What Your IP Address Reveals: Location, Provider and Metadata

Additional resource for the lesson “IP Address and Metadata: The Basic Traces” — Online Anonymity course

What your IP address reveals is usually less than you might fear and more than you might think: a rough location, the name of your provider, and a thread that ties your visits together. With other metadata, such as the time and the device you use, it is the first trace a connection leaves. This resource shows you what that trace says, who can see it, and why anonymity starts here.

A. Why this matters

When you open a website, your device has to tell it where to send the reply. That return address, the IP address, travels with your requests, alongside other details about when you connected and from what kind of device. You do not type any of it; it is part of how the internet works.

In this course, privacy is deciding what others know about you, while anonymity is being able to act without what you do being linked to who you are. The IP address is the first and most basic of those links. Before cookies, accounts or browser fingerprints, it helps to see what this one says, and what it does not.

None of this is a reason to worry. An IP address is ordinary, and you share it with the services you use every day. Knowing how it works lets you choose, in proportion to your needs, when to loosen the link.

What the sources say

The Electronic Frontier Foundation (EFF), a digital rights organisation, explains in its Surveillance Self-Defense glossary that “when you connect to a website or other server online, you usually reveal your own IP address.” On its own, the glossary adds, an address is hard to tie to a specific person, but it can reveal your rough location or the name of your internet provider, and combined with other information it can help identify you.

The UK’s Information Commissioner’s Office (ICO) notes that UK data protection law names “online identifiers” in its definition of personal data, with IP addresses among the examples. It asks organisations to consider whether such identifiers, “on their own or in combination with other information”, can tell one user apart from another.

A research report by the Office of the Privacy Commissioner of Canada, archived since 2013 but still clear on the basics, showed that an IP address could lead to the organisation operating the network and to an estimated location “with varying degrees of accuracy”. On metadata more broadly, the EFF’s guide is direct: “Even a tiny sample of metadata can provide an intimate lens into a person’s life.”

B. Key concepts

Five ideas about what your IP address reveals, and what travels with it.

The IP address: a return address, not a home address

An IP address (Internet Protocol address) is the number that identifies a connection on the internet, so that data can find its way back. The Canadian report explains that it is assigned, or leased, by an internet service provider: at home, the company that supplies your broadband; on mobile data, your mobile operator.

Why it matters to you: The address points to a connection on your provider’s network, not to your front door. A location guess based on it may land in your town, or in a different one.

Changing and shared addresses

Many connections receive a dynamic address: one assigned for a period and later replaced. The Canadian report describes assignments lasting “from a few days to a few months”. And because the older type of address, IPv4, is in short supply, an internet technical standard describes set-ups in which one public address “would be shared by many subscribers”.

Why it matters to you: Your address is often neither permanent nor only yours. That makes it a weaker identifier on its own, but it does not stop a site from linking the visits you make while it stays the same.

Metadata: the envelope, not the letter

Metadata is data about data. The EFF compares communication metadata to an envelope: it shows who a message is from, where it goes and when, but not what is inside. For a visit to a website, the envelope includes your IP address, the time and the site you reached.

Why it matters to you: The EFF notes that HTTPS, the encryption behind the padlock, “protects the content of your communications, but not the metadata.” Each item says little; together, over weeks, they describe habits.

The device in the request

Your browser introduces itself too. Mozilla’s developer documentation explains that the User-Agent header, a short line of text your browser sends with its requests, lets servers identify “the application, operating system, vendor, and/or version” you are using.

Mozilla adds that this information has raised privacy concerns because it can be used for fingerprinting, and that supporting browsers now send a reduced set of details.

Why it matters to you: Address, device and time together already make a small profile of a visit. The browser side of the story, fingerprinting, has its own resource in this section.

Linkability: why the address ties visits together

Linkability is whatever lets someone say that two actions came from the same source. While your address stays the same, a site can group your visits; if you sign in, it can attach them to your account, a stronger link that the next resource in this section looks at. The EFF’s Tor guide points out that if you log in to a website, even over Tor, “that website will be able to identify you”.

Why it matters to you: Anonymity is less about hiding one fact and more about which links exist between your actions and you. The IP address is the first of those links, and one you can choose to change.

