Internet Privacy and Your Digital Footprint

Privacy advice tends toward two extremes: nothing you do matters, or you must adopt a set of tools that make the internet unusable. Neither is true, and the useful middle is a handful of settings and habits that reduce most of what is collected.

What is actually collected

By websites you visit: what you looked at, how long, where you came from, your approximate location, your device and browser.

By advertising and analytics services embedded in those sites: the same, joined across every site carrying the same service. This is how a product you looked at once follows you around.

By your internet provider: every domain you connect to, with timing. Encryption hides the contents; it does not hide who you connected to.

By platforms you are signed into: everything you do while signed in, and frequently activity elsewhere through embedded buttons and pixels.

By your device: location history, app usage, and whatever the operating system syncs.

By data brokers: aggregated profiles assembled from public records, purchases, loyalty schemes and data bought from other companies. This is the least visible layer and frequently the most detailed.

Your digital footprint, in two parts

Active — what you deliberately published. Posts, comments, reviews, profiles, photographs.

Passive — what was recorded without your involvement. Browsing history, purchase records, location data, and the profiles built from them.

Most people worry about the first and are affected more by the second.

Seeing what is out there

Worth doing once, and it takes an hour.

Search your own name, in quotation marks, and with your city or employer. Use a private window so your own history does not shape the results.

Search your email addresses and phone numbers.

Check whether your email appears in known breaches, through one of the established breach-notification services.

Look at your own social profiles while signed out, which shows what a stranger sees rather than what you see.

Check the activity pages of the major platforms — most now provide a history of what they have recorded, and the volume is usually surprising.

Request your data from services that matter to you. In many jurisdictions you have a right to a copy, and the response shows what is actually held.

Reducing it

In order of effect against effort.

Browser settings

Block third-party cookies. Most browsers now do this by default, and it removes a large share of cross-site tracking.

Use a browser with tracking protection, or add a reputable content blocker. This is the single highest-return change available.

Turn off ad personalisation in the browser and in the major platform accounts.

Clear cookies periodically, accepting that you will sign in again.

Use a search engine that does not build a profile, if the results are adequate for your use.

Account settings

Go through the privacy settings of the platforms you use. Tedious, and it is where the largest reductions are available. See how to use privacy settings on social networks.

Turn off location history where you do not need it.

Turn off ad personalisation.

Review connected applications — third-party services granted access to your accounts, frequently years ago, frequently still connected.

Delete accounts you no longer use. See managing and deleting your online accounts.

Habits

Sign out of platforms when browsing generally. Signed in, activity across the web is attached to you by name.

Use a private window for anything you would rather not have shape your recommendations. Understand what it does and does not hide. See the power of incognito mode.

Use a separate email address for signups and shopping. This alone dramatically reduces what one profile can be joined to.

Think before publishing. The active footprint is the part you fully control, and it is the part that is hardest to remove later.

Be careful with quizzes, competitions and free services that ask for more than they need.

Removing what is already there

Harder than preventing it, and partly possible.

Delete your own posts and profiles — the part fully within your control.

Request removal from data brokers. Many are legally required to comply in some jurisdictions and offer an opt-out regardless. It is tedious, it needs repeating because profiles rebuild, and services exist that do it for you.

Request removal from search results where the law allows it. Several jurisdictions provide a route for outdated or irrelevant personal information.

Contact the site directly where content about you sits on a site you do not control. Frequently effective and it depends entirely on the site.

Accept that some of it will not go. Archived pages, republished content, and screenshots persist. Reducing the visibility of what remains is frequently the realistic goal rather than removal.

What is worth doing and what is theatre

Worth it: content blocker, third-party cookies blocked, platform privacy settings reviewed, separate email for signups, old accounts deleted, ad personalisation off.

Worth it in specific circumstances: a VPN on public networks or where your provider's visibility genuinely matters. Not a general privacy solution. See using VPNs.

Limited value: private browsing as a privacy measure, which hides your history from the device and not from anyone else.

Theatre: most "privacy" browser extensions beyond a reputable blocker, and any service promising to erase you from the internet entirely.

The proportionate position

Perfect privacy online is not achievable without giving up most of what makes the internet useful, and pretending otherwise leads people to do nothing.

Substantial reduction is achievable in an afternoon, and the settings above cover most of it.

Decide what you actually care about. Advertising profiles, employers, family, strangers, and governments are different threats with different responses, and the measures that address one may do nothing for another.

And revisit annually. Platforms change settings, reset preferences during updates, and add new collection. An afternoon once a year keeps it where you left it.

The short version

A content blocker and blocked third-party cookies do more than everything else combined.

The passive footprint matters more than the active one, and it is the part people ignore.

Look at your own profiles while signed out — that is what a stranger sees.

Use a separate email for signups, which breaks the joining of profiles more effectively than any tool.

And revisit annually, because settings reset and new collection appears.

For practical baseline security guidance for home users, see CISA Secure Our World.