Open a browser, load any page, and you’ve already given away more about yourself than you’d probably like. Screen size, installed fonts, time zone, the exact graphics chip in your laptop. All of it goes out the door before you click a thing.
And here’s the annoying part: most of it has nothing to do with cookies, and incognito mode won’t save you. But each leak has a fix, so it’s worth knowing what’s actually happening.
Fingerprinting Killed the Cookie Star
For years, cookies were how advertisers kept tabs on people. Then browsers cracked down, and the trackers got creative. Now they use fingerprinting, which is a lot harder to shake.
The trick is boring but effective. Your browser leaks a specific mix of settings; that mix barely changes, and a website can spot you again on your next visit without saving a single file on your device. Testing sites like the EFF’s old Panopticlick project found most browsers were unique enough to pick out of a crowd.
Fonts, canvas rendering, WebGL, audio hardware: they all pile onto the profile. Chrome and Edge give away the most because they’re feature-heavy, while Firefox and Brave now scramble some of those signals by default. No stock browser hides everything, though.
There’s also a layer below the browser. The way your machine sets up a connection has its own signature, and running IPRoyal’s ip fingerprint check tool shows you exactly what leaks at the TCP/IP level. This whole approach, device fingerprinting, is now a mainstream tracking method, and almost nobody realizes it’s happening.
The Cookie Mess Nobody Cleaned Up
Third-party cookies are the privacy problem everyone’s heard of. Safari has blocked them by default since 2020, and Google kept promising to kill them in Chrome, then backed off that plan in 2024.
But the quieter stuff still runs. One embedded Like button or analytics tag can note your visit across thousands of sites you never connected in your head, quietly building a history you never signed off on. Facebook and Google trackers show up on a huge chunk of the web’s top sites, which is exactly how they follow you around.
The fixes aren’t fancy. Clear your cookies on a schedule, and let a blocker like uBlock Origin or Privacy Badger kill trackers before they load. Set the browser to wipe everything on close, and you’ve plugged another leak.
WebRTC Will Rat You Out
This one bites even people who pay for a VPN. WebRTC, the tech that powers video calls right in your browser, can hand over your real IP address while the VPN sits there thinking it’s doing its job.
It happens because WebRTC connects straight to other devices for speed, so it slips past the tunnel that’s supposed to hide you. A leak test takes maybe ten seconds, and plenty of people are shocked by what they find.
Switch WebRTC off in your settings, or grab an extension that does it for you. Brave and Firefox let you turn it off without wrecking anything, though the odd video app might complain.
Private Mode Is a Bit of a Lie
Incognito windows fool a lot of smart people. Yes, they stop your browser from saving history and cookies locally, but your internet provider, your employer, and the site itself still see every single request.
It’s handy on a shared laptop, sure. Just don’t mistake it for real cover, because it does nothing against fingerprinting or IP tracking.
Watch Your Extensions
Add-ons are a mixed bag. Some genuinely protect you; others read every page you open or slip in trackers of their own.
Back in 2019, researcher Sam Jadali’s DataSpii report caught a batch of popular extensions scooping up browsing histories from millions of people and selling the data on. Keep your list short, read the permissions each one asks for, and lean toward open-source tools that have a real community watching them.
Where This Is Headed
Privacy on the web is a running game of cat and mouse, and the mouse keeps changing shape. Blocking cookies mattered a few years back; today fingerprinting does most of the tracking, so the old habits don’t cut it alone.
Your best bet is stacking defenses: a privacy-first browser, two or three extensions you actually trust, and a fingerprint or leak test now and then. Nothing here makes you invisible, but every layer makes you a harder target.