Can You Be Tracked if You Use a VPN? Every Signal, Checked

Can you be tracked if you use a VPN? The useful answer is not yes or no, it is a list. Online tracking is a stack of separate signals, a VPN changes exactly one of them, and that one happens to be the most widely used. Everything confusing about the subject, from Google showing your real city to two websites disagreeing about where you are, follows from which signal a given service reads.

This page is the list. Fourteen signals, who reads each one, whether a VPN changes it, and what actually does, with a primary source on every row. It replaces an older version of this article from 2020, and it exists because the same questions arrive every week: the VPN is on, so why does this site still know?

One definition to carry through the page: a VPN relocates your traffic, not your device; it changes where your connection appears to come from, and it changes nothing that is measured on, stored on, or attached to the device and its accounts.

What Does a VPN Actually Change, and What Does It Never Touch?

Read the yes column and the shape of the subject appears: of fourteen signals, a VPN changes one directly and influences a second. That is not a weakness of VPNs, it is the division of labor. The IP address is the only location signal every website receives from every visitor on every request, which is why changing it matters so much, and why the other thirteen rows generate so much confusion when people expect the VPN to cover them too.

Why Do Different Websites See Different Locations at the Same Time?

Because nobody owns the map. There is no registry that decrees where an IP address is; there are competing commercial databases, each inferring locations from routing data, registration records and correction requests, each on its own update cycle. MaxMind, one of the largest providers, claims 99.8 percent accuracy at country level but about 66 percent within 50 kilometers for US cities, offers a public correction form, and requires licensees to keep their copies updated. Requires, not achieves: a site running last quarter’s database answers with last quarter’s map.

VPN server ranges make the disagreement worse because they move more than ordinary ranges: providers add capacity, lease new blocks and shift ranges between datacenters, and every move waits on each database vendor to notice. Network operators can speed this up by publishing a geofeed, a plain CSV of prefixes and locations defined by RFC 8805; at the standard’s publication Google alone was already consuming about 400 such feeds covering more than 750,000 prefixes. That is the mechanism by which the place your VPN server claims to be becomes the place databases say it is, and the lag in that pipeline is the honest explanation for one browser tab placing you in Paris while another insists on Amsterdam.

Why Does Google Still Know Where You Are?

Google documents this one itself, which makes it the easiest case on the page. Search results are localized using four sources: your IP address, your device’s location if you share it, your saved places such as a Home or Work address, and your previous activity. A VPN changes the first source and leaves three standing. Signed in, with a saved home address and a decade of searches from one city, you have told Google where you live in three ways that have nothing to do with your connection.

The same support page hands you the diagnostic: the bottom of the results page states your estimated location and which source produced it. If it says the location came from your places or your activity, no exit server was ever going to change it, and the fix lives in your account’s activity controls and location sharing, not in the VPN app.

Why Do YouTube and Netflix Still Flag Your Household?

The streaming questions that fill forums every week, YouTube Premium family members getting warnings and Netflix asking whose household a TV belongs to, are not VPN detection stories at all. They are address checks. YouTube’s family plans require all members to live at the family manager’s residential address and run an electronic check-in every 30 days; you can switch family groups once in twelve months. Netflix defines a Household from the IP address, device IDs and account activity of devices using the connection where the main TV lives, and states plainly that it does not collect GPS data.

Notice what both systems anchor to: the home connection itself, observed over weeks. A VPN gives you a different IP address somewhere else, which is precisely the pattern a household check exists to notice. This is the one corner of the table where using a VPN can make a service’s location logic more suspicious of you rather than less, and the fix is administrative, not technical: the household and family settings inside the account.

Why Does Your Smart TV Ignore the VPN Completely?

Because a television carries its region in two places that never touch the network. The first is the TV’s own setup region, chosen during first installation, which decides which apps the TV’s store offers at all; on recent Samsung models the usual route to a different region is a factory reset. The second is the account country on whatever you sign in with, which follows the account’s billing details; Apple, for instance, wants subscriptions cancelled, the balance spent and a payment method for the new country before an account can move. Route such a device through any server you like: the store region and the account country rode along. The Samsung question arriving with a US server set and a US catalog missing is answered in the TV’s setup menu, not in the router.

When Is It Actually a Leak?

Everything above is a signal the VPN never claimed to change. A leak is different: traffic that belongs inside the tunnel getting out. Two cases cover almost all of it. The first is WebRTC, the in-browser calling machinery, whose own standard, RFC 8828, documents that on a split-tunnel VPN configuration WebRTC can discover and expose the address your ISP assigned alongside the VPN address, and defines four browser handling modes for exactly that reason. The second is DNS: lookups sent to your ISP’s resolver instead of through the tunnel announce every domain you visit to the network you were tunneling away from; our guide to trusted DNS servers covers the resolver side.

Both are testable in minutes. Load a checker such as our IP test page with the VPN on: the IP, DNS and WebRTC results should all belong to the VPN. If a result shows your ISP, that is a real finding, and it is a configuration problem with a fix, not a law of nature. Websites refusing VPN connections outright are a third, separate phenomenon, reputation lists of known VPN ranges, and we took that apart in the VPN-blocks reference.

Who Can Still Track You With a VPN On?

The honest closing list, because a privacy tool is only worth paying for if its seller tells you what it does not do. With the VPN on and working, websites no longer receive your real IP address or the location attached to it, and the network you are on, a hotel, an airport, an ISP, no longer reads which sites you visit inside the tunnel. That is the product.

Still tracking you: every account you are signed in to, which links your activity across every IP you will ever have; cookies and device fingerprints, which identify the browser rather than the connection; apps holding your device’s location permission, which read position from the device itself; and any platform whose region logic runs on billing details or a registered address. Even regulators now treat non-network signals as the way to place VPN users: Utah’s proposed age-verification rule tells websites to analyze connection latency and the device’s time zone setting when an IP looks obfuscated, a story we cover in detail here. The lesson generalizes: your connection is one witness among many, and the others live in your pocket, your browser and your accounts.

What Should You Check First When the Location Is Wrong?

The pattern across all eight rows: when the location is wrong with a VPN on, the deciding signal is almost never the one the VPN controls. Check the table, name the signal, and the fix stops being a mystery.

What Changes Next in Location Tracking?

Three files are worth a date in the calendar. First, device-level age and identity signals: California’s Digital Age Assurance Act has operating systems passing age brackets to apps from January 2027, a model that sidesteps IP geolocation entirely and will tempt other legislatures. Second, the regulatory treatment of VPN detection after Utah: a federal court blocked Utah’s deemed-location clause in September 2026 precisely because perfect geolocation does not exist, and any rewrite legislators attempt in 2027 will say how much imperfection the law will tolerate. Third, the quiet growth of RFC 8805 geofeeds: the more operators publish them, the faster databases converge, and the less often two websites will disagree about where your VPN server is. We will update this page as each lands.