What your ISP sees — DNS, SNI, IP and timing — and how a VPN hides your activity in an encrypted tunnel. The role of no-logs, DNS leaks, and a kill switch.…