Learning Path

Internet Privacy Fundamentals

Every time you go online, information about you is collected — by the sites you visit, the networks you use, and the companies that buy and sell data about browsing. Much of it is invisible, and the sales pitches around privacy are even more confusing than the tracking itself. This path teaches you how tracking actually works, what the common privacy tools do and do not do, and how to judge a privacy claim on the evidence instead of the advertising.

By Abdul Hannan · Published 14 November 2026 · Updated 14 November 2026

How this path works. Each lesson below is a short summary written for this path, with a link to the full guide. Work through them in order, mark each one complete when you have read the guide, and test yourself with the quiz at the end. Your progress is stored only in your own browser — no account, nothing sent to us. This path teaches understanding, not credentials: completing it does not give you a certificate and does not qualify you for a job.

What you will learn

This path is for everyone who browses the web and wants to understand what is happening to their data. It assumes no technical knowledge, and it takes a vendor-neutral position throughout: no product is recommended, and no affiliate link appears anywhere on this site.

  • Explain how websites track you with and without cookies, in plain English.
  • Say what a VPN hides, what it does not hide, and whether you need one.
  • Understand browser fingerprinting, and why the published uniqueness figures disagree.
  • Audit your own digital footprint with a local-only checklist — no email required.
  • Understand how internet surveillance works, and who can see what on each kind of connection.
  • Judge privacy products and promises on evidence, not on sales language.

Your progress

0 of 7 lessons complete.

The lessons

Read each lesson summary, then open the full guide it links to. The summaries are written for this path — they do not repeat the guides, they prepare you for them.

Lesson 1: Your digital footprint

Your digital footprint is the trail of information you leave online: the accounts you created, the posts you made, the photos others tagged you in, the data brokers that list you, and the old profiles you have forgotten. This lesson explains the two kinds — the active footprint, what you deliberately shared, and the passive footprint, what was collected about you without you doing anything.

You will learn why the free footprint scanners you see advertised are a bad deal: they usually ask for your email address first, which simply adds to the footprint you were trying to measure. The honest alternative is a self-audit — a local-only checklist in our tools that walks you through searching for yourself, reviewing old accounts, and cleaning up what you no longer need — with nothing sent anywhere and no email required. Privacy starts with knowing what is out there, and this lesson shows you how to find out.

Read the full guide: How to check your digital footprint

Lesson 2: Browser fingerprinting

Browser fingerprinting identifies your browser — and often you — from the combination of its settings: screen size, language, timezone, installed fonts, and dozens of other details. No single detail identifies you, but the combination often can, like recognising a person from a description rather than a name. It works without cookies, which is why clearing cookies does not stop it, and it is one of the main ways websites track people who never accepted a cookie.

This lesson explains the most confusing part of the subject: the published figures for how many browsers are uniquely identifiable disagree wildly — roughly a third in one study, over 80 percent in another, over 90 percent in a third. The lesson explains why: different studies, different methods, different years, and different definitions of unique. It also shows you our local-only fingerprint demo, which shows what a site can read about your browser while creating no identifier, storing nothing, and sending nothing anywhere.

Read the full guide: What is browser fingerprinting?

Lesson 3: What does a VPN hide?

A VPN routes your traffic through its own server, and this lesson gives you the honest two-column answer: what it hides, and what it does not. It hides your browsing from your local network and your internet provider, and hides your real address from the websites you visit. It does not hide you from the VPN provider itself, does not make you anonymous, and does not protect you from phishing, malware, or a website you log into with your real account.

The lesson leads with the correction, because most VPN advertising buries it: a VPN moves your trust from one party to another rather than removing the need for trust. You will learn the questions that actually matter when judging a VPN — who runs it, what does it log, and under which country's law does it operate — and why this site carries no VPN affiliate links: neutrality is the point, and a site that earns money from recommending a VPN cannot judge VPNs honestly.

Read the full guide: What does a VPN hide?

Lesson 4: Do you need a VPN?

The honest answer to this question is: it depends on what you are trying to protect, and this lesson works through the situations one by one. On your home network, a VPN adds little for most people — your provider already sees your traffic, and the sites you visit see it too. On public Wi-Fi, a VPN protects you from other people on the same network, though modern encrypted connections already do much of that work. For bypassing a network block, a VPN helps; for staying anonymous, it does not.