C. A practical example: Marco’s gaming nickname

Marco is 22, a university student, and spends many evenings playing online with friends. On a gaming forum he posts under a nickname, has never shared his real name there, and took it for granted that this made him anonymous.

One week, two small things made him think. An email from his mail provider told him he had signed in “near” a city he had not visited: he had been on mobile data on the train. And the forum suggested a meet-up for players in the town where his student flat is, though he had never mentioned it.

Nothing had gone wrong. The forum saw the address of his flat’s connection each time he visited, and an approximate location came with it. His mail provider saw an address belonging to his mobile operator and placed it in the wrong city. The nickname covered his name. It did not cover his connection.

What changed when Marco looked again

He did the exercise in section D one evening, more curious than worried:

• He saw that the address on his flat’s Wi-Fi and the one on mobile data were different, and that each pointed to a provider, not to him.
• He realised that the forum could link all his posts made from the flat, and that signing in tied them to the email address on his account, which was his university one.
• He noticed that the location guesses were sometimes right and sometimes a different city, which showed him what “approximate” means in practice.

He made one decision: he gave his forum account an email address used only for gaming, so that his posts and his university identity no longer met in the same place. He left everything else as it was. For now, that is the level of anonymity he wants, and he can explain why.

D. Try it yourself: see what a site sees of your connection (15 minutes)

Four short steps on your phone. You do not need to install anything, and there is no right or wrong result.

Step 1 — Look at your address on home Wi-Fi (4 minutes)

• Connected to your home Wi-Fi, open the “My IP Address” page of BrowserLeaks, a free browser privacy test site (listed in section E), in your usual browser. At the top it shows the IP address the page sees, with a country, region and city, an ISP and an organisation. The rest of the page is more technical; you can skip it.
• Write down only the first part of the address, the provider name and the city guess. You do not need the whole number.
• If you wish, paste the address into the search box of RIPEstat, the open data service of the RIPE NCC, a Regional Internet Registry (one of the organisations that hand out blocks of IP addresses to networks). It shows registration details: the block your address belongs to and the network that announces it, usually your provider.
• Both are examples; other lookup pages work too. The location comes from databases and is approximate, so treat it as a guess. You do not need to sign in to anything.

Step 2 — Switch to mobile data and compare (4 minutes)

• Turn Wi-Fi off, reload the same page and note the first part of the address again.
• Compare: has the address changed? Has the provider name or the city guess changed?
• If the city guess is wrong, that is a useful result: it shows how rough location based on an IP address can be.

Step 3 — List who sees each address (3 minutes)

For each of the two connections, write down who is in a position to see it:

• the sites and apps you use, each time you connect to them;
• the network you are on: your home router, or the Wi-Fi of a café or a campus;
• the provider or mobile operator that assigned the address.

Step 4 — Spot one link and choose (4 minutes)

• Pick one site you use without signing in and one you are signed in to. Which of your visits can each of them link together?
• For one of them, choose: keep it (the link is fine for you), separate it (a different account or email address for that activity), or change who sees the address for one task, a choice explored later in this course.
• Write the choice down. One reasoned choice is the whole result.

Already covered in the Online Privacy course

What Can My Internet Provider See? Home Connection Privacy
It covers what your home provider can see of your browsing; this resource looks at the address that provider assigns you as a link between your visits, and at who else sees it.

Public Wi-Fi Privacy: What an Open Network Learns About You
It covers what an open network learns about you; this resource adds how your address changes from one network to another, and why that matters for anonymity.

E. Videos, articles and further resources

Institutional sources first, then digital rights guides, a technical reference and two lookup tools. All in English.

