Decide what you want to reduce
Privacy settings work best when you know the problem you are addressing. You might want fewer sites tracking activity across the web, less history left on a shared computer or tighter control of sensitive documents. Those are different goals. A setting that helps one may do little for another, so avoid treating a single “private” mode as an all-purpose shield.
Start by updating your browser and operating system. Current software receives fixes for known problems and may provide clearer permission controls. On a managed work or school device, some options are controlled by the organization. Follow its policies rather than disabling protections or installing an unapproved browser to work around restrictions.
Review tracking and site permissions
Open your browser’s privacy and security settings. Review its tracking protection and third-party cookie controls. Restricting cross-site tracking can reduce some data sharing, but websites may still recognize you through your account, network information or other techniques. Stricter settings can also interrupt sign-ins or embedded content. If a trusted site breaks, consider a narrow exception rather than weakening settings everywhere.
Next, review camera, microphone, location and notification permissions. Remove access that no longer has a clear purpose. Prefer one-time or “ask” permissions where available. A shopping site rarely needs permanent location access to show a delivery estimate. If a website asks you to allow notifications to prove you are human, do not assume that request is a legitimate security check.
Review saved payment details, autofill information and browser sync settings. Sync is convenient, but it moves information into an account ecosystem and creates another dependency. Protect that account with strong sign-in controls. On a shared device, use an appropriate separate user profile and sign out when finished; a browser profile alone is not a strong barrier against another person who controls the computer.
Remove extensions you no longer need
Extensions can have broad access to the pages you visit. Keep only those with a current purpose, inspect their permissions and obtain them through the browser’s official distribution channel. Store presence is not a guarantee of trustworthiness. A familiar extension can change ownership or behavior, so review it again when permissions expand or unexpected changes appear.
Be cautious about extensions advertised as universal privacy fixes. Extra software adds another party and another codebase to trust. Where a built-in browser control meets the need, it may be simpler to maintain. Consult the official help resources for Mozilla Firefox, Google Chrome, Microsoft Edge or Apple Safari for current interface details.
Understand private browsing and VPN limits
Private browsing generally limits the history, cookies and other browsing data retained by that session after its private windows close. Downloaded files and bookmarks can remain. It does not hide your activity from every website, your employer, your internet provider or someone monitoring a compromised device. Signing into an account still identifies you to that service.
A virtual private network changes which network operator carries part of your traffic and can hide destination information from some local observers. It shifts trust toward the VPN provider; it does not make phishing pages safe or erase information you submit. HTTPS remains important. Choose tools based on a specific need and a clear understanding of who you are trusting.
Check the file, recipient and access
Before sharing a document, remove information the recipient does not need. Check comments, tracked changes, hidden sheets and document metadata. Exporting a clean copy can help, but verify the result rather than assuming an export removed everything. For a sensitive image or screenshot, inspect the entire frame for names, notifications, account identifiers and recovery information.
Prefer sharing with named recipients over an unrestricted “anyone with the link” option. Confirm the address carefully and set viewing rather than editing access unless collaboration requires edits. Add an expiry where supported, then review access after the task ends. A restricted link can still be exposed through a compromised recipient account or an authorized person who downloads a copy.
Use a transfer method approved for the sensitivity of the information. Encryption in transit protects the connection; encryption at rest concerns stored data. End-to-end encryption limits who can decrypt content, but it does not prevent a recipient from copying it or protect an already compromised endpoint. If a file is protected by a separate secret, do not send that secret in the same exposed message thread. Confirm the recipient through an independent channel.
Retain less, but keep useful backups
Delete obsolete sensitive copies when no longer needed, including shared links and exported files. Cloud deletion may involve trash folders, retention periods and backups, so do not promise immediate erasure. Keep access-controlled backups of information you genuinely need, and test restoring a non-sensitive sample. Privacy is not achieved by losing your only copy of an important record. For a broader explanation of online tracking, see the Electronic Frontier Foundation’s resources.