Encrypt the connection leaving your device

It changes who can observe you, not whether you can be identified

Encryption on the modern web already hides the contents of your connections from the network. What remains visible is the destinations - which services, when, and roughly how much data. A VPN removes that visibility from the local network by giving it a single encrypted stream to one server.

The trade is worth understanding: visibility moves from the café, hotel or operator to the VPN provider. That makes the provider's retention and access policies the thing to read, which is why we describe ours in specifics rather than as a slogan.

When it is genuinely useful

On networks you did not set up and cannot vouch for; when you would rather a network operator not build a picture of which services you use; and when a network interferes with connections or presents portals you have reason to distrust.

It is not required for basic protection of encrypted sites, and it is not a substitute for browser protection or a device scanner. Presenting it as one is how people end up feeling protected in exactly the situations where they are not.

• Useful: untrusted networks, destination privacy, hostile network behaviour.
• Not a fix for: page-level tracking, signed-in identification, malicious downloads.

One control, stated plainly

The interface says whether the tunnel is on and which location is in use, without an ambiguous shield. Where a connection drops, the behaviour is described rather than implied, because a VPN whose state you cannot verify provides confidence rather than protection.