10.4 Browsers, VPNs & Private Search

Your browser is the most active data-collection interface on your device. Every page you load, every search you run, and every form you fill passes through it — along with dozens of invisible third-party trackers embedded in the sites you visit. Choosing and configuring the right browser is one of the highest-leverage privacy decisions you can make.

The browser privacy spectrum

At the tracking-heavy end: Google Chrome has the largest market share and the most powerful sync features — but it is built by a company whose revenue depends on advertising. Chrome historically offered weak third-party tracking protection by default, though Google has been pressured to improve its privacy story.

Mid-range: Apple Safari (macOS/iOS) and Microsoft Edge include some built-in tracking protection and are faster to block known fingerprinters. Both have commercial incentives that are less advertising-centric than Chrome.

Mozilla Firefox is open-source and offers strong privacy settings out of the box, with additional hardening possible via settings changes. The Electronic Frontier Foundation (EFF) recommends Firefox with the uBlock Origin extension as a strong general-purpose privacy-respecting combination.

Brave has the most aggressive built-in tracker blocking of any mainstream browser — it blocks ads and fingerprinting attempts by default without needing extensions.

Tor Browser routes your traffic through the Tor anonymity network, making it very difficult to trace browsing to you. It is the gold standard for anonymity but is significantly slower and incompatible with some sites. Best reserved for high-sensitivity use.

Key extensions: uBlock Origin and Privacy Badger

uBlock Origin is a wide-spectrum content blocker — it blocks ads, tracking scripts, and malware-distribution domains. It is lightweight, open-source, and considered the most effective ad/tracker blocker available. Privacy Badger (developed by the EFF) learns which trackers follow you across sites and blocks them automatically — focusing specifically on tracking rather than ads.

What private/incognito mode actually dös

Private browsing prevents your browser from storing your history, cookies, and form data locally — on your device. It dös not hide your browsing from your internet service provider (ISP), your employer (if using a work network), the websites you visit, or your government. Incognito mode is a local privacy tool, not a network privacy tool. Using it at home on your own machine prevents a family member from seeing your history; it dös not prevent your ISP from logging which sites you visited.

VPNs: what they do and don't do

A Virtual Private Network (VPN) encrypts your internet traffic and routes it through a server operated by the VPN provider. This hides your traffic from your ISP and from anyone monitoring your local network (important on public Wi-Fi). However, the VPN provider now sees your traffic instead — which means trusting that provider's privacy policy. A VPN that logs your activity provides much weaker protection than one with a verified no-logs policy.

VPNs do not hide you from the websites you visit (they see the VPN server's IP), prevent site-level tracking via cookies or fingerprinting, or make you anonymous. For everyday privacy against ISP surveillance and public Wi-Fi snooping, a reputable VPN helps. For hiding from Google or Facebook, it dös not.

Privacy-respecting search engines

DuckDuckGo is the most widely adopted privacy-respecting search engine — it dös not build user profiles or filter results based on your history. Startpage proxies Google results without passing your identity to Google. Brave Search uses an independent index built by Brave. All three offer substantially less surveillance than Google or Bing.

DNS-over-HTTPS

Every website visit begins with a DNS query — a lookup that converts a domain name to an IP address. By default, these queries are unencrypted and visible to your ISP. DNS-over-HTTPS (DoH) encrypts these queries, preventing ISP-level DNS logging. Firefox and Brave enable DoH by default. You can also configure a privacy-respecting DNS resolver (Cloudflare's 1.1.1.1 or NextDNS) in your operating system settings.

Your takeaway

No single tool provides complete privacy — but layering a privacy-respecting browser, a good ad blocker, a cautious approach to VPN selection, and a non-profiling search engine creates a substantially more private browsing environment than the out-of-the-box defaults used by most people.