Privacy has more than one layer

Ask who you want less visibility from

Privacy is easier to reason about when the question is specific. Someone observing a local network has a different view from a website you sign into. A VPN provider is another participant in the route. Each relationship calls for a different question.

Write down the situation that concerns you. Then ask which information a VPN changes in that situation and which information remains visible through other means. This prevents a single feature name from standing in for a complete privacy plan.

An exit IP is not an account identity

Using a VPN exit can change the public IP address seen by a destination. A website can nevertheless recognize a signed-in account. Cookies and other browser state may also connect visits made at different times.

That distinction is useful even for ordinary browsing. If your goal is to reduce account-linked activity, examine when you sign in and what the service records rather than relying only on the VPN connection indicator.

Read policies as a set of questions

Identify the provider's statements about connection information, account data and payment information. These categories are not interchangeable. Notice the conditions, retention language and purposes attached to each one.

Where a provider publishes an assessment or audit, read its scope. A review of a particular system or period should not automatically be treated as a statement about every product feature or every later version.

Make the app settings part of the decision

Check which traffic the app routes through the VPN. A split-tunneling rule can deliberately leave selected traffic outside the tunnel. This can be useful, but it changes the assumptions behind a statement such as “my VPN is on.”

Learn how the app indicates its active state and what happens after a connection interruption. The relevant details live in the documentation for your device, not just the provider's general feature page.

Build a short privacy checklist

• The situation and relevant observer are clearly defined
• The VPN's role in that situation is understood
• Account identity and browser state are considered separately
• The provider policy and any assessment keep their context
• Routing exceptions and connection settings are reviewed

Return to the connection basics or use the buying checklist to investigate a plan.