Institutional sources

Information Commissioner’s Office (UK) — What are identifiers and related factors?
Why IP addresses count as online identifiers in UK data protection law, alone or combined with other information.
https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/personal-information-what-is-it/what-is-personal-data/what-are-identifiers-and-related-factors/

Office of the Privacy Commissioner of Canada — What an IP Address Can Reveal About You
An archived 2013 research report on what can be learned from an IP address, from the network operator to an approximate location.
https://www.priv.gc.ca/en/opc-actions-and-decisions/research/explore-privacy-research/2013/ip_201305/

Digital rights guides

Electronic Frontier Foundation — Why Communication Metadata Matters
The envelope comparison, with examples of how revealing metadata can be.
https://ssd.eff.org/module/why-metadata-matters

Electronic Frontier Foundation — How to: Use Tor
How Tor hides your address from the sites you visit, and what it leaves visible.
https://ssd.eff.org/module/how-to-use-tor

Electronic Frontier Foundation — Choosing the VPN That’s Right for You
What a VPN changes about who sees your address and traffic, and why it is not a tool for anonymity.
https://ssd.eff.org/module/choosing-vpn-thats-right-you

Technical reference and lookup tools

Mozilla (MDN Web Docs) — User-Agent header
What your browser tells servers about itself with each request, and why browsers now send less.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/user-agent

BrowserLeaks — My IP Address
A free test page showing the IP address a site sees, with an approximate location, ISP and organisation; used in step 1.
https://browserleaks.com/ip

RIPE NCC — RIPEstat
The open data service of a Regional Internet Registry: search an IP address to see who it is registered to and which network announces it.
https://stat.ripe.net/

Links checked in November 2026. If an address changes, searching for the title on the organisation’s site usually finds it.

F. The Cyber Welfare Framework: Skills, Awareness, Secure Behaviour

This resource sits on the Awareness pillar at level FL2 – Beginner: seeing the basic traces of a connection clearly before choosing any tool.

Skills

• Finding the IP address a site sees for your connection.
• Comparing the address on Wi-Fi with the one on mobile data.
• Listing who can see each address: sites, the network you are on, your provider.

Awareness

• Understanding that an IP address points to a connection and a rough area, not to a person or a street.
• Recognising metadata (time, device, site) as an envelope that HTTPS does not seal.
• Seeing that anonymity is about links, and that signing in is one of the strongest.

Secure Behaviour

• Deciding, activity by activity, whether a stable link is acceptable to you.
• Keeping separate accounts or email addresses for activities you want kept apart.
• Changing who sees your address for specific tasks, for a reason you can name.

G. Questions to sit with

• Which of your online activities would you be happy to have linked together, and which would you rather keep apart?
• When you think of yourself as “anonymous” somewhere, is it your name that is hidden, or your connection too?
• Who would you rather trust with your address and the times you connect: the sites you visit, your provider, or another service?

H. What to do now

The recommendations (R) and security measures (MS) from the Cyber Welfare database that apply most directly here.

1. Know what your connection shows

• R9 — Browse only over HTTPS: it protects what you read and send, while the site’s name and the time of your visit remain visible to the network.
• R12 — Turn off Bluetooth and location when you are not using them: your phone’s location setting is a separate trace from the rough location your IP address suggests, and switching one off does not change the other.

Minimum commitment: today, do step 1 once and write down who can see the address you found.

2. When you want to loosen the link

• R11 — Use a VPN for sensitive traffic on networks you do not trust: sites then see the VPN server’s address instead of yours, while the EFF notes that your browsing is “all visible to the VPN provider”. Choosing one is covered later in this course.
• Tor Browser sends your traffic through three relays, which hides your IP address from the sites you visit; signing in still identifies you, and the Tor network is blocked in some countries, so check what applies where you are. A later section of this course looks at it in detail.

Minimum commitment: choose one activity you would like kept apart from your name, and decide which link to loosen first: the account, or the address.

In short

• What your IP address reveals: a connection, a provider and a rough location, not a name or a street address.
• Addresses often change and are sometimes shared, but while yours stays the same it links your visits together.
• Metadata (address, time, device, site) is the envelope of each visit; HTTPS protects the letter, not the envelope.
• Anonymity starts with seeing these links. Then you can choose which to keep and which to loosen.

Related resources in this course

• How Websites Recognise You: Cookies, Ad IDs and Logins
• Re-identification: Why a Few Details Can Identify You
• Browser Fingerprinting Test: Check Yours with Cover Your Tracks

Discover more companion resources from the online courses of the Protect Your Digital Privacy programme.