Private by Default

The web's business model is a barter you never explicitly signed: free services in exchange for a behavioral file on you. Knowing the plumbing turns vague unease into fixable specifics.

Cookies are small identifiers sites store in your browser. First-party cookies (set by the site you're visiting) do useful work — they keep you logged in. Third-party cookies are set by other domains embedded in the page — ad networks, analytics, social widgets — and because the same ad network is embedded across thousands of sites, it recognizes its cookie everywhere you go. That's cross-site tracking: a browsing biography assembled by companies you never visited on purpose. Browsers have been phasing third-party cookies out, which brings us to the successor.

Fingerprinting identifies you with no stored identifier at all. Your browser freely reports its version, fonts, screen resolution, timezone, language, hardware quirks — each mundane alone, but combined they're distinctive. Research by the EFF dating back to its 2010 Panopticlick study found the large majority of browsers uniquely identifiable from configuration alone. There's nothing to delete; the fingerprint is your setup.

Downstream sit data brokers — companies you've never heard of that buy, aggregate, and resell all of it: browsing signals, purchase histories, location pings from app SDKs, plus public records. The product is a dossier keyed to you, sold to advertisers, insurers, people-search sites, and anyone with a checkout button. That last customer category is why privacy is a security issue: broker files are pre-assembled OSINT for stalkers and scammers.

The browser is where most tracking happens, so it's where a few moves buy the most privacy per minute:

• Run a reputable content blocker. A well-regarded open-source blocker like uBlock Origin removes most ads and trackers before they load. Side effects include a faster web and fewer malicious ads — malvertising is a real infection vector, so this is a security control wearing a privacy costume.
• Pick a browser that fights for you. Firefox and Brave block much tracking by default; Safari's tracking prevention is solid. You don't need an exotic setup — you need decent defaults you'll actually keep.
• Prune extensions ruthlessly. Every extension can potentially read the pages you visit, and abandoned ones get quietly bought by data harvesters. Few and famous is the rule.
• Know what private browsing is. It deletes local traces — history and cookies on your machine — when the window closes. It does not hide your traffic from websites, your employer's network, or your ISP. It's for shared computers and gift shopping, not anonymity.

Now the strategic advice: don't chase the fingerprinting arms race. Piling on anti-fingerprinting extensions often makes your configuration rarer, and rare means trackable — the tweaks become the fingerprint. Blockers plus a privacy-respecting browser gets you most of the win. If your threat model genuinely requires anonymity — sources, dissidents — that's what Tor Browser is for, which achieves unlinkability by making every user look identical, the exact opposite of DIY tweaking.

End-to-end encryption means messages are encrypted on the sender's device and decrypted only on the recipient's. The service in the middle relays ciphertext it cannot read — not for advertising, not for curious employees, not in a server breach, and nothing meaningful to hand over under legal demand. Contrast ordinary encryption-in-transit, where the provider decrypts your messages on its servers and you're trusting its policies rather than mathematics.

The gold standard is Signal — free, open-source, and built on the Signal Protocol, which is so well-regarded that WhatsApp licensed it for its own E2EE. Signal's distinguishing obsession is knowing as little as possible: when compelled by subpoena, it has been able to produce essentially nothing beyond an account's creation date and last connection time, because that's all it retains.

Now the honest limits, because overtrusting a tool is its own vulnerability:

• Metadata. E2EE hides what you said, not necessarily that you communicate — who, when, how often. Most platforms retain this; traffic analysis is genuinely revealing. Signal engineers against metadata too, but no messenger erases it entirely.
• Endpoints. E2EE protects messages in transit. A compromised phone — or the person you sent it to screenshotting — is outside the math's jurisdiction.
• Backups. The classic silent hole: chats backed up unencrypted to the cloud undo everything. Check backup settings on any E2EE app you rely on.

VPN marketing has outrun VPN reality by a comfortable margin, so let's re-anchor. A VPN encrypts traffic between your device and the VPN company's server, then forwards it onward. Websites see the VPN's address instead of yours; your ISP or the coffee-shop network sees only that you're talking to a VPN.

Notice the precise shape of that: a VPN doesn't remove trust — it relocates it. Your ISP can no longer watch your traffic patterns; the VPN provider now occupies exactly that seat. The pitch is that a subscription-funded privacy company deserves the seat more than your ISP does — often reasonable! But it makes provider honesty the entire product, and the industry has flunked audits before: several "no-logs" VPNs have been caught keeping logs, most famously when a 2020 breach exposed user activity data from free VPN services that advertised keeping none.

What a VPN is genuinely for: untrusted networks (hides even domain names from local snoops), preventing ISP profiling of your browsing, shifting your apparent location, and unavoidably-censored contexts. What it does not deliver: anonymity. You log into your accounts through it — Google still knows it's you. Your cookies ride along. Your fingerprint is unchanged. "Military-grade encryption" describes what HTTPS already gives you on every modern site.

Time to attack the stockpiles, not just the collection. Two campaigns, both practical.

Campaign one: data broker opt-outs. People-search sites (Spokeo, Whitepages, BeenVerified, and dozens more) publish your address, phone, age, and relatives — free OSINT for any stalker or pretexting scammer. Most offer opt-outs, legally mandated for California residents under the CCPA and strengthened by similar laws elsewhere. Realism: it's whack-a-mole, since brokers re-scrape from fresh public records. Options: DIY the top ten or so sites annually (search your own name plus city to find where you appear), or pay a removal service to run the treadmill for you. Prioritize this hard if you have a stalker, an abusive ex, a public-facing job — or you'd simply rather not have your home address one search away.

Campaign two: stop feeding them. Aliases cut new data at the source:

• Email aliases — services like SimpleLogin, Firefox Relay, and Apple's Hide My Email give each signup its own forwarding address. Cross-site profile linking gets harder, leaks become traceable (the alias that starts receiving spam names the leaker), and one click kills a compromised alias forever.
• Payment privacy — purchase histories are prime broker feedstock; virtual card numbers and private payment options keep merchants and their partners on shorter rations.
• Strategic minimalism — the birthday fields, the optional phone number, the loyalty signup: default to no. Data never surrendered needs no opt-out later.

None of this erases you. The realistic win is being expensive to profile — most of the machine's margin comes from people who are free.