What Does Your ISP See? Your Browsing Visibility Explained

Every byte you send and receive passes through your internet service provider. They assigned your IP address, they carry your traffic, and in many countries they're legally required to keep records. So what exactly can they see?

What your ISP sees on an HTTPS site (most of the web)

Thanks to near-universal HTTPS encryption, your ISP cannot read page contents, messages, passwords or exactly which article you're reading. But they still see:

• Every domain you visit — via DNS lookups and connection metadata (e.g. that you visited a medical site, a dating app, a jobs board)
• When and how often — timestamps of every connection
• How much data — enough to infer streaming vs browsing vs downloading
• Your devices' patterns — when you're home, when you sleep

Domains alone paint a remarkably complete picture. A visit history of clinics, lawyers, or lenders tells a story even with the content invisible.

What they see on unencrypted sites

On plain HTTP (increasingly rare), everything is visible: full page contents, forms, and anything you type. Modern browsers mark these "Not Secure" for good reason.

What ISPs do with it

• Retention — many jurisdictions mandate storing connection records for months to years, available to authorities on request.
• Advertising — in some countries ISPs may monetise browsing patterns unless you opt out.
• Traffic management — identifying video or torrent traffic to throttle it.
• Copyright enforcement — matching infringement notices to subscriber accounts via IP records.

How to limit what your ISP sees

1. Use a VPN. The single biggest change: your ISP sees one encrypted stream to a VPN server and nothing else — no domains, no destinations. The visibility shifts to the VPN provider, so pick a audited no-logs one.
2. Use encrypted DNS (DNS-over-HTTPS). Without a VPN, this at least hides your lookups from casual logging — see how DNS works.
3. Prefer HTTPS everywhere. Modern browsers do this by default.

Remember: incognito mode changes none of this — it's purely local to your device.

Frequently asked questions