What does a VPN do?
A VPN establishes a protected connection between your device and a VPN endpoint. It can provide access to internal networks or the internet. With a fully routed internet VPN, destinations normally see the provider's exit address. Split tunneling can deliberately exclude particular applications or destinations.
Where does protection end?
Tunnel encryption ends at the VPN server. HTTPS separately protects web content on its way to the website. The VPN provider can see connection metadata, so its trustworthiness and operation matter. A VPN does not make you anonymous: accounts, cookies and browser characteristics can still identify you.
DNS, IPv6 and disconnects
Check which DNS and IPv6 connections the VPN covers. Depending on configuration, a kill switch can prevent unintended direct connections after a disconnect. A different DNS provider or a second IP address alone does not prove a leak. Browser and system settings can use different paths.
Interpret VPN tests carefully
Compare public IPv4, IPv6 and browser tests before and after connecting. DNS leak tests require actual DNS observations; WebRTC tests show available connection candidates. Our server-side ping remains a measurement from the server in Düsseldorf even when you use a VPN. Paying for a service does not automatically guarantee better privacy than a free service.