Browser privacy settings most people never touch

Your browser is where the tracking economy actually lives — not in dramatic hacks, but in defaults: third-party cookies on, permissions granted and forgotten, sign-in sync quietly bundling your history with your account. None of this requires genius to fix, and none of it requires extensions either. One pass through the settings below takes about fifteen minutes. Menu names drift between browsers and versions on purpose, so these are organized by concept — every major browser has a settings page for each.

Third-party cookies and tracking protection

The big one. Third-party cookies are how a shop's ad follows you to a news site; blocking them is a single toggle in the privacy section. Set tracking protection to its strict level — the standard level deliberately leaves exemptions that advertisers pay for, and strict rarely breaks anything you can't fix by a single sign-in. Do not nuke all cookies wholesale: deleting first-party cookies signs you out of everything and achieves little, since the trackers you care about are the third-party ones. While you're there, decline the "pre-load pages for speed" nicety if your browser offers it — it visits links before you click them, which is exactly what it sounds like.

Permissions, revoked like app permissions

Browsers grant sites camera, microphone and location access the same way phones grant apps — and collect the same forgotten grants. The site-permissions page lists everything with access; revoke anything you can't explain, and set location and notifications to "ask" rather than remembering a yes from 2023. This is the browser chapter of the same discipline as phone app permissions: access you forgot about is access you're still giving.

Sign-in sync: the trade nobody reads

Being signed into the browser itself (for bookmarks, tabs, passwords) is genuinely convenient — and it hands your full browsing history to that company's account profile, tied to your name. Decide deliberately: either keep the convenience and review the activity controls on that account (the same dashboards as the smart-speaker privacy piece — same companies, same controls), or use the browser signed out and accept manual bookmarks. What you shouldn't be is signed in without knowing it.

Private windows, demystified

Private mode clears local traces — history and cookies on your machine after the window closes. It does not hide activity from the sites you visit, your workplace network, or your provider; it's a shared-computer and gift-shopping tool, not anonymity. Expecting anonymity from it is the same category error as expecting it from a VPN — different layer, same illusion.

The rest of the pass, quickly

Search engine: switch to one that doesn't build an ad profile on queries — it's one dropdown and it changes what your search bar leaks daily. Autofill: browser-stored cards and addresses are convenient; know that they're there and protect the browser accordingly. Do Not Track: the toggle is honest but nearly toothless — it's a request most trackers ignore; enable it, don't rely on it. Extensions: every extension can read most of what you browse; keep the few you'd defend out loud, delete the rest — the logic is identical to what free apps do with your data. Profiles: if work and life share a computer, separate browser profiles contain the cookies, history and sign-ins apart — cleaner than any cleanup ritual.

Do the pass today, then forget about it: cookie settings, strict protection, permissions revoked, sync decision made, search engine switched. The tracking economy assumes you'll never open that settings page; the entire advantage is that you did.