This lesson gives you a decision framework instead of a yes-or-no answer: what is the threat, who are you hiding from, and what does the tool actually hide? You will come out able to answer the question for yourself — and to recognise when a VPN advertisement is selling you protection against a threat you do not have, using fear you do not need.

Read the full guide: Do I need a VPN?

Lesson 5: How websites track you

Cookies were the first tracking tool most people heard of, but they are no longer the only one — and this lesson explains the full set. It covers cookies and how they follow you across sites, tracking pixels hidden in pages and emails, and the cookie-less methods: fingerprinting, and the identifiers that advertising networks build from your behaviour. Each one is explained by what it can and cannot do, and by what stops it.

The lesson also separates the two stories that are usually tangled together: tracking by a site you are actually using, which is often part of how the service works, and tracking by third parties you never chose to deal with, which is where most of the privacy concern sits. You will learn which browser settings and habits actually reduce tracking, which ones only feel like they do, and why the most effective step is often the least technical one: using fewer accounts and sharing less in the first place.

Read the full guide: How do websites track you?

Lesson 6: How internet surveillance works

Governments and law enforcement can monitor internet activity, but the rules for doing so differ by country, and this lesson is careful to split them by jurisdiction rather than giving one global answer. It explains the technical side first: what your provider can see on an ordinary connection, what encryption hides from them, and what remains visible even with encryption — the fact that you connected, when, and to which service.

Then it explains the legal side in broad strokes for the US, the UK, the EU and Pakistan, each stated separately, with the clear label that this is general information, not legal advice. The lesson uses the who-sees-what tool to show the journey of a single web request — who sees the address, who sees the content, who sees nothing — so the legal questions have a technical picture underneath them. It ends with the honest summary: surveillance capability and surveillance law are two different subjects, and understanding one without the other misleads you.

Read the full guide: Can police monitor your internet activity?

Lesson 7: Protecting your online identity

This final lesson turns everything in the path into a practical, product-free plan. It is organised by impact rather than by product: unique passwords and two-factor authentication first, because they protect every account at once; then software updates and privacy settings; then browser hygiene; and finally, awareness of data brokers — the companies that collect and sell personal details, and the official opt-out pages where you can ask to be removed.

The plan is free-first by design: every step in it costs nothing, and no step requires buying anything. You will also learn what the plan does not do — it does not make you invisible, and no honest plan can promise that — and how to maintain it over time, in a short regular routine rather than a single heroic effort. Privacy is a practice, not a purchase, and this lesson is the routine that keeps it working. Revisit the plan twice a year, and it stays current.

Read the full guide: How to protect your identity online

Try the tools

These free tools let you practise what the lessons describe — everything runs in your browser, and nothing you type is sent anywhere.

Check what you learned

Four questions, all based on fictional scenarios. Answer them all, then check your score — each answer explains itself, so a wrong answer teaches as much as a right one.

Answer all four questions, then check your score.

Download your notes

Download a plain-text summary of this path: the lesson list, which lessons you marked complete, and your quiz score. The file is generated on your device — nothing is uploaded.

Key terms in this path

The glossary defines every term this path uses: digital footprint, browser fingerprinting, VPN, dark web. If a lesson uses a word you do not know, look it up there — each term page also explains the idea with an example.

Frequently asked questions

Will a VPN make me anonymous?

No. A VPN hides your browsing from your local network and your provider, and hides your real address from websites — but the VPN provider itself can see your traffic, and a site you log into still knows who you are. Anonymity is a much stronger claim than any VPN can support.

Is it true that clearing cookies stops tracking?

Only partly. Clearing cookies removes one tracking method, but fingerprinting and other cookie-less methods do not use cookies at all. The privacy path explains the full set of methods and which habits actually reduce them.

Why do fingerprinting statistics disagree so much?

Because the studies measured different things: different browsers, different methods, different years, and different definitions of unique. Published figures range from about a third of browsers to over 90 percent. This site does not quote one figure as fact — it explains why they disagree.

Should I pay for a privacy product to protect myself?

Start with the free steps first — unique passwords, two-factor authentication, updates, and privacy settings — because they protect you more than most paid products. This path is deliberately product-free: no recommendation is made here, and the site carries no affiliate links for privacy products.

What is the difference between privacy and anonymity?

Privacy means controlling what others know about you; anonymity means not being identifiable at all. Most people need privacy — choosing what to share and with whom — not anonymity, which is much harder to achieve and usually unnecessary. The path teaches privacy, and is honest about where anonymity begins.