Browser privacy settings are a short list, not a personality. Four or five switches change what advertisers and data brokers can collect about you, and everything beyond that is either cosmetic or actively breaks the sites you use. Here is what is worth changing, in the order it pays off.
Block Third-Party Cookies, Then Fix What Breaks
In Chrome, open chrome://settings/cookies and choose “Block third-party cookies”. The equivalent menu path is Settings → Privacy and security → Third-party cookies. Chrome also runs an “Ad privacy” page at chrome://settings/adPrivacy with three toggles — Ad topics, Site-suggested ads and Ad measurement — and turning all three off removes the profile-based part of its advertising without affecting normal browsing.
Expect collateral damage. A blocked third-party cookie will log you out of embedded comment widgets, break some single-sign-on redirects, and stop a few shopping carts from remembering your basket. The fix is not to switch blocking off; click the eye icon in the address bar and allow that one site. Google’s own instructions on managing cookies in Chrome cover the per-site exception flow.
On Edge, open edge://settings/privacy and set Tracking prevention to “Balanced”. “Strict” blocks more but breaks more, and Edge tells you exactly what it blocked when you click the icon beside the address bar, so you can loosen one site instead of the whole mode.
Firefox: One Slider Does Most of the Work
Firefox ships the strongest default of the major browsers. Go to Settings → Privacy & Security → Enhanced Tracking Protection and move from Standard to Strict. That single change blocks cross-site trackers, social media trackers, fingerprinting scripts and known cryptominers, using the Disconnect blocklist. Mozilla documents exactly what each level blocks in its tracking protection guide.
Strict will break embedded videos, some payment iframes and a few retail checkout flows. When a page misbehaves, click the shield icon in the address bar and turn protection off for that domain only — the exception persists, so you fix it once.
Two more switches on the same panel are worth the minute: enable “Delete cookies and site data when Firefox is closed” and add your bank and email to the exceptions list, and set “Send websites a Do Not Track signal” to Always. The last one is largely ignored by sites, but it costs nothing.
Safari Changes Two Things on iPhone and Mac
On iOS, open Settings → Safari → Privacy & Security. “Prevent Cross-Site Tracking” is on by default and stops third-party cookies from following you between sites; leave it there. “Hide IP Address” should be set to “From Trackers and Websites” — this routes known trackers through Apple’s relay and hides your address from them.
On a Mac the same controls live in Safari → Settings → Privacy, and Apple’s cross-site tracking guide explains the exceptions you can grant per site. iCloud Private Relay, which hides your IP from your provider as well, is a paid iCloud+ feature rather than a free switch — worth knowing before you go looking for it.
Your Google Account Collects More Than the Browser
Browser settings govern one device. The account-level history follows you across every device you sign into, so it matters more. Open myactivity.google.com, choose Web & App Activity, and set auto-delete to 3 months rather than the default 18. Do the same for YouTube History and Location History.
Then open myadcenter.google.com and turn off personalised ads. You will still see advertising, but it will be guessed from the page you are on rather than assembled from months of searches. Both settings apply to the account, not the browser, so they survive a reinstall — unlike a cookie preference, which is why they are the higher-value five minutes.
Audit Extensions and Stop There
Open chrome://extensions or about:addons in Firefox and count what is installed. Any extension with permission to “read and change all your data on all websites” can see every page you load, including your bank. Delete what you have not used in a month, and for the rest open Details → Site access and switch to “On click” so it runs only when you ask.
Skip the rest of the genre. Incognito mode does not hide your traffic from your ISP or your employer; it only avoids local history. Installing four tracking blockers at once produces broken pages and no measurable gain, and “anti-fingerprinting” extensions can make you more distinctive rather than less. And if a public network is involved, the habits in public Wi-Fi safety tips matter more than any setting on this page.
One last housekeeping step, because blocked trackers and a full cache produce confusing behaviour: clear site data occasionally, following the cache cleanup method that preserves logins. Settings you cannot troubleshoot are settings you will switch back off.