VPN and Tracking: What a VPN Can and Cannot Block

Your ISP cannot see which sites you visit, which apps you use, or the content of your traffic. The VPN encrypts everything before it reaches the ISP. They see only encrypted data to a VPN server.

Websites and ad networks use your IP address for geo-targeting, analytics, and tracking. With a VPN, they see the VPN server's IP instead. IP-based tracking attributes your activity to the VPN location, not your real location.

On public WiFi, other users cannot capture your traffic. Packet sniffing sees only encrypted VPN data. Evil twin and MitM attacks cannot read your traffic.

Websites store cookies and localStorage in your browser. These track you across sessions and sites regardless of your IP. A VPN does not block or delete them. Use browser privacy settings, private mode, or extensions to limit cookies.

Fingerprinting collects device and browser characteristics — screen size, fonts, plugins, canvas fingerprint — to create a unique identifier. It works without cookies and without your IP. A VPN does not prevent fingerprinting. Privacy-focused browsers (Brave, Firefox with resistFingerprinting) can reduce it.

When you log into Google, Facebook, or any service, they know who you are. Your IP is irrelevant — they track you by account. A VPN does not anonymize logged-in activity.

Third-party tracking scripts and pixels load on web pages. They run in your browser and can track you regardless of VPN. Ad blockers and privacy extensions block these.

VPN encrypts your path and hides your IP. Use it on all networks — home, public, mobile. It is the foundation for network-level privacy.

Block third-party cookies. Enable DNS over HTTPS. Use privacy-focused browsers (Firefox, Brave) or hardened Chrome. Consider private/incognito mode for sensitive browsing.

uBlock Origin blocks ads and many trackers. Privacy Badger learns to block invisible trackers. Privacy-focused extensions complement VPN by addressing what VPN cannot.

VPN hides your IP. It does not hide your identity from services you log into, cookies, or fingerprinting. For true anonymity, you need Tor, disposable identities, and strict operational security — not just a VPN.

Some VPNs offer "ad blocking" as a DNS-level feature. That is separate from the VPN tunnel. Standard VPN does not block ads. Use an ad blocker for that.

When you use Facebook, Instagram, or similar, they track you by account and device. VPN does not prevent this. They can still build a profile of your activity.

If your DNS queries go outside the VPN tunnel, your ISP or the DNS provider can see which domains you visit. A quality VPN routes DNS through the tunnel and uses the VPN provider's DNS. Test for leaks at ipleak.net.

Some VPNs offer DNS-level ad and tracker blocking. This is a separate feature from the VPN tunnel — it blocks requests to known tracker domains at the DNS layer. It complements but does not replace browser-level blocking.

Always on. Encrypts your path, hides your IP from your ISP and from websites. The foundation.

Privacy-focused browser (Firefox, Brave) or hardened Chrome. Block third-party cookies. Enable strict tracking protection.

uBlock Origin for ads and trackers. Consider Privacy Badger. Do not over-extend — too many extensions can conflict or slow the browser.

Avoid logging into sites when you do not need to. Use separate browsers or profiles for different activities. Clear cookies periodically.

Mobile apps use SDKs (Facebook SDK, Google Analytics, etc.) for tracking. VPN encrypts the network traffic but does not block the SDK from sending data. The app still knows your device and can correlate with your account.

iOS App Tracking Transparency and Android's advertising ID limit cross-app tracking. VPN does not affect these. They operate at the OS level. Use both: limit app tracking in OS settings and use VPN for network privacy.

When you log into the same service on multiple devices, they link your activity. VPN hides your IP on each device but does not break the account link. Use separate accounts or avoid logging in when possible to reduce cross-device profiling.

VPN prevents IP-based correlation across devices. Without VPN, the same IP could link your phone and laptop. With VPN, each device may use a different VPN IP (or the same if you choose). VPN adds a layer but does not eliminate cross-device tracking.

Visit ipleak.net or similar. Check that your DNS shows the VPN provider's DNS, not your ISP. If DNS leaks, your ISP can see which domains you visit.

WebRTC can expose your real IP even with VPN. Test at ipleak.net. If your real IP appears, disable WebRTC in your browser or use a browser that blocks it.

Sites like browserleaks.com and fingerprint test pages show what your browser reveals. VPN does not change fingerprinting. Use a privacy-focused browser to reduce uniqueness.

Marketing emails often include invisible pixels that load when you open the message. The pixel request reveals your IP and when you opened the email. A VPN hides your real IP — the tracker sees the VPN server's IP instead. Your email provider (Gmail, Outlook) still knows you opened the email; the sender sees a different IP.

Click tracking uses redirect URLs. When you click, the redirect server logs your IP and click time before sending you to the destination. VPN hides your real IP. For maximum protection, use an email client that blocks remote images and strips tracking links.

Webmail (Gmail in browser) uses the browser's connection — VPN covers it. Desktop email clients (Outlook, Thunderbird) use the system connection — VPN covers them too. Mobile email apps use the device connection. Connect VPN before opening email on any device.

When you are logged into Facebook, Instagram, or Twitter, they track you by account. Your IP is secondary. VPN hides your IP from the platform, but they still know who you are. They can correlate your activity across sessions. VPN does not anonymize logged-in social media use.

