Browsers bury a genuinely useful amount of privacy control a few menus deep. None of it requires installing anything extra — mostly a matter of knowing it exists.
Cookies and Site Data
Session cookies keep you logged in; third-party tracking cookies let advertising networks build a profile of your browsing across unrelated sites. Chrome, Edge, and Firefox all offer settings to block third-party cookies while keeping first-party cookies, preserving most site functionality while cutting cross-site tracking substantially. Firefox's Enhanced Tracking Protection and Safari's Intelligent Tracking Prevention block third-party cookies by default already; Chrome and Edge generally require it to be enabled manually.
Site Permissions
Sites can request location, camera, microphone, and notification access. Worth periodically reviewing under Settings > Privacy and Security > Site Settings, since permissions granted years ago for a site you no longer use often remain active until manually revoked.
HTTPS-Only Mode
Forces the browser to attempt an encrypted connection for every site and warns before falling back to unencrypted HTTP. With the overwhelming majority of the web now on HTTPS, the day-to-day impact is minimal while closing off a class of attacks on shared or public networks.
Search Engine and Autofill Data
Your default search engine sees every query typed into the address bar. Some providers build advertising profiles from search history; others, such as DuckDuckGo, are built around not doing so. Switching is usually a two-minute settings change. Saved autofill data (addresses, cards) is convenient but worth reviewing periodically, especially on a shared computer.
A common misconception about private browsing
Private/incognito mode prevents your browsing history and cookies from being saved locally after you close the window. It does not hide activity from your internet provider, your employer's or school's network, or the sites you visit — it's a local-privacy tool for shared devices, not anonymity on the network.
Fingerprinting Protection
Beyond cookies, sites can identify you through "fingerprinting" — combining screen resolution, installed fonts, browser version, and hardware details into a unique-enough profile, without storing anything on your device. Firefox and Safari both include fingerprinting-resistance features (Firefox's under Enhanced Tracking Protection's Strict mode), though this remains a harder problem to fully solve than cookie tracking.
Extensions: A Privacy Trade-off Worth Weighing
Extensions can meaningfully improve privacy (ad and tracker blockers) but can also become a risk themselves, since many request broad permission to read and modify data on every site you visit. Before installing one, check what permissions it requests against its stated purpose, who publishes it, and how recently it's been updated — and periodically audit and remove ones you no longer use.
A Reasonable Starting Configuration
- Enable tracking protection at "standard" or "balanced" rather than the most aggressive setting, which can occasionally break site functionality
- Enable HTTPS-only mode
- Review and revoke unused site permissions every few months
- Choose a search engine whose data practices you're comfortable with
- Keep the browser updated, since privacy and security patches ship together
Frequently Asked Questions
Does private/incognito mode make me anonymous online?
No. It only prevents local storage of your browsing history and cookies on the device you're using. Your internet provider, network administrator, and the websites you visit can still see your activity.
Do I need a separate tracker-blocking extension if my browser has built-in tracking protection?
Firefox and Safari include meaningful built-in tracking protection by default. Chrome and Edge historically offered less by default, though this has been evolving — check your specific browser's current settings to see what's already active.
Is blocking all cookies a good idea?
Blocking third-party cookies specifically, rather than all cookies, is usually the better trade-off — it substantially cuts cross-site tracking while keeping normal functionality like staying logged in intact.