Change five Chrome privacy settings and you cut most everyday tracking in under ten minutes. Block third-party cookies, pick the right Safe Browsing level, lock down site permissions, limit ad personalisation and clear old site data on a schedule. This guide shows you where each setting lives in the current Chrome layout, what it actually changes, and what it does not change.
Chrome collects more than your browsing history. Sites can store cookies, read your location, ask for camera and microphone access, and follow you across the web through third-party trackers. Default settings favour convenience. They let sites work smoothly, but they also let more data flow than most people realise. The good news is that you do not need extra software to fix the worst of it. The settings below are built into Chrome on desktop and on mobile.
Where Chrome’s Privacy Settings Live Now
On a desktop, open Chrome and click the three dots in the top right corner. Choose Settings, then Privacy and security. You will see the main controls in one place: Delete browsing data, Privacy Guide, Third-party cookies, Ad privacy, Security, Site settings and Privacy and security tools. Work through them in that order and you will not miss anything important.
On Android, tap the three dots, then Settings, then Privacy and security. On iPhone and iPad, tap the three dots, then Settings, then Privacy and Security. The labels differ slightly between platforms, but the controls do the same job. If a setting described below looks missing on your phone, check Site settings first. Mobile Chrome groups several permissions there.
Before you change anything, run the Privacy Guide. It sits at the top of the Privacy and security page on desktop. It walks you through cookies, history sync and Safe Browsing in a few screens. Treat it as a starting point, not the finish line. The guide makes safe choices, but it does not lock down every permission. The steps below go further.
Third-Party Cookies: Block Them Here
A first-party cookie comes from the site you are visiting. It keeps you signed in and remembers items in your basket. A third-party cookie comes from a different domain, often an advertiser or a tracker embedded in the page. It can follow you from site to site and build a picture of your interests. That is the tracking most people want to stop.
Go to Settings, then Privacy and security, then Third-party cookies. Choose Block third-party cookies. Chrome will still allow first-party cookies, so your logins and shopping baskets keep working. Some sites may ask you to allow cookies for a specific feature, such as an embedded payment form or a video player. If a trusted site breaks, click the eye icon in the address bar and allow third-party cookies for that site only. Do not switch the global setting back for one broken page.
Also turn on the option to delete site data when you close a window, if you want a stricter setup. This clears cookies and site data each time you close Chrome. It means you will sign in to sites more often. For most people, the better balance is to block third-party cookies globally and clear site data manually once a month. Go to Delete browsing data and clear cookies and cached images for the past month, or for all time if you want a fresh start.
One warning matters here. Blocking third-party cookies does not stop all tracking. Sites can still use first-party methods, fingerprinting and your IP address to identify you. Cookies are one layer, not the whole story. That is why the settings below matter just as much.
Safe Browsing: Which Level to Pick
Go to Settings, then Privacy and security, then Security. You will see three Safe Browsing levels: Enhanced protection, Standard protection and No protection. Choose Enhanced protection if you want the strongest defence. It checks downloads and web addresses against Google’s latest threat lists in real time. It also warns you about risky extensions and suspicious password use.
Enhanced protection sends more data to Google, including the addresses of pages you visit when Chrome needs to check them. Standard protection checks against lists stored on your device and sends less data. It still warns you about known dangerous sites and downloads. No protection turns these warnings off completely. Never choose No protection. It leaves you exposed to phishing pages and malware downloads for no real benefit.
For most home users, Enhanced protection is the right pick. The extra data sharing is limited to security checks, and the protection against phishing is real. If you are uncomfortable with real time checks, Standard protection is a reasonable middle ground. Pair it with good phishing awareness, because no browser filter catches every scam.
While you are on the Security page, check the other options. Turn on “Use secure DNS” if it is not already on. Secure DNS encrypts the lookup that turns a website name into an address, so your internet provider cannot easily see every site you request. Keep the “Always use secure connections” option on as well. It upgrades plain HTTP connections to HTTPS where possible.
Site Permissions Worth Locking Down
Go to Settings, then Privacy and security, then Site settings. This page controls what every site can access. Change the defaults first, then review the sites that already have special access. Start with these four permissions.
First, set Location to “Do not allow sites to see your location”. Most sites do not need your exact location. If a map or delivery site genuinely needs it, Chrome will ask you, and you can allow it for that visit only. Second, set Camera and Microphone to “Do not allow sites to use your camera” and “Do not allow sites to use your microphone”. Video call sites will ask when you need them. There is no reason to leave these open by default.
Third, set Notifications to “Do not allow sites to send notifications”. Notification permission is one of the most abused settings on the web. News sites, shopping sites and scam pages all ask for it, and once allowed, they can push alerts to your desktop all day. If a site you trust already has notification access, remove it here unless you actually read its alerts.
Fourth, check Motion sensors, Bluetooth and USB devices. Set them to block by default. Very few everyday sites need these. While you are here, scroll to “Additional permissions” and review clipboard access and payment handlers. Allow them only for sites you trust and use regularly. Finally, look at the list of sites under “Allowed to” for each permission. Remove any site you do not recognise. Old permissions from sites you visited once can sit there for years.
Ad Privacy and Personalisation
Go to Settings, then Privacy and security, then Ad privacy. Chrome shows three toggles: Ad topics, Site-suggested ads and Ad measurement. These control how Chrome groups your browsing into interest topics for advertisers. Turn all three off if you want the least ad personalisation. You will still see ads, but they will be less tailored to your browsing history.
Next, check your Google ad settings if you are signed in to Chrome. Visit your Google account’s ad personalisation page and turn off personalised ads there as well. Chrome’s toggles and your Google account settings are separate controls. Changing one does not always change the other. If you use Chrome without signing in, the browser toggles alone are enough.
Also review the “Do Not Track” request, which sits in Third-party cookies settings on desktop. Turn it on. It sends a request to sites asking them not to track you. Many sites ignore it, so do not treat it as protection by itself. Think of it as a polite request on top of the real controls above, not a replacement for them.
What Chrome Still Collects After All This
Changing these settings reduces tracking a lot, but it does not make you anonymous. Your internet provider can still see that you connect to websites, unless you use a VPN or an encrypted DNS service. Google still collects data linked to your Google account if you stay signed in and sync your history. Sites can still see your IP address, your browser type and your screen size. Combined, those details can still identify you in some cases.
That is why privacy settings work best as part of a small routine. Use the settings above, sign out