Cybersecurity Foundations (Grades 6–8) · lesson 29 of 48 · 8 min
Taking Control of Your Browser’s Privacy Settings
Your browser is one of the most data-hungry applications on your device. Every site you visit, every search you make, and sometimes your physical location is collected, stored, and often shared with third parties. Browser privacy settings are the controls that let you decide how much of that information gets collected and shared.
Adjusting these settings does not make you invisible online, but it does significantly reduce how much data advertisers, trackers, and data brokers can gather about your habits. It also reduces your exposure to certain types of attacks.
By the end of this lesson you will be able to identify and configure the most important browser privacy settings, explain what incognito mode does and does not do, describe cross-site tracking and how to limit it, and apply these settings across Chrome, Firefox, Safari, and Edge.
Cross-site tracking in action
Have you ever searched for something on one site and then seen ads for it everywhere else? That is cross-site tracking at work. Advertisers place small files (cookies) and invisible trackers on websites you visit. These trackers follow you across the internet, building a detailed profile of your interests, habits, and behaviour. Browser privacy settings can significantly limit — though not fully stop — this kind of tracking.
Key Privacy Settings to Know
Last verified
These instructions were verified against Chrome 126, Firefox 137, Safari 17, and Edge 126 in September 2026. Browser interfaces change frequently — if a menu path has moved, search your browser’s help pages for the setting name.
Do Not Track (DNT) — no longer recommended
Do Not Track was a browser signal that asked websites not to track you. It was never legally binding and most advertising networks ignored it. Mozilla removed DNT from Firefox starting with version 135 (released January 2025) because the feature provided a false sense of privacy without meaningful protection. Chrome and Edge have also deprecated it. Do not rely on DNT. Use cookie blocking and privacy-focused extensions instead.
Reference: Mozilla Support — Do Not Track
How to adjust privacy settings — by browser
The steps below apply to the current desktop versions of each browser as of September 2026. Mobile browsers have similar settings under their respective Settings or Privacy menus.
School-managed devices — alternative activity
If your school manages your device, you may not be able to change browser settings. That is normal and expected — your school’s IT team has already applied security policies. Instead of changing settings, try this alternative activity:
- Open your browser and visit a news website.
- Right-click anywhere on the page and choose “Inspect” (or press F12).
- Click the “Application” tab, then “Cookies” in the left panel.
- Count how many different domains have set cookies on that one page.
- Discuss: which of those domains are third parties (not the news site itself)?
This shows you how many trackers are active on a typical page without changing any settings.
Private / Incognito Mode — What It Actually Does
Private browsing (called Incognito in Chrome, Private Window in Firefox/Safari) does NOT make you anonymous. It only prevents your browser from saving your history, cookies, and form data on your device.
Common misconception
Many students think incognito mode hides everything. It does not. Your school network administrator, your internet provider, and the websites you visit can still see your activity. Incognito is for local privacy on a shared device — nothing more.
Browser Extensions and Privacy
Browser extensions are small programs that add features to your browser. Some are genuinely useful — ad blockers, password managers, grammar checkers. But extensions have broad access to your browsing activity, so a malicious extension can steal passwords, inject ads, or track everything you do.
Safe extension habits
Only install extensions from the official browser store (Chrome Web Store, Firefox Add-ons, etc.). Before installing, check: How many users does it have? When was it last updated? What permissions does it request? An extension that asks for access to “all websites” and “your clipboard” for a simple task is a red flag.
