When you navigate to a URL in Safari, it’s first sent to Apple, which strips out your identifying IP address information, and then sends it on to a second server - maintained by an as-yet-unidentified third party - to assign a new, temporary IP address. Apple says Private Relay is actually more secure than a traditional VPN, noting that traffic is masked twice.
