Browsers ship with dozens of privacy-relevant settings buried a few menus deep. None of it requires installing anything extra — it's mostly a matter of knowing what exists and what trade-offs each setting involves.
Cookies and Site Data
Cookies are small pieces of data websites store in your browser to remember information between visits — session cookies keep you logged in, while third-party tracking cookies let advertising networks build a profile of your browsing across many unrelated sites. Chrome, Edge, and Firefox all offer settings to block third-party cookies while still allowing first-party cookies from the site you're actually visiting, which preserves most site functionality (staying logged in, shopping carts) while substantially reducing cross-site tracking.
Firefox's "Enhanced Tracking Protection" and Safari's "Intelligent Tracking Prevention" both block third-party tracking cookies by default already. Chrome and Edge require it to be enabled manually in most current versions, found under Privacy and Security settings.
Site Permissions
Websites can request permission to access your location, camera, microphone, and notifications. It's worth periodically reviewing which sites you've granted these to — under something like Settings > Privacy and Security > Site Settings — since permissions granted years ago for a site you no longer use often remain active indefinitely until manually revoked.
HTTPS-Only Mode
This setting forces the browser to attempt an encrypted HTTPS connection for every site, and warns you before falling back to an unencrypted HTTP connection. Since the overwhelming majority of the web now supports HTTPS, this has minimal day-to-day impact while closing off a class of attacks that intercept unencrypted traffic, particularly relevant on shared or public networks.
Search Engine and Autofill Data
Your default search engine sees every query you type into the address bar. Some search providers build advertising profiles from search history; others, such as DuckDuckGo, are specifically built around not doing so. Changing your default search engine is usually a two-minute setting change under browser preferences. Separately, saved autofill data (addresses, payment cards) is convenient but worth reviewing periodically, especially on a shared or public computer.
Private/Incognito Browsing — What It Actually Does
A common misconception
Private browsing prevents your browsing history, cookies, and site data from being saved locally on your device after you close the window. It does not hide your activity from your internet service provider, your employer or school network, or the websites you visit. It's a tool for local privacy on a shared device, not for anonymity on the network.
Fingerprinting Protection
Beyond cookies, sites can identify and track you through "fingerprinting" — combining details like your screen resolution, installed fonts, browser version, and hardware configuration into a unique-enough profile, without needing to store anything on your device at all. Firefox and Safari both include fingerprinting-resistance features (Firefox's is found under Enhanced Tracking Protection's "Strict" mode). This is a harder problem to fully solve than cookie tracking, and remains an active area of browser development.
Extensions: A Privacy Trade-off Worth Weighing Carefully
Browser extensions can meaningfully improve privacy (ad and tracker blockers) but can also themselves become a privacy or security risk, since many extensions request broad permission to read and modify data on every site you visit. Before installing an extension:
- Check what permissions it requests and whether they match its stated purpose
- Review who publishes it and how recently it's been updated
- Periodically audit your installed extensions and remove ones you no longer use
A Reasonable Starting Configuration
You don't need to change every setting to see meaningful improvement. A practical baseline for most users:
- Enable tracking protection at the "standard" or "balanced" level (rather than the most aggressive setting, which can occasionally break site functionality)
- Enable HTTPS-only mode
- Review and revoke unused site permissions every few months
- Choose a search engine whose data practices you're comfortable with
- Keep the browser itself updated, since privacy and security patches ship together
Frequently Asked Questions
Does private/incognito mode make me anonymous online?
No. It only prevents local storage of your browsing history and cookies on the device you're using. Your internet provider, network administrator, and the websites you visit can still see your activity.
Do I need a separate tracker-blocking extension if my browser has built-in tracking protection?
Firefox and Safari include meaningful built-in tracking protection by default. Chrome and Edge historically offered less by default, though this has been changing — checking your specific browser's current privacy settings is the most reliable way to know what's already active.
Is blocking all cookies a good idea?
Blocking third-party cookies specifically (rather than all cookies) is usually the better trade-off, since it substantially reduces cross-site tracking while keeping normal site functionality like staying logged in intact.