Social posts often embed content from other domains. Those domains can track you via cookies and pixels. VPN hides your IP from them. Use an ad blocker to block tracking scripts. The combination reduces what third parties learn.

"Login with Facebook" or "Login with Google" links your identity across sites. VPN does not break that link. To reduce cross-site tracking, avoid social login when possible. Use separate accounts. VPN still protects your network path.

Most apps include analytics (Firebase, Mixpanel, Amplitude, etc.). These SDKs send events — app opens, button clicks, screen views — to the developer. VPN encrypts the network request but does not block it. The developer still receives the data; they see the VPN IP, not your real IP.

Crash reports often include device info and sometimes location. VPN hides your IP from the crash reporting service. The report may still include device ID, OS version, and app state. VPN adds a layer but does not eliminate all identifiable data.

Use iOS App Tracking Transparency and Android's advertising ID controls to limit cross-app tracking. VPN protects the network path. The two work together: OS controls what apps can track, VPN protects what is sent over the network.

When you search, the engine logs your query, timestamp, and IP. A VPN replaces your real IP with the VPN server's IP. The engine still logs your query and can correlate it with your account if you are logged in. For logged-out search, VPN reduces the accuracy of IP-based profiling. Use a privacy-focused search engine (DuckDuckGo, Startpage) for additional protection.

Search engines track which results you click. That data builds a profile. VPN hides your IP from the engine, but cookies and account login still identify you. Combine VPN with private browsing or a search engine that does not store personal data.

If you are logged into a search account, your history is tied to that account regardless of IP. VPN does not break that link. For maximum search privacy, use VPN plus a search engine that does not log, and avoid logging in when you do not need to.

Smart speakers, thermostats, and cameras connect to manufacturer servers. A router-level VPN encrypts that traffic so your ISP cannot see which devices are communicating or where. The manufacturer still receives the data; VPN protects the path. For devices that phone home frequently, that reduces ISP visibility into your home activity.

Some IoT devices communicate only on your local network. Others send data to the cloud. VPN affects cloud-bound traffic when it passes through your router. Local traffic between devices on your network may not go through the VPN depending on your split tunneling setup.

VPN cannot stop the manufacturer from collecting data. It can stop your ISP from observing that collection. For devices you must use, VPN adds a layer. For maximum privacy, choose devices with local-only modes or minimal cloud dependency when possible.

Websites and apps can get location from your IP (approximate) or from GPS/WiFi (precise). VPN changes your IP-based location to the VPN server's location. It does not affect GPS or WiFi triangulation. Apps that request location permission can still get your real location. VPN helps when a service infers location from IP only.

Some services use IP for geofencing — restricting access by region. A VPN can change your apparent region. That is useful for accessing region-locked content. It does not prevent precise location tracking when the app has location permission.

Google, Apple, and others maintain location history when enabled. VPN does not affect this. Location history is tied to your account and device sensors. To limit it, disable location services or use account settings to pause history. VPN and location controls address different tracking vectors.

Apps and services can infer location from WiFi network names and access point data. VPN does not hide which WiFi network you use — that is visible at the local level. For location privacy, combine VPN with disabling WiFi scanning when not needed and limiting which apps have location permission.

A few VPN providers block known tracker and ad domains at the DNS layer. When your device requests a blocked domain, the VPN's DNS returns no result. That blocks some tracking before it reaches your browser. It does not replace browser-level ad blockers — many trackers use first-party domains.

VPN DNS blocking and uBlock Origin address different layers. DNS blocking stops requests before they leave your device. uBlock Origin blocks at the browser level and can handle more sophisticated cases. Use both for maximum tracker reduction. VPN for network privacy, uBlock for browser-level blocking.

Aggressive tracker blocking can break some websites. If a site fails to load with VPN blocking enabled, try disabling it or adding an exception. Balance privacy with usability. Most users find that uBlock Origin with default lists works without breaking sites.

Periodically review your setup. Is your VPN connected? Are third-party cookies blocked? Is WebRTC disabled? Run leak tests. Update your browser and extensions. Privacy tools evolve; your stack should too. A yearly review catches drift and keeps your protection current.

Private or incognito mode prevents the browser from storing cookies, history, and form data for that session. When you close the window, the session data is discarded. It does not hide your IP or encrypt your traffic. Your ISP and the websites you visit still see your real IP. Private mode is useful for avoiding cookie persistence and local history; it is not a substitute for VPN. Extensions may or may not work in private mode depending on browser settings — check whether your ad blocker or privacy extension is active in private windows.

Connect your VPN first, then open a private window. You get IP masking and encryption from the VPN, plus no local cookie or history storage from private mode. The combination is stronger than either alone. Some users use this for sensitive browsing: banking, health research, or anything they do not want in their normal history. The VPN protects the network path; private mode protects local state. Bookmark this workflow if you use it often — the extra step of opening a private window after connecting VPN is worth it for high-sensitivity sessions.

Use VPN plus private mode when you want maximum separation from your normal browsing. Shared computers, sensitive research, or one-off tasks benefit. For everyday browsing, VPN alone is usually sufficient. Private mode adds overhead — you lose saved logins and session persistence. Reserve the combination for when you need it. Do not assume private mode alone provides any network-level protection; it does not. On shared or public computers, the combination is especially valuable: VPN encrypts the path, private mode prevents the next user from seeing your history or cookies.