Free Tool
Who Sees What? Packet Journey
When you visit a website, your request passes several pairs of eyes: the Wi-Fi owner, your internet provider, maybe a VPN provider, and the website itself. Toggle HTTPS, a VPN and Tor below to see what each of them can observe — and what stays hidden — for each kind of connection.
Educational diagram, not legal advice. What an observer can legally do with what they see depends on your country and its laws, which differ widely. This tool shows the technical visibility; the guide linked below splits the legal picture by jurisdiction.
What this tool does
Most people imagine the internet as a private line between them and a website. It is not. Your request travels through equipment owned by other people — the Wi-Fi network you are on, your internet provider's network, and any VPN or Tor relays in between — and each of those operators can see something. What they see depends on how the connection is protected, and the differences are large: without encryption, an observer can read the contents of your request; with HTTPS, they can see which site you visit but not what you do there; with a VPN, your provider sees the VPN instead of the site.
This tool makes that visible. It follows one web request — you opening a news article — through four observers: the Wi-Fi owner, your internet provider, the VPN provider (when one is used) and the website itself. Three toggles change the connection: HTTPS on or off, a VPN on or off, and Tor on or off. Each combination produces a different table of who sees what, and the tool explains the change in plain English so you can see exactly what each protection buys you.
The point is not to frighten you but to make the trade-offs concrete. A VPN does not make you anonymous — it moves trust from your internet provider to the VPN provider. Tor hides more, but your provider can still see that you use Tor. And HTTPS, which is on by default on most sites today, is the single protection that matters most for everyday browsing, because it hides the content of your requests from everyone in the middle.
Try it
Change the toggles to see how each protection changes what observers can see.
Current view: press the button to see the observer table for the toggles above.
How it works
The tool works from a simple model of a web request. Your browser sends a request that contains the site's name, the page you asked for, and any data you submit. Without encryption, every observer between you and the site can read all of it. HTTPS encrypts the request between your browser and the site, so observers in the middle can see that you connected to a site — they need the name to route the traffic — but not which page you opened or what you typed. That is why HTTPS is the baseline of web privacy today.
A VPN adds another hop: your traffic is encrypted to the VPN provider first, and the provider then forwards it to the site. Your internet provider now sees only the VPN — not the site — but the VPN provider itself sees what your provider used to see, including the site names you visit. Trust has moved, not disappeared, which is why the choice of VPN provider matters and why a free VPN that logs and sells your browsing is worse than no VPN at all.
Tor goes further by splitting the journey across three relays, so no single relay knows both who you are and where you are going, as the Tor circuit visualizer on this site shows. But even Tor does not hide everything: your internet provider can see that you connect to Tor, and the exit relay can see the site and any unencrypted content. Combining a VPN and Tor does not automatically make you safer — it changes which operators can see which parts, and the honest answer is that each combination has its own trade-offs, which this tool lays out rather than hiding.
Limitations
This tool is a simplified model for teaching, not a complete picture of internet surveillance. It covers four observers and three protections; real networks have more observers (advertising networks, content delivery networks, the site's own analytics) and more protections (DNS encryption, private browsing modes that only affect your own device). It also describes technical visibility only — whether an observer is legally allowed to look, log or share what it sees depends on the laws of your country, and this page is not legal advice.
- Browser fingerprinting and tracking cookies can identify you even when your connection is encrypted; this tool covers what observers see in transit, not what the site learns from cookies and scripts.
- Logging into an account identifies you to the site regardless of the connection type.
- The tool assumes a correctly configured connection. A VPN that leaks, a misconfigured Tor setup or a site that loads unencrypted content can expose more than the table shows.
Examples
Example 1 — plain HTTP, no protection. You visit a site that does not use HTTPS, with no VPN and no Tor. The Wi-Fi owner and your internet provider can see the site, the exact page and anything you type into a form. The website sees your IP address and the contents of your request. Everything is visible to everyone in the middle.
Example 2 — HTTPS only. You visit the same site over HTTPS. The Wi-Fi owner and your provider can see that you visited the site and how much data you exchanged, but not which article you read or what you typed. The website still sees your IP address and the page you requested. The content is protected; the destination is not.
Example 3 — HTTPS plus a VPN. Your provider now sees only the VPN server — not the site at all. The VPN provider sees the site name, because it forwards your request, and the website sees the VPN's IP address instead of yours. You have hidden your destination from your provider, but you have trusted the VPN provider with the same information instead. Choose a provider you have reason to trust, and remember that logging into an account still identifies you to the site.
Frequently asked questions
Can my internet provider see which websites I visit?
It can see the domain names you connect to, and how much data you exchange, but with HTTPS it cannot see the exact pages or what you type. A VPN hides the domain names from your provider, but the VPN provider then sees them instead.
Does a VPN make me anonymous?
No. A VPN hides your traffic from your internet provider and hides your IP address from the website, but it moves visibility to the VPN provider, and logging into accounts still identifies you. It is a privacy tool with a specific job, not anonymity.
Can the owner of a Wi-Fi network see what I do?
On the Wi-Fi network itself, the owner can see the same things your provider sees: domain names and traffic volumes, but not the contents of HTTPS connections. On public Wi-Fi, HTTPS is essential — never enter passwords on a site without it.
Does Tor hide that I use Tor?
No. Your internet provider can see that you connect to a Tor guard relay. Tor hides which sites you visit, not the fact that you use Tor. In some countries that fact alone attracts attention, which is worth knowing before you use it.
Is HTTPS enough on its own?
For most everyday browsing, yes — it protects the contents of your requests from everyone in the middle. What it does not hide is which sites you visit, and it does not stop the site itself from tracking you with cookies or fingerprinting.