Cookies and Site Data
Cookies are small pieces of data websites store in your browser to remember things like login state or preferences. "First-party" cookies, set by the site you're actually visiting, are usually necessary for the site to function. "Third-party" cookies, set by a different domain embedded in the page (often for advertising or analytics), are the main target of most privacy settings, since they're commonly used to track browsing activity across many unrelated sites. Every major browser now offers a setting to block third-party cookies, found under Privacy and Security settings.
Tracking Protection
Beyond cookies specifically, browsers include broader tracking protection that blocks known tracking scripts, fingerprinting attempts (techniques that try to identify your device using subtle technical details rather than cookies), and cross-site tracking more generally. Chrome, Edge, Firefox, and Safari each implement this differently and under different names — for example, Firefox's "Enhanced Tracking Protection" and Safari's "Intelligent Tracking Prevention" — but the underlying goal across all of them is similar: limiting how much of your browsing can be linked together by outside parties.
Site Permissions
Websites can request permission to access your camera, microphone, location, notifications, and more. These permissions persist once granted, which means a site you allowed access to months ago may still have it. It's worth periodically reviewing the permissions page in your browser's settings (often listed as "Site Settings" or "Permissions") and revoking access for sites that no longer need it, particularly for camera, microphone, and location.
Sync and Account Settings
Signing into a browser with an account (a Google, Microsoft, or Apple account, for example) enables syncing bookmarks, passwords, and history across devices — genuinely convenient, but worth understanding: that data is stored on the provider's servers, encrypted according to their specific implementation. Reviewing exactly what's included in sync, and whether you want history included alongside passwords and bookmarks, is available in each browser's sync settings.
Private or Incognito Browsing
Private browsing windows don't save history, cookies, or site data locally once closed, which is useful for shared or borrowed devices. It's a common misconception that this mode also hides activity from your internet provider, employer network, or the websites themselves — it doesn't. For that level of privacy, a VPN or a network you trust more directly would be the relevant tool, not private browsing mode.
Extensions and Their Access
Browser extensions often request permission to "read and change all your data on websites you visit," which is a broad grant of access. This is sometimes genuinely necessary for the extension's function, but it's worth being selective — installing extensions only from developers with an established reputation, checking requested permissions before installing, and periodically removing ones you no longer use.
Default Search Engine Choice
Your default search engine sees every search query you type into the address bar, which for many people includes sensitive or personal questions. Some search engines emphasize not building an advertising profile tied to your searches, while others are supported primarily through personalized ad targeting. This is a matter of personal preference and trade-offs rather than a single correct answer, but it's worth an intentional choice rather than defaulting without thinking about it.
A Practical Settings Checklist
- Block third-party cookies (or set cookies to "block in incognito" at minimum).
- Enable the strictest tracking protection level your browsing habits can tolerate without breaking sites you rely on.
- Review camera, microphone, and location permissions for sites you no longer use.
- Check what's included in account sync and whether that matches your comfort level.
- Review installed extensions and remove ones you don't recognize or no longer need.
Frequently Asked Questions
Does private browsing mode hide my activity from my internet provider?
No. Private or incognito mode prevents the browser from saving local history, cookies, and site data on your device after the window closes, but your internet service provider and the websites you visit can still see your activity through the network connection itself.
Do I need a separate privacy-focused browser?
Not necessarily. Mainstream browsers now include substantial built-in tracking protection, and adjusting the default settings covered in this guide closes much of the gap. Dedicated privacy browsers may offer stronger defaults out of the box, but the difference is smaller than it used to be.
Are browser extensions a privacy risk?
They can be, since many request broad permissions to read or modify data on every website you visit. Installing only extensions you actually need, from developers with an established reputation, and periodically reviewing what's installed reduces this risk.