Your ISP Knows Everything: Here Is What They See

Q: What can my ISP see when I browse the internet?

Without encryption, your ISP can see everything: the websites you visit, the content you view, your search queries, emails, downloads, and streaming activity. Even with HTTPS, they can still see which domains you connect to through DNS queries and SNI headers, when you connect, how long you stay, and how much data you transfer.

Q: Can my ISP see my browsing history if I use a VPN?

No. A VPN encrypts all traffic between your device and the VPN server, so your ISP can see that you are connected to a VPN but not which sites you visit or what you do. Confirm your VPN is not leaking with a DNS leak test, since a DNS leak can still expose your domains.

Q: Does HTTPS hide my browsing from my ISP?

Only partly. HTTPS encrypts the content of each page, so your ISP cannot read what you send or receive. But they can still see which domains you connect to via DNS and SNI. To hide the domains too, you need DNS over HTTPS or a VPN.

Q: Can my ISP see what I search on Google?

Because Google uses HTTPS, the actual search terms are encrypted in transit, so your ISP cannot read the query text. They can still see that you connected to Google, and without encrypted DNS your lookups reveal the domains you visit afterward.

Q: How long does my ISP keep my browsing data?

It depends on the country. EU ISPs must retain connection data for 6 to 24 months, the UK requires 12 months of browsing history under the Investigatory Powers Act, and Australia mandates 2 years of metadata. In the US, ISPs have been legally allowed to sell your browsing data to advertisers since 2017.

~/sheets/what-your-isp-sees.md

Your ISP Has a Front-Row Seat to Your Digital Life
Your Internet Service Provider is the gateway between you and the internet. Every byte of data passes through their infrastructure. And in most countries, they are legally allowed, sometimes required, to monitor and store your activity. Check your ISP identity now.
What Your ISP Can See
Without encryption, your ISP can see everything: the websites you visit, the content you view, your search queries, emails, file downloads, and streaming activity. Even with HTTPS, they can see which domains you connect to (via DNS queries and SNI headers), when you connect, how long you stay, and how much data you transfer.
DNS Query Logging
Every time your browser resolves a domain name, that query goes through your ISP DNS servers by default. This gives them a complete list of every website you visit. Even if you switch to third-party DNS like Cloudflare (1.1.1.1), your ISP can still see unencrypted DNS queries passing through their network. Only DNS over HTTPS or DNS over TLS prevents this. Test your DNS configuration with our DNS Leak Test.
Data Retention Laws
In the EU, ISPs must retain connection data for 6-24 months depending on the country. In the US, ISPs can legally sell your browsing data to advertisers since 2017. In the UK, the Investigatory Powers Act requires 12 months of browsing history retention. Australia mandates 2 years of metadata retention.
Deep Packet Inspection
Some ISPs use DPI (Deep Packet Inspection) to analyze your traffic content, not just metadata. This technology can identify specific applications, throttle certain services, inject advertisements, and detect protocol violations. It is the same technology used by authoritarian governments for censorship.
How to Limit ISP Surveillance
Use a VPN to encrypt all traffic between your device and the VPN server. Your ISP will see that you are connected to a VPN, but not what you are doing. Enable DNS over HTTPS in your browser. Use HTTPS everywhere. Consider encrypted email providers for sensitive communications.
The Bottom Line
Your ISP sees more than most people realize. While you cannot completely eliminate their visibility, encrypting your traffic and DNS queries significantly limits what they can log. Take control of your privacy by understanding what is exposed. Check for WebRTC leaks that could reveal your identity, and review your browser fingerprint to see how trackable you are beyond your IP address.
Frequently Asked Questions
What can my ISP see when I browse the internet?
Without encryption, your ISP can see everything: the websites you visit, the content you view, your search queries, emails, downloads, and streaming activity. Even with HTTPS, they can still see which domains you connect to through DNS queries and SNI headers, when you connect, how long you stay, and how much data you transfer.
Can my ISP see my browsing history if I use a VPN?
No. A VPN encrypts all traffic between your device and the VPN server, so your ISP can see that you are connected to a VPN but not which sites you visit or what you do. Confirm your VPN is not leaking with a DNS leak test, since a DNS leak can still expose your domains.
Does HTTPS hide my browsing from my ISP?
Only partly. HTTPS encrypts the content of each page, so your ISP cannot read what you send or receive. But they can still see which domains you connect to via DNS and SNI. To hide the domains too, you need DNS over HTTPS or a VPN.
Can my ISP see what I search on Google?
Because Google uses HTTPS, the actual search terms are encrypted in transit, so your ISP cannot read the query text. They can still see that you connected to Google, and without encrypted DNS your lookups reveal the domains you visit afterward.
How long does my ISP keep my browsing data?
It depends on the country. EU ISPs must retain connection data for 6 to 24 months, the UK requires 12 months of browsing history under the Investigatory Powers Act, and Australia mandates 2 years of metadata. In the US, ISPs have been legally allowed to sell your browsing data to advertisers since 2017.
Last updated: April 2026