ISP = Internet service provider
I was playing
Free Cities preg mod and I saw a warning from the developer to open the game in an incognito browser and that's what I was doing, so I guess that's the issue why the game doesn't save well unless I do it manually. My skepticism increased especially when I wanted to use a good VPN and I saw comments on Reddit saying that the ISP can still see what site you visit.
Depending, depending.
HTTP or HTTP
S?
The first is open and everyone can see, if they wanted, what you see, if no additional layer of security is used.
The other, should be, if no brache is done, secure as the name suggest. Yet, DNS resovel is usally not secured, so if you go to very.bad.site.that.nobody.shall.know it is know. From my semi somewhat understanding, this is an issue and have also one or more secure alternative available, yet they aren't that widespread used as https.
That is the basic. Also as any intermediate needs to know the source and destination, they always will know
source and
destination, but not more. So if I use a VPN, tor or whatever, then they know the VPN entry point or tor entry point and as well the tor or vpn exit point and the website.
In all case you need to trust someone either ISP, VPN or tor.
So, if we are all secure and are we then happy?
Perhaps. If you can monitor the packets, even without knowing the content, you can do some statistic and do some correlation and guess from which source the packets go to which destination even if you don't know the inbetween. How high the chance are that they will do that for you, most likely depending on how big the case of issue you are to them.
What is much more critical is, that if you use cookies, jasvascript or anything similar you can get tracked over website and targeted. That is what all the big AD companies do (Alphabet, Meta, most likely X ...). For this you clear your browsers cache, use private mode and so on.