Privacy vs Anonymity
Privacy is about what is known about you. Anonymity is about who you are. Almost everyone who wants the first is told they should want the second.
Privacy is a question about information: what is known about you, and by whom. Anonymity is a question about identity: whether anything about what you do can be traced back to you. The first is a matter of degree and is achievable with a single tunnel. The second is much harder, costs more, and is often not what anyone actually needs.
Short answer#
- Privacy you can have most of the way with a VPN or encrypted DNS. The contents of your traffic stop being readable to the network.
- Anonymity you can only get from arrangements specifically designed for it, and even then only within limits that the designers state plainly rather than deny.
A VPN gives you privacy. It does not give you anonymity, and a provider who says otherwise is either confused or selling something.
What privacy actually means#
Privacy in the network sense is control over who learns facts about you from watching your connection. It is a spectrum, not a switch:
- Your ISP knows your IP and the domains you resolve. Not private.
- Through a tunnel, your ISP knows you are talking to one server and nothing more. Mostly private.
- The tunnel operator knows your IP, and if they log, knows where you went. Private from one party, exposed to another.
Notice what is happening in that last line. Privacy was moved rather than achieved, and that is the most important thing to understand about the subject, and it is the reason “which VPN should I use” is the wrong first question. The right first question is “who am I actually trying to hide things from”.
What anonymity actually means#
Anonymity is the stronger property: no observer, no matter where they sit, can link your activity to you as an individual.
Getting there requires solving at least three problems at once.
Linkability across the network: you must ensure that nobody can tie this connection to that connection. A single tunnel does not do this. The operator of the tunnel endpoint sees both your address and the destination. Tor distributes the path across several relays so that each one only ever learns its own two neighbours, which is why its own documentation describes the design in exactly those terms.
Linkability at the destination: even if the network cannot tell who you are, a site can, through a login, a cookie, a fingerprint, a payment, an account you already have. Tor’s overview is blunt about this: Tor cannot solve all anonymity problems, it focuses only on protecting the transport of data, and you need additional tools if you do not want the sites you visit to see identifying information about your computer.
Linkability in behaviour: the shape of your activity can identify you even when its contents cannot. A pattern of when and how often you connect, and to what kind of destination, is a fingerprint of its own.
This is why anonymity is a project, not a purchase.
What each one buys you#
| Question | Privacy | Anonymity |
|---|---|---|
| Can my ISP read my traffic? | Mostly no | Mostly no |
| Can my ISP see which sites I visit? | Not through the tunnel | Not through the tunnel |
| Can the destination site identify me? | Yes — it sees the tunnel’s address, and it sees your accounts | Only with strong measures |
| Can someone link my activity to me across sessions? | No | No, within the limits the tool documents |
| Can I be identified by my browser alone? | Yes | Requires deliberately resisting fingerprinting |
| Cost | Low | Speed, reach, and habit |
Why the two get confused#
Three reasons, in order of how much damage they cause.
Marketing accounts for a lot of it. “Private and anonymous” is a common phrase because it sells. A product that changed your IP address is often described as making you anonymous, which it does not do, because the operator of that product knows exactly who you are.
Moralisation accounts for some of the rest. Privacy is sometimes treated as the responsible choice and anonymity as something suspicious. This is backwards as engineering: the situations where you need to be unidentifiable are overwhelmingly the situations where you have least power. Treating it as inherently illicit removes the option exactly when it is needed.
Assuming one implies the other: people reasonably hope that if the traffic is hidden, the person is too. There is no mechanism connecting the two.
Common misconceptions#
“A VPN makes me anonymous.” It does not. The tunnel endpoint sees the connection arriving from you and the connection leaving for your destination. Unless the operator discards that data and can be shown to, your activity is available to exactly one party, by design.
“Anonymous browsing just means being logged out.” Being logged out of an account removes one identifying link. It leaves every other one: your address, your browser, the destinations you visit, the times you visit them.
“Anonymity is strictly better.” It is not free and not always available. It costs throughput. It makes you suspicious to systems that flag anonymous traffic. Many sites block it outright, which turns an anonymity tool into a practical loss of access. For most people trying to keep a connection open, privacy is the goal and anonymity is a different, more expensive project.
“If I cannot be identified, nothing I do is attributable.” Not identifying who you are and not being accountable are different properties. Treating them as the same thing is how people talk themselves into doing things they would not do if identified, and how governments acquire consent that could not otherwise be given.
Which one should you want#
Answer this before choosing any tool, because the answer changes what you should buy.
- You want your network not to read or log your traffic. That is privacy. A tunnel and encrypted DNS are proportionate.
- You want the destination not to know it is you. That is a bigger problem. It starts with the accounts you use, not the protocol you choose.
- You need to act without any party being able to attribute it to you. That is anonymity, it requires tools designed for it, and it comes with a cost and a set of documented limits you should read rather than assume.
And underneath all three: who specifically are you hiding this from? The answer is not “everyone” in the abstract. It is one party, or a small number, and the right tool depends entirely on which.
Related#
- What Does Your ISP See? — the concrete list of what is visible before you do anything
- What Is a VPN? — what a tunnel gives you, and the party it introduces
- VPN vs Proxy vs Tor — the three tools compared against the two properties
Sources
- Tor: Overview The Tor Project
- How Tor works The Tor Project
- RFC 7258 — Pervasive Monitoring Is an Attack IETF
Last reviewed October 7, 2026. Corrections and additions are welcome.