Skip to content

Many VPN adverts promise that you can "browse without being tracked". That sentence blends two separate ideas: tracking by network address and tracking by something your browser carries around. Cookies belong to the second group. A VPN works on the first. If you expected a VPN to clear away the cookies that follow you from shop to shop, you will be disappointed, and it is better to find out how it works now than after you notice an advert for a product you only looked at once.

This article explains what tracking cookies are and how they do their job, what exactly a VPN changes about them, a ten-minute experiment that proves it on your own device, and the browser habits that really do cut cookie tracking down. It is not a claim that a VPN is useless: it protects other things well. It simply is not a cookie tool.

The short answer

A VPN does not stop tracking cookies. It encrypts traffic between your device and the VPN server and shows websites the server's IP address instead of the address of your home or office connection. Cookies are small pieces of data that a website asks your browser to store and send back on later visits. They sit on your device. They travel inside the connection, whichever network that connection uses.

So with a VPN on:

  • the site sees a different IP address, and
  • the same cookie arrives as before.

If the cookie says "this is browser 7F3A", the site still knows it is browser 7F3A. The tunnel is a new road, not a new browser.

How tracking cookies actually work

A cookie by itself is harmless: it is how a shop remembers your basket and how a site keeps you signed in. Tracking uses the same tool in a different way.

First-party cookies are set by the site you are visiting. They keep your language, your cart and your login. They are usually helpful, and some analytics use them.

Third-party cookies are set by another domain that is embedded in the page, such as an advertising network, a social "like" button or a video player. The same advertising network is embedded in thousands of sites, so its cookie follows you from one to the next. That is the classic way a pair of shoes you looked at on one site appears on a news site.

Session cookies disappear when you close the browser. Persistent cookies stay until an expiry date, sometimes for months or years.

A tracking company builds a profile like this:

  1. You visit site A, which embeds a network's content. The network sets a cookie with a random ID.
  2. You visit site B, which embeds the same network. Your browser sends the cookie back.
  3. The network now knows the same ID visited both A and B, and what you looked at there.
  4. It uses the profile to choose which adverts to show you.

The ID is what matters. The IP address is a useful extra clue, but the cookie makes the link even when the address changes. Many sites also use first-party tracking, where site A passes your ID to partners on the server side, which no third-party cookie blocker can see.

What a VPN changes, and what it leaves alone

Think of two clearly different layers.

Layer Example data Changed by a VPN?
Network IP address, which network you are on Yes: sites see the VPN server's address
Transport Whether your traffic can be read on the way Yes: encrypted between you and the VPN server
Browser storage Cookies, local storage, cached data No
Browser identity Settings, fonts, screen size, extensions No
Account identity Email, logins, loyalty cards No

Only the first two rows are touched. Cookies live in the third row. The difference between what a VPN does and what a private window does is a useful comparison here, because each protects different layers.

A VPN does help in one cookie-related way: when your IP address changes, it removes one extra signal. A tracker that used to match you on cookie and address together now matches on cookie alone. If you clear the cookie too, that second clue is no longer enough to link you to the earlier visits. But the cookie is the main thread, and that is the thread you must cut.

A ten-minute experiment you can do yourself

Seeing this beats being told. You need a browser and an online shop or news site you do not mind using.

  1. Open a normal window without the VPN. Visit a shop and look at one specific product. Do not sign in.
  2. Note what appears. Over the next day, check for adverts for that item on other sites. That is the baseline.
  3. Connect the VPN. Use the free VPNclient app or whichever VPN you have. Do not close the browser or clear any data.
  4. Visit the same shop again. Many sites will show "recently viewed" items. They recognised the browser, not the IP address.
  5. Now clear cookies and site data for that shop only, in the browser settings, and reload with the VPN still on. The "recently viewed" list is gone.
  6. Repeat with the VPN off. The result is the same: clearing cookies matters, the VPN does not.

You have just shown that the cookie, not the address, was the link. If you want a more complete view of how unique your browser looks, EFF's Cover Your Tracks runs a test and explains the result.

Here is how the common tools compare for the specific problem of tracking cookies.

Tool or habit Effect on tracking cookies Notes
VPN alone None on the cookie itself Hides the IP address
Private or incognito window Cookies are deleted when the window closes Stops tracking across sessions, not within one
Blocking third-party cookies Strong: cuts the cross-site link Built into most major browsers; can break some embedded logins
Clearing cookies regularly Resets your ID Also signs you out of sites
Tracker protection in the browser Blocks known tracking domains Lists are not perfect
Separate browser profiles Keeps work, shopping and social apart Easy and free
Staying signed out Stops sites linking activity to an account Many sites work fine without login
Browser extension that blocks trackers Blocks scripts and requests Choose carefully; extensions can see your pages

For most people, the biggest gain comes from two settings: block third-party cookies and tracker protection. Both are options in the privacy section of current browsers, and the wording varies by browser and version. Your browser's help page for private mode explains the related feature, such as in Mozilla's guide to Private Browsing and Chrome's help on browsing in private.

Cookie banners are a daily irritation, and they add to the confusion about tracking. A few practical points.

