your session, and the amount of data transferred. Because the tunnel terminates at the VPN server, the operator can also see the IP address of every website you visit after the traffic leaves the tunnel on its way to the destination.
It is important to understand that the VPN operator is technically able to see which sites you visit, even though it cannot read the encrypted content inside HTTPS. Some providers claim a no-logs policy, but this is a business promise, not a technical guarantee. The operator's infrastructure could still be compelled to log data, or it could be affected by a misconfiguration.
For this reason, choosing a VPN is an act of trust. You are moving the ability to see your destination domains from your ISP to the VPN company. No provider can offer absolute anonymity or a guarantee that its systems will never be compromised.
The Website's View: Server IP and Encrypted Content
When your traffic reaches the destination website, it appears to come from the VPN server's IP address, not your home or mobile IP. This is why a VPN can help you access content that is geo-restricted to a specific country. For example, if you connect to a VPN server in the United Kingdom, a streaming site will see a UK IP address and may show the UK catalogue.
The website sees your encrypted HTTPS request, the headers, and the cookies your browser sends. It does not know your real location or your home IP. However, it can still identify you through login credentials, browser fingerprints, or tracking cookies. A VPN does not prevent the website from recognising you if you sign in or if it uses advanced tracking methods.
Also, the VPN does not affect the content of the HTTPS encryption. The website and your browser still negotiate their own secure session. The VPN tunnel adds a second layer of encryption, but the website sees the same HTTPS handshake it always sees, just from a different IP address.
In practice, the website's view changes only in the source IP. The content you send remains protected by HTTPS, and your identity may still be traceable through other means.
What a VPN Cannot Do for Travellers
Many travellers assume a VPN makes them invisible or allows unrestricted access to any service. The reality is more limited.
A VPN cannot bypass every form of blocking. Some websites actively block known VPN IP ranges. Streaming services regularly update their lists of VPN server IPs and refuse access. No VPN can guarantee access to a particular catalogue, because these services change their blocking rules frequently.
A VPN does not make you anonymous. Your browsing activity can still be linked to you through cookies, device fingerprints, or payment information. If you log into a social media account while the VPN is on, that site can still identify you.
A VPN cannot guarantee a faster connection. Routing your traffic through an extra server often adds latency. While some VPNs may improve speeds on throttled connections, performance depends on many factors including server load, distance, and your home internet quality.
Finally, a VPN does not protect you from malware, phishing, or scams. It only changes the path your data takes. Safe browsing habits and up-to-date software are still essential.
