Privacy does not mean anonymity

Calling a browser “private” can mean several different things: limiting cross-site trackers, deleting data when a window closes, reducing the information the provider itself receives, or making it harder for a website to identify a device. These protections are not equivalent, and none of them, on its own, makes browsing anonymous. Before comparing products, decide which exposure you want to reduce and from whom you want to reduce it.

A private window generally deals mainly with data stored locally, such as the history from that session. It should not be taken as a barrier that automatically hides your activity from the websites you visit, your workplace or school network, your internet provider or the search service. To assess a feature, check which data it affects, who may still observe that data, and whether the control works on the device, in the browser or through an additional service.

Separate four questions

  • What is stored on the device: history, cookies, cache, passwords and form data.
  • What the browser may send: diagnostics, usage statistics, requests to provider services and data associated with an account.
  • What websites may observe: IP address, activity on their pages, cookies and device signals.
  • What protections are applied: blocking, partitioning or deleting certain data, and the exceptions needed for a website to work.

This separation prevents marketing labels from being compared as though they represented equivalent results. It also helps distinguish an advertised feature from a conclusion demonstrated by independent testing. In this guide, provider pages help identify what companies say and which settings they document; they are not enough to certify how every version, configuration and website behaves.

Read the policy and documentation, not just the slogan

Start with the privacy policy that applies to the browser and the help pages for its features. Look for what information is collected, for what purpose, how long it is retained, with whom it is shared, and what changes when you sign in or enable syncing. A company’s general policy may cover many products: identify which sections concern the browser and which concern connected services such as search, an account or technical support.

Providers’ own statements are evidence of their published commitments, not an independent measurement of network traffic or a guarantee that every option is disabled by default. For example, Mozilla explains that syncing can send history or bookmarks to its servers and describes the end-to-end encryption applied to that data before it leaves the device. That detail makes it possible to ask specific questions— which categories are synced and how the account can be recovered—but does not, by itself, prove that all data associated with browser use receives the same treatment.

Google, in turn, explains how cookies are used in its services and provides documentation for managing them in Chrome. Do not confuse Google’s cookie policy with a complete description of all browser data collection: a page devoted to cookies does not necessarily cover diagnostics, identifiers, syncing or every interaction with an account. Review specific documents and consider their scope before drawing broad conclusions about the product.

Compare specific controls for cookies and trackers

A list of features is useful only when it can be translated into verifiable controls. Find out whether the browser can block third-party cookies, delete data for an individual site, review camera and location permissions, limit pop-ups and show what has been blocked. Check whether there are different protection modes and what consequences the provider describes: stricter blocking can interfere with sign-ins, payments or embedded content, so it matters whether you can manage exceptions without turning off all protection.

Brave presents Shields as a feature that can block trackers, cross-site cookies and fingerprinting techniques, and documents related controls. Firefox describes its Enhanced Tracking Protection and provides information about its protection levels. These are providers’ statements about their own features; they do not mean that both block exactly the same items, use identical settings or offer protection that is superior in every situation. To compare them, consult documentation for the version and platform you would use, rather than a general description of a different edition.

What to note when reviewing each browser

Check What to look for in the documentation
Cookies Options to limit, allow or delete cookies, including site-specific exceptions
Tracking Which categories are blocked and whether protection applies across sites
Permissions How to review and revoke camera, microphone, location and notification access
Diagnostics Options for statistics, crash reports and sending technical data

The table is a list of questions, not a ranking of browsers. Nor should blocking cookies be equated with eliminating all tracking: other mechanisms may exist, and cookies needed for a site’s features do not always work like those used for advertising or measurement. If a provider uses phrases such as “advanced protection,” look for the operational explanation, default settings and limitations.

Check syncing, accounts and export options before switching

Syncing is a convenience and a decision about moving data. It can keep tabs, bookmarks, history, passwords or settings available across multiple devices, but the available categories, encryption, storage and recovery process depend on the product and configuration. Check what is enabled when you sign in, whether you can choose categories separately and what happens if you lose account access. Do not infer that everything is encrypted in the same way just because one particular feature is.

Syncing should also be distinguished from telemetry. The former usually transfers data between associated devices; the latter may refer to usage statistics, diagnostics or crash reports. Terminology varies, and documentation may be spread across settings, the privacy policy and technical notes. If an option lets you turn it off, note what information will stop being sent and whether communications needed for updates, security or operation remain. Turning off one category does not necessarily mean the browser makes no connections to the provider.

Before migrating, check the export and import options in both the source and destination browsers. Bookmarks are usually easy to move; passwords, extensions, form data and sessions may require different steps or may not migrate completely. An export may create a file that other applications can read: store it securely and delete it when you are finished. Also check whether you can export without enabling cloud syncing and whether the new browser can import the formats you actually have.

Check claims against evidence and recognize the limits

Primary documentation is the starting point for finding out which options a provider offers, but a feature description is not an audit. Independent testing can provide evidence about a particular version and configuration, for example by examining network connections or testing blocking against a defined set of trackers. For results to be useful, they should specify the date, version, operating system, settings and method; do not automatically extrapolate them to other platforms or updates.

It is reasonable to review criticism and external analysis, while distinguishing an allegation, an investigation and a formal decision. In 2024, noyb reported that it had filed a complaint about Firefox’s Privacy Preserving Attribution feature and questioned how it was activated and communicated. That publication establishes that the complaint was made and states the organization’s position; it is not a final regulatory decision or a complete assessment of every browser feature. Treat it as a reason to look up the documentation and case status, not as conclusive proof that an entire browser “tracks” users or is no longer private.

A careful comparison should record both supportive evidence and its limits: who published it, which version it describes and which questions remain unanswered. Marketing pages help locate features, but technical explanations and policies provide more context. Independent tests can supplement both, though their findings do not last forever: behavior can change with updates, settings or integrated services. The sensible conclusion is specific: a feature reduces one kind of exposure under particular conditions; it does not mean that the product guarantees absolute privacy.

A practical checklist for deciding

First define your priorities: reducing advertising based on cross-site tracking, limiting data received by the provider, syncing across devices, or maintaining compatibility with websites and extensions. There is no single setup that optimizes everything for everyone. Then compare two or three browsers using the same list of questions and consult documentation for your device and region.

Before adopting one as your main browser, you can run a controlled trial without moving all your information straight away:

  1. Review the initial settings and default privacy options.
  2. Open the official policy and help pages; note the data categories and purposes they describe.
  3. Check cookie controls, anti-tracking protection and site permissions.
  4. Decide whether you need an account and choose which data, if any, to sync.
  5. Verify how bookmarks and passwords can be imported and exported; protect any exported file.
  6. Look for recent independent tests that state their version and methodology, and treat their findings as limited to those conditions.

In the end, choose according to your priorities and tolerance for inconvenience, not a generic promise. If the browser blocks a feature you need, first check whether there is a specific, reversible exception. Keep the browser and operating system up to date, review permissions and syncing periodically, and revisit policies when features change. Privacy is a practice of configuration and review: switching browsers may help reduce certain exposures, but it does not replace care with accounts, the websites you visit and the data you choose to share.