Can a VPN see your history?
Traffic that enters a VPN must be decrypted at the provider before it goes to the internet—so the operator is in a position to see a great deal unless they deliberately minimize data.
Physics of the exit
Your tunnel ends at the VPN server. For the server to forward packets, it handles inner destinations. A provider *could* log every host, timestamp, and byte count. Whether they *do* is a policy and engineering choice—not a law of cryptography.
What “no logs” should mean
Clear products define:
- What is stored (account billing, aggregate bandwidth, nothing about destinations…)
- Retention periods
- How DNS is handled
Vague “we take privacy seriously” is not a control. See VPN logging explained.
Upstream DNS
If the VPN forwards DNS to third parties (common), those resolvers see hostnames for lookups they answer—even when the VPN itself avoids query logs. VeritasVPN documents this tradeoff in privacy materials and Veritas Shield explainers.
Trust but verify
- Prefer source-available clients and honest jurisdiction statements
- Prefer payments that reduce identity linkage when that matters to you
- Remember accounts, browsers, and apps create history outside the VPN
A VPN moves trust; it does not eliminate it.