spectre

A practical privacy guide

VPN and data privacy: what a VPN can and cannot do.

Does a VPN stop tracking or delete personal data? Compare network privacy, account records, and GDPR deletion requests, then build a practical cleanup plan.

Updated 2026-10-03 · Spectre editorial · General information, not legal advice.

Explore Spectre

Does a VPN delete your personal data?

No. Switching on a VPN does not send deletion requests to shops, apps, or other companies where you have accounts. If your goal is to remove records they already hold, identify those services and use their account controls or an appropriate erasure request. Our personal data deletion workflow covers that separate task.

What does a VPN do for online privacy?

A correctly functioning VPN routes covered traffic through an encrypted connection to a VPN server. It can change the IP address a destination sees and reduce visibility for the local network. You are also placing trust in the VPN operator. Coverage depends on configuration, including which traffic goes through the tunnel.

EFF's VPN guide explains these limits. A VPN is one tool for a particular network concern, rather than a complete privacy solution.

Does a VPN stop websites from tracking you?

Changing an IP address does not stop a service recognising an account you sign into. Cookies and other browser identifiers can also link activity. Browser controls or tracker blocking address different parts of that problem. A VPN does not remove an address you previously supplied to a retailer or change information in a company database.

Choose the action that matches the record

Your concern A useful next step
Visibility on a network you use Assess whether a trusted VPN addresses that concern.
A website recognising your login Review account use and the service's privacy settings.
Cookies and browser tracking Review browser permissions and tracking protections.
Personal data in forgotten accounts Find the accounts and review closure or erasure options.
Personal information in search results Address the source website and the search listing separately.

For search listings, start with our Google personal information removal guide. For forgotten services, start with accounts linked to your email.

A privacy checklist you can use alongside a VPN

Make a small inventory of services before deleting anything. For each service, write down why you still need it, whether a paid subscription is active, and what you would lose if you closed the account. Start with one account you recognise and no longer need.

Save documents and receipts, resolve subscription issues, and check whether other services use the account to sign you in. Then use the company's own deletion process. If you need a separate personal data erasure request, adapt the GDPR request template to your circumstances and keep the response.

Your VPN provider can itself be a service to review in that inventory. Check its published account deletion and retention information rather than infer that a network logging claim covers billing or account records.

How Spectre fits into the plan

Spectre helps identify likely services from supported mailbox signals and draft requests you review before sending. It does not provide a VPN. Keep these tasks distinct in your checklist: protect a connection when appropriate, manage browser and account settings, and review old data holders. Our online privacy guide brings those steps together.

Sources and further reading

Our editorial approach · About Spectre editorial