Your Internet Service Provider can see every website you visit, every search query, and every unencrypted message you send. This data is routinely stored and can be shared with third parties:
- Browsing history — every domain you visit is logged with timestamps
- DNS queries — even when using HTTPS, your DNS requests reveal which sites you access
- Connection metadata — how long you stay on each site, how much data you transfer
- Advertising profiles — ISPs in many countries legally sell anonymized browsing data to ad networks
A VPN encrypts all traffic between your device and the VPN server. Your ISP sees only an encrypted connection — not what you're doing inside it.