A way of wrapping one kind of network traffic inside another so it can cross a network that would not otherwise carry it.
Like putting a parcel inside a bigger box so a different courier will carry it, though the bigger box has no lock.
Network covers the managed firewall and switches that sit behind your provider's modem.
Is a tunnel like this private?
Not on its own. It needs encryption added, which is why it is usually paired with IPsec.

Every WILDCARD card exists to solve one named problem. Find yours.