Can Websites Track You When Using a VPN?

Fingerprinting. Cookies. Tracking. The Truth.

| Originally Posted: 19th of November 2025 |
By Ech the Tech Fox
Ech the Tech Fox, the guide's mascot.

Hey, Ech here. You've toggled the switch, the little lock icon is green, and you feel invisible. But are you really? In 2026, tracking technology has evolved far beyond just looking at your IP address. Advertisers and tech giants use sophisticated "fingerprinting" to recognise your device, even when you are behind a secure tunnel. Let's break down exactly what a VPN hides, and more importantly, what it leaves exposed.

Executive Summary: The 2026 Snapshot

If you want the quick answer before we dive deep, here is the current status of web tracking:

  • Can websites see your real IP? No. A quality VPN completely masks your location and ISP identity.
  • Can they still track "You"? Yes. Through cookies, browser fingerprinting, and account logins (e.g., Google/Facebook).
  • Does a VPN stop ads? Generally, no. Unless your VPN has a specific "Threat Protection" or ad-blocking feature enabled, trackers still load.

The Three Tiers of Tracking

To understand how you are tracked, you must distinguish between the three levels of data collection. A VPN only effectively stops Level 1.

LEVEL 1: NETWORK DATA
The Identifier: IP Address / ISP
The Method: Reading connection headers.
VPN Impact: BLOCKED. The website sees the VPN server's IP, not yours.
LEVEL 2: BROWSER DATA
The Identifier: Cookies / Fingerprint
The Method: Scripts running on your page.
VPN Impact: VISIBLE. A VPN cannot stop a script from reading your screen resolution or stored cookies.
LEVEL 3: ACCOUNT DATA
The Identifier: Logins (Google/FB)
The Method: User authentication.
VPN Impact: VISIBLE. If you log into Gmail, Google knows it is you, regardless of where your IP says you are.

Browser Fingerprinting: The Invisible Tracker

Even if you hide your IP address, your browser sends thousands of tiny pieces of information to every website you visit. When combined, these create a unique "fingerprint" that is specific to your device.

Visual representation of VPN tracking mechanics and browser fingerprinting

Websites collect data such as:

  • Screen Resolution: The exact dimensions of your monitor.
  • Installed Fonts: The specific list of fonts on your OS.
  • Battery Level: The API that reports your current charge.
  • Browser Version: The exact build number of Chrome or Safari.

The Result

By combining these data points, advertisers create a profile ID. Even if you switch VPN servers from London to New York, your "fingerprint" remains the same, allowing them to link the two sessions to the same user.

Cookies and Beacons

Cookies are small text files saved on your device. If you visit a shopping site without a VPN, they save a cookie ID. If you turn on your VPN and return to that site, the browser still sends that cookie.

The Fix: A VPN alone is not enough. You must use a private browser window (Incognito mode) or clear your cookies regularly to ensure true anonymity. For the best defence, combine a top-tier privacy VPN with a privacy-focused browser like Brave or Firefox.

The "Google" Factor

This is the most common mistake users make. If you are logged into your Google (or Facebook/Amazon) account, tracking is absolute.

When you are logged in, your activity is associated with your real identity, not just your IP address. Google may note that you are accessing your account from a different location (via the VPN), but they still attribute your search history and YouTube views to your personal profile.

The Ultimate Defence Checklist

To stop websites from tracking you completely, you need a layered approach:

  1. Use a VPN: To mask your IP address and encrypt traffic.
  2. Use Incognito Mode: To prevent cookie storage and history logging.
  3. Block WebRTC: Ensure your browser doesn't leak your real IP via WebRTC (most good VPN apps do this automatically).
  4. Log Out: Do not log into social media or Google accounts while browsing if you wish to remain anonymous.
  5. Use Anti-Fingerprinting Tools: Browsers like Brave randomize your fingerprint to confuse trackers.

Frequently Asked Questions

Can my ISP see what websites I visit with a VPN?

No. When you use a VPN, your ISP can only see that you are connected to a VPN server. They cannot see the individual websites, videos, or files you are accessing inside that encrypted tunnel.

Does a VPN stop Google Analytics?

Not by default. Google Analytics uses JavaScript cookies. A VPN hides your location from Google Analytics (it will look like traffic from the VPN server location), but it does not block the script itself. You need an ad-blocker for that.

Can the police track me through a VPN?

If you use a high-quality "No-Logs" VPN, it is extremely difficult. However, if you are logged into accounts linked to your real identity, authorities can request data from those specific websites (like Facebook) regardless of your VPN usage.

What is canvas fingerprinting?

This is a technique where a website forces your browser to draw a hidden image. Because every graphics card renders images slightly differently, the result acts like a unique serial number for your computer.