What a VPN is for

Your ISP can see the IP address you use and, on ordinary DNS, the names of the sites you look up. A website sees the IP address that connected to it. Advertisers can tie visits together with cookies and other identifiers. A VPN changes the first two of those, not the third.

What the tunnel does

The app builds an encrypted tunnel to a VPN server. Sites you open see the server's address instead of the address your ISP assigned. Someone on the same café Wi-Fi sees encrypted packets, not the pages.

Oak VPN uses WireGuard for that tunnel. Prices and device limits are on the pricing page.

What it does not do

A VPN does not make an account anonymous. If you sign in to a bank, email, or social network, that service still knows the account. It does not stop a company you already gave data to from losing that data. It does not replace a password manager or two-factor authentication.

Free apps

If the app is free, ask how the operator pays for the servers. Some free VPNs log traffic or add advertising. Oak VPN is a paid subscription. The logs policy is on the privacy page.