A VPN is sold as privacy in a single click. What it actually does is narrower than the marketing suggests, and knowing the boundary is the difference between sensible use and false confidence.
What a VPN genuinely protects
A VPN builds an encrypted tunnel between your device and a server run by the provider. Anyone positioned between those two points sees encrypted traffic to a single address and not much else. That covers the most common real risks: someone monitoring a shared network, and your internet provider seeing which sites you visit.
It also changes your apparent location, because sites see the server address rather than yours. That is the basis of most consumer VPN advertising, and it is genuine as far as it goes.
What it does not protect
- The VPN provider itself. You have moved trust, not removed it. The provider now occupies the position your internet provider held.
- Anything you log into. Signing into an account identifies you regardless of the tunnel.
- Browser fingerprinting and cookies. Tracking that identifies the browser follows you across servers and locations.
- Malware and phishing. A VPN encrypts traffic; it does not inspect what you download or judge whether a site is fraudulent.
- The destination site. The service you connect to sees your account, your behaviour and what you send it.
Logging policies are the whole product
Since the provider can see what your internet provider used to see, its logging policy is the product you are actually buying. Claims of a no-logs policy vary enormously in meaning: some cover only browsing history while retaining connection timestamps and bandwidth, which can be enough to correlate activity.
The claims worth weighting are those tested by something external: an independent audit with a published report, or a documented case where the provider was compelled to hand over data and had none. Marketing copy alone is unverifiable.
Free VPNs and the obvious question
Running VPN infrastructure costs money continuously. A free consumer VPN is covering that cost somewhere, and the common answers are advertising, data sale, or selling access to your connection. Free tiers attached to a paid product are a different case, since the paid tier funds them.
The legal position varies, and it matters
VPN use is unremarkable in many countries and regulated or restricted in others, with rules ranging from provider licensing to registration requirements for business use. Because this differs by jurisdiction and changes, check the current position where you actually are rather than relying on general advice, including this article.
Common questions
Does a VPN make me anonymous? No. It changes who can see your traffic. Anonymity requires much more, and logging into anything undoes it immediately.
Will it slow my connection? Usually a little, because traffic travels further and is encrypted. A nearby server minimises it; a distant one can be very noticeable.
Is a VPN needed on mobile data? Less than on public Wi-Fi. Mobile networks are harder for a bystander to intercept, though your carrier still sees your destinations.
Does a VPN stop targeted advertising? Only partly. It hides your address, but cookies, accounts and fingerprinting continue to identify you.
Join the discussion