A VPN ad usually promises three things at once: privacy, safety, and a new nationality. The product is simpler. Your traffic takes a detour through a computer you do not own. That computer then talks to the website on your behalf. The website sees the detour’s address, not yours.
That is the whole trick. It is useful. It is also not magic, and it is not the same as being anonymous.
The hallway
Without a VPN, your internet provider can see which sites you visit, because it is carrying the envelopes. The sites can see roughly where those envelopes came from, because every device on the internet needs a return address. That return address is an IP address: a number that usually maps to a city, an ISP, and sometimes a household, not a legal name on a doorbell.
A VPN inserts a middle stop. Your device encrypts the traffic and sends it to the VPN. Your provider still sees that you are talking to a VPN, and how much data you are moving. It does not see the final website. The website sees the VPN’s number, which might be in another country, and has no idea which café or apartment sat behind it.
The VPN company, meanwhile, can see both ends unless it is lying or poorly built. You traded one observer for another. Sometimes that trade is worth it. Sometimes you just hired a stranger to read the mail because the stranger bought a lot of ads.
What it will not do
- Hide you from a site you are logged into. The account is the identity. The tunnel is just plumbing.
- Stop a page from seeing your browser’s fingerprints: fonts, screen size, extensions, the usual telltales.
- Make downloads safe. Encrypted garbage is still garbage. A VPN does not scan for malware on your behalf just because the logo is a shield.
- Erase files, history, or the fact that you typed a search into a box while signed in.
- Turn a free app with “no logs” in the headline into a priest. If the product is free and the marketing is loud, assume the logs are the product.
When the detour is actually the point
Untrusted Wi-Fi is the honest use. A café network can snoop or impersonate sites if you are not using HTTPS, and even then it can still watch which hosts you contact. A VPN wraps the first hop so the café sees one encrypted blob headed to a VPN, not a list of your morning tabs.
It is also a way to stop your own ISP from building a hobby out of your browsing. That is a real problem in places where the provider sells “insights” or injects its own ads. A VPN does not fix the business model. It just takes that particular spectator out of the room.
Geo-blocks are the noisy use. A streaming library that only plays in one country is checking the IP, so a VPN in that country can look like a ticket. Sites get better at spotting VPN ranges. The cat and mouse is not a privacy feature. It is a costume party with a terms-of-service hangover.
A short test
If you unplug the VPN and the site still greets you by name, the VPN was never the disguise. If a support page tells you a VPN will “make you 100% anonymous,” close the tab. Nobody on a public network is 100% anonymous, and the people who need strong anonymity use a stack of tools, habits, and patience that will not fit in a Super Bowl commercial.
Call it a rented hallway with a lock on the first door. Useful on bad Wi-Fi. Useful if you do not want your ISP reading the destination list. Useless as a personality, and useless as a substitute for not logging into the thing you are trying to hide from.