Audit your browser privacy settings in 5 minutes
Open browser settings Chrome: three-dot menu → Settings → Privacy and security. Firefox: hamburger menu → Settings → Privacy & Security. Safari: Safari menu → Settings → Privacy. Edge: three-dot menu → Settings → Privacy, search, and services. Block third-party cookies Chrome: Cookies and other site data → Block third-party cookies. Firefox: Enhanced Tracking Protection → Strict (this blocks trackers automatically). Safari: Enable “Prevent cross-site tracking”. Edge: Tracking prevention → Strict. Review site permissions Go to “Site settings” or “Permissions”. Check Location, Camera, Microphone, Notifications. Set each to “Ask before accessing” or “Block”. Audit installed extensions Chrome: chrome://extensions. Firefox: about:addons. Edge: edge://extensions. Remove any extension you do not recognise or no longer use. Check permissions on the ones you keep. Consider a privacy-focused extension uBlock Origin (available for Chrome, Firefox, Edge) blocks ads and trackers effectively. Privacy Badger (EFF) learns to block invisible trackers. These are not required but significantly reduce tracking.
Key Terms
Sorting Activity — Privacy Setting or Not?
- Blocking third-party cookies in browser settings
- privacy
Third-party cookies are the main tool advertisers use for cross-site tracking. Blocking them significantly reduces tracking.
- Installing a browser extension from a random website
- risk
Extensions from unofficial sources may be malware. Only install from official browser extension stores.
- Setting location access to “Ask before accessing”
- privacy
This prevents sites from silently reading your location. You stay in control of when it is shared.
- Allowing all notification requests from websites
- risk
Notification permissions can be abused to show fake security alerts and scam pop-ups.
- Using incognito mode on a shared school computer
- privacy
Incognito prevents your session data from being saved locally — useful on shared devices.
- Saving your bank password in the browser autofill
- risk
Browser-saved passwords are less secure than a dedicated password manager and can be accessed if someone gets into your browser profile.
Knowledge Check
Browser Privacy Settings
What does incognito / private browsing mode actually prevent?
- Your ISP from seeing your activity
- Websites from seeing your IP address
- Your browser from saving local history and cookies after the session
- Advertisers from tracking you during the session
Answer: Your browser from saving local history and cookies after the session
Incognito only prevents local storage of history and cookies. Your ISP, network admin, and websites can still see your activity.
Which type of cookie is most associated with cross-site advertising tracking?
- First-party cookies
- Third-party cookies
- Session cookies
- Secure cookies
Answer: Third-party cookies
Third-party cookies are set by domains other than the site you are visiting — typically advertisers who track you across many sites.
Do Not Track (DNT) legally requires websites to stop tracking you.
- True
- False
Answer: False
DNT was a voluntary signal that websites were never legally required to honour. Most advertising networks ignored it, and Mozilla removed DNT from Firefox 135+ because it provided a false sense of privacy without real protection.
What is the safest place to install a browser extension?
- Any website that offers a download link
- The official browser extension store (e.g. Chrome Web Store)
- A link shared in a forum or social media post
- An email attachment
Answer: The official browser extension store (e.g. Chrome Web Store)
Official browser stores review extensions for malware. Third-party sources have no such vetting.
Cookies set by advertisers on sites you visit are called _____ cookies.
Answer: third-party
Third-party cookies are placed by domains other than the one you are visiting — usually ad networks and trackers.
Real-World Case Studies
Case 1: Facebook’s Cross-Site Tracking
Facebook’s “Like” button and tracking pixel appear on millions of websites. Even if you never click them, they report your visit to Facebook — building a profile of your browsing habits across the entire web. In 2019, the Irish Data Protection Commission fined Facebook €265 million for data privacy violations. Browser settings that block third-party cookies and trackers prevent this kind of cross-site tracking. Firefox’s Enhanced Tracking Protection blocks Facebook’s trackers by default.
Case 2: Browser Fingerprinting — The Tracking That Cookies Cannot Stop
Even with all cookies blocked, websites can identify you through browser fingerprinting — collecting details about your browser version, screen resolution, installed fonts, time zone, and other settings to create a unique “fingerprint.” Studies show that browser fingerprints are unique for over 90% of users. This is why privacy tools like Tor Browser randomise these values. The lesson: privacy is a layered problem — blocking cookies is important but not sufficient on its own.
Previous lesson: Safe browsing on Windows
Back to Cybersecurity Foundations (Grades 6–8)
Next lesson: Cookies and tracking