What your ISP can see (and what it does with it)

Every byte you send to the internet passes through your internet provider first. That position — right at the front door — gives them a view of your online life that most people never think about. It’s worth thinking about, because in a lot of countries what they can see, they’re also allowed to sell.

What they can definitely see

Your ISP sees every website you connect to. Even though modern encryption hides the contents of the pages, the address of each site is visible through your DNS lookups and connection metadata. They can see when you’re online, how long for, and roughly how much data each activity uses — which is often enough to guess what you’re doing.

They also know exactly who you are. Your account is tied to your name, address and payment details, so this isn’t anonymous data — it’s a browsing history with your name on it.

What they can’t see

Thanks to HTTPS, they generally can’t read the actual content of encrypted pages — the specific article you read, the message you typed, your password. They see that you visited a site, not everything you did once you were there. That’s an important limit, but notice how much is left over: the pattern of where you go and when is revealing all on its own.

What they do with it

This varies by country, and it’s not always comforting. In many places providers are permitted to sell anonymised — and sometimes not-so-anonymised — browsing data to advertisers and data brokers. They may be legally required to retain your history for months or years and hand it over on request. And some use it internally to shape your traffic, which is where throttling comes from.

How to take the view away

A VPN removes your ISP from the picture. With the tunnel up, all they see is a single encrypted connection to one server — not which sites you visit, not your DNS lookups, none of the pattern. The record with your name on it becomes a record that you connected to a VPN, and nothing more.

That shifts trust to the VPN provider, which is why a real no-logs policy matters — you want somewhere that keeps no record to sell in the first place. You can see what your connection currently reveals with our Privacy Check.