Privacy-Respecting Browsers and Search: Plain Guide

Every time you browse or search, companies you have never heard of can record what you look at and build a picture of you. This guide explains, in plain English, how that tracking works and which settings in the browser you already use can cut it down. It also covers search engines, private browsing, and a newer privacy signal that tells websites not to sell your data. It is written for individuals, families, older people and very small businesses. We describe features, not products: every major browser now has some tracking protection, and the right choice is the one you will keep using and keep up to date.

Key takeaways

Your current browser can do more than you think. Firefox, Safari, Edge and Chrome all have privacy settings; turning on the stronger ones takes a few minutes.
Private or Incognito mode is not invisible mode. It stops your own device keeping a history, but websites, your employer and your internet provider can still see what you do.
Search history is often stored in your account, not just your browser. Check your account's activity page and set it to delete itself automatically.
Global Privacy Control (GPC) sends a "do not sell or share" message. Some browsers send it by default, and in California businesses must treat it as a valid opt-out.
Privacy and security go together. Keep the browser updated, keep extensions to a minimum and use a password manager rather than saving everything in risky places.

How tracking works, in plain words

You do not need to understand the technology to protect yourself, but a few terms help you read the settings menus.

Cookies: small files a website stores in your browser. A "first-party" cookie comes from the site you are on and often does useful things, such as keeping you logged in or remembering your basket. A "third-party" or "cross-site" cookie comes from another company embedded in the page, such as an advertiser, and can follow you from site to site.
Trackers: hidden pieces of code, often in adverts, "like" buttons and embedded videos, that report your visit back to another company.
Fingerprinting: a way of recognising your device without cookies, by combining details such as your screen size, fonts and browser version into a near-unique "fingerprint". Clearing cookies does not reset it.
Your IP address: the internet address of your connection. It roughly reveals your location and your internet provider.
Search history: what you type into a search engine. If you are signed in to an account, it may be saved to that account as well as your browser.

Put together, these let advertising networks and data brokers build a profile of your interests, health worries, money situation and location. Some of that data is later sold on. If you want to find and remove data that has already been collected about you, see the Deleting Your Data From Brokers Guide.

Turn on the privacy settings you already have

Menus change between versions, so if a name below does not match exactly, look in the browser's Settings under "Privacy" or "Privacy and security".

Browser	Setting to look for	What it does
Firefox	Settings, Privacy & Security, Enhanced Tracking Protection: Standard, Strict or Custom	Standard (the default) blocks social media trackers, cross-site tracking cookies, cryptominers and fingerprinters. Strict also blocks all cross-site cookies and tracking content in every window, but may break some logins, comments or videos.
Firefox	Total Cookie Protection	On by default. Keeps each cookie limited to the site that set it, so it cannot follow you around.
Safari (Mac, iPhone, iPad)	Settings, Privacy, Prevent cross-site tracking	Limits trackers that follow you between sites. Safari also shows websites a simplified version of your system to make fingerprinting harder, and has a Privacy Report listing trackers it has blocked.
Microsoft Edge	Settings, Privacy, search and services, Tracking prevention: Basic, Balanced or Strict	Balanced is the usual default. Strict blocks more trackers but may stop parts of some sites working.
Google Chrome	Settings, Privacy and security, Third-party cookies	Lets you block third-party cookies. Incognito windows block them by default.
Any browser that supports it	Global Privacy Control (GPC)	Sends a "do not sell or share my data" signal to every site you visit. Some browsers have it on by default; in Firefox it is in the settings.

Set it up in 10 minutes

Update the browser. Open its "About" page, which checks for and installs updates. Old versions miss both security fixes and newer privacy protections.
Raise the tracking protection level one notch. In Firefox, choose Strict; in Edge, try Strict; in Safari, make sure Prevent cross-site tracking is ticked; in Chrome, block third-party cookies. In Firefox you can click the shield icon to the left of the address bar, then Protection Settings, to get there quickly.
Reload your open tabs so the change takes effect.
Turn on GPC if your browser offers it.
Choose your search engine in the browser's search settings (see the next section).
Review extensions. Remove any you do not recognise or no longer use. Each one can see some or all of the pages you visit.
Test your usual sites. If something you rely on, such as your bank, stops working, most browsers let you relax protection for that one site rather than for everything. In Firefox the shield icon shows whether protection is on or off for the site you are on.

To undo a change, go back to the same setting and pick the previous level. Nothing here deletes your data or passwords.

Private browsing: what it does and does not do

Private windows go by different names: Private Browsing in Firefox and Safari, InPrivate in Edge, Incognito in Chrome. Google's own help page for Incognito is clear about the limits, and the same broad points apply to all of them.

It does: keep no record of the sites you visited on your device once you close all private windows, delete cookies from that session when you close it, and avoid signing you in automatically. Chrome's Incognito also blocks third-party cookies by default.
It does not: make you invisible. Websites you visit can still collect information about you. Your school, employer or internet provider can still see your activity on their network. Downloads and bookmarks you save stay on the device.
Watch out: if you sign in to an account inside a private window, that account may still record what you search for.

