Usually it's ran on the VPN server so it's just tunneled in the VPN but you can add it to your browser or router for when you don't use a VPN (bank logins or other stuff)