  • "Accept all" usually allows advertising and analytics cookies. That is the choice that feeds tracking.
  • "Reject non-essential" or "Manage" limits the site to the cookies it needs to function. Choosing it on each site is tedious but effective.
  • Your choice is itself stored in a cookie. If you clear cookies, the banner returns. This is normal.
  • A VPN does not answer the banner for you. Some browsers and extensions offer to handle the prompts automatically; check what they do before relying on them.
  • Essential cookies are not the problem. Shopping carts and logins need them.

Regional privacy laws mean the banner appears more often in some places than in others. The banner is about the site's use of data, not your network. Your VPN does not change which version you see.

Three setups for three people

A shopper who hates retargeted adverts. Ning does not use a VPN for this problem at all. She turns on third-party cookie blocking and the browser's tracker protection, uses a separate browser profile for shopping, and clears cookies once a month. Adverts that follow her around the web drop sharply. She keeps the VPN for hotel Wi-Fi.

A remote worker on shared networks. Tae works from cafes and cares about two separate things. For the network he uses a VPN, as explained in what a VPN protects. For cookies he keeps work accounts in one browser profile and personal browsing in another, so that his employer's tools and his weekend shopping never share an ID. Both layers do their own job.

A family computer. The Chen family share one laptop. Each member has their own browser profile with its own cookies, so the teenager's gaming adverts do not show up on a parent's banking tab. They use private windows for gift shopping so that surprises are not spoiled by "recently viewed" lists. The VPN is switched on for travel, not for this.

Limits and what still tracks you

Even a careful cookie setup leaves gaps. You should know what they are, without being alarmed.

  • Logged-in tracking. When you sign in to a service, it links your activity to your account whatever cookies you block. See can you be tracked with a VPN for the wider picture.
  • Browser fingerprints. Sites can combine small details of your browser into a pattern that identifies it without any cookie.
  • Server-side sharing. Companies exchange identifiers such as hashed email addresses behind the scenes.
  • App tracking. Phone apps use advertising identifiers, not browser cookies.
  • Blocking can break sites. Some embedded payment pages or logins stop working when third-party cookies are blocked. Allow exceptions for sites you trust.

The honest approach is to cut the easy, high-volume tracking and accept that nothing makes you invisible.

Common mistakes

  • Expecting the VPN app to remove cookies.
  • Clearing cookies but staying signed in to a large account that tracks everything.
  • Using a private window and believing the IP address is hidden.
  • Accepting every banner because it is quicker.
  • Installing several tracker-blocking extensions that conflict or see every page.
  • Blaming the VPN when a site asks for another sign-in after cookies are cleared.

Summary

A VPN changes your IP address and encrypts your traffic. It does not touch cookies, which live in the browser and identify it from one visit to the next. To limit cookie tracking, block third-party cookies, use tracker protection, keep separate browser profiles, clear cookies from time to time and stay signed out where you can. Use the VPN for what it is good at, such as shared networks, and combine it with browser settings for what it is not.

If you want a pass that covers the network side on shared Wi-Fi, the pricing page shows how a prepaid pass works.

Frequently asked questions

Does a VPN block tracking cookies?

No. A VPN changes the network path and the IP address websites see. Cookies are small files stored by your browser, and they keep working through a VPN unless you block or delete them in the browser.

If I connect a VPN, will advertisers stop recognising me?

Not if you stay signed in or keep the same browser cookies. Advertisers can recognise the browser by its cookie even when the IP address changes.

What actually reduces cookie tracking?

Blocking third-party cookies, clearing cookies regularly, using separate browser profiles, turning on tracker protection and staying signed out of accounts you do not need. Some browsers do much of this by default.

Is incognito mode enough?

It stops cookies from persisting after you close the window, but it does not hide your IP address or stop tracking during that session. Using it together with a VPN covers different things.

Should I accept or reject cookie banners?

Rejecting non-essential cookies or choosing the minimum settings limits tracking on that site. The choice is stored in a cookie itself, so clearing cookies may bring the banner back.

About the author

Bob Kanokphon Thongdee, founder of XPASS VPN

Bob Kanokphon Thongdee

  • Founder of XPASS VPN
  • Co-founder of eSIMonline.asia
  • More than 7 years in online marketing
  • Founder of Cojourney Visa and Cojourney Travel

Need a VPN for a short trip or a busy month?

XPASS sells prepaid passes for a set number of days. You pay once and nothing renews automatically.

See passes

Keep reading

VPN Basics

VPN vs Incognito Mode: What Each One Hides

Incognito or private browsing keeps history off your own device, but it does not hide your activity from networks or websites. A VPN does different work. Here is how they compare.

9 min read

Privacy Guides

Can You Be Tracked With a VPN?

Yes, you can still be tracked with a VPN. Cookies, fingerprints, location services, ad IDs and your own accounts keep working. Here is what a VPN changes and what it does not.

10 min read

Privacy Guides

Common VPN Security Myths

From 'VPNs make you anonymous' to 'HTTPS makes VPNs useless', here are the most common VPN myths and what is accurate about each.

9 min read

VPN Basics

What Does a VPN Actually Protect?

A VPN protects specific things well: traffic on untrusted networks, what your local network can see and the IP address websites record. This article maps those protections and their limits.

9 min read

VPN Security

VPN Browser Extension vs VPN App: Which Protects More?

A browser VPN extension and a full VPN app sound alike but protect different amounts of your traffic. This article compares scope, leaks, permissions and speed, and helps you pick the right one.

9 min read