Private browsing is good for using a shared or borrowed computer, or for keeping a gift search away from the family laptop's history. It is not a substitute for the tracking settings above.

Choosing and setting up a search engine

Search engines differ in how much they record. When comparing them, look at their published privacy policy for these points rather than at advertising claims:

Is search history saved to an account? Some engines store your searches against your account so they can personalise results and adverts. Others say they do not keep a search history tied to you.
Are adverts based on you or on the search? "Contextual" adverts are based only on what you just typed. "Personalised" adverts use a profile built over time.
What happens to your IP address? Some engines say they discard or shorten it quickly.
Can you search without signing in? Almost all can. Being signed out reduces what is linked to you.

If you keep using a search engine linked to an account you use for email or photos, you can still cut down what is kept. For a Google account, for example, Google's help explains how to do this:

Go to your Google Account and open Data & privacy.
Under History settings, choose Web & App Activity. You can turn it off, or turn it off and delete past activity.
If you leave it on, choose Auto-delete and pick how long to keep activity. Google says some data, such as location information and IP address in this activity, is deleted after 30 days whatever you choose.
To clear past searches, visit My Activity (myactivity.google.com), choose Delete, then All time, or delete just Search.
Remember to clear your browser history separately, as it is stored in a different place.

Other search providers and AI chat tools have similar history pages. If you use AI chatbots to search, see the Safe Use of AI Chatbots Guide.

Deciding how far to go

More privacy can mean more inconvenience. Pick the level that matches your situation.

Most people: an up-to-date mainstream browser with tracking protection raised one level, GPC on, few extensions, and search history set to auto-delete. This removes much of the everyday tracking with little effort.
Families and shared devices: give each person their own browser profile or device account so histories and logins do not mix. Use private windows for one-off use by guests.
People with higher risk, such as someone leaving an abusive relationship or a journalist: also think about who can access your devices and accounts, not just websites. The Spyware and Stalkerware Guide covers this.
Very small businesses: agree one browser and keep it updated on every device, keep work and personal browsing in separate profiles, and do not let staff install extensions freely. For organisations, see the Enterprise Browser and Browser Security Guide.

Switching browsers is a reasonable choice, but it is not required. A well-configured browser you keep updated is better than a "privacy" browser you abandon. If you switch, export your bookmarks first, and move saved passwords into a password manager rather than leaving them scattered. The Password Managers Explained for Everyone Guide explains how.

Signs something is wrong

Your home page or search engine changed without you doing it.
New toolbars, extensions or pop-ups appeared that you did not install.
Searches are sent through an unfamiliar site before showing results.
Adverts appear on sites that never used to have them, or pop up even when the browser is closed.

These usually point to an unwanted extension or program. Remove unknown extensions, reset the browser's settings (all major browsers offer a reset option in Settings), and run your device's built-in security scan. Then change passwords for important accounts from a clean device, and turn on two-step sign-in, as explained in the Two-Factor Authentication for Everyone Guide.

Common failure patterns

Trusting private mode too much. People assume Incognito hides them from websites or their employer. It does not.
Installing lots of "privacy" extensions. Every extension can read pages you visit, and a popular extension can be sold or hijacked. One or two well-known ones are plenty, and the built-in protections may be enough.
Turning everything to maximum, then turning it all off. Strict settings sometimes break a site. Allow that one site instead of disabling protection everywhere.
Forgetting the account. Clearing browser history while staying signed in to a search account that keeps everything.
Not updating. An out-of-date browser is a security risk, whatever its privacy settings.
Using one browser profile for everyone. Shared profiles mix histories, saved passwords and logins on a family computer.

Where to get help

UK: the Information Commissioner's Office (ICO) explains your data rights, including asking companies to delete data. The National Cyber Security Centre (NCSC) and Get Safe Online publish general online safety advice, and Citizens Advice can help with scams.
US: the Federal Trade Commission explains people search sites and data brokers in its consumer advice. California residents can use the state's free DROP service to ask registered data brokers to delete their data.
Browser help pages: Mozilla, Apple and Google each explain their own settings, and are updated when menus change.

Practitioner checklist

Update your browser today, and make sure automatic updates are on.
Raise tracking protection one level (Strict in Firefox, Prevent cross-site tracking in Safari, Strict or Balanced in Edge, block third-party cookies in Chrome).
Turn on Global Privacy Control if your browser offers it.
Remove extensions you do not use or recognise.
Choose a search engine after reading what it says about history, adverts and IP addresses.
Set your search account's activity to auto-delete, or turn it off.
Use private windows on shared or borrowed devices, and sign out when finished.
Give each family member their own browser profile or device account.
Check once a year that your settings are still as you left them after updates.

Privacy-Respecting Browsers and Search Guide: Plain-English Steps to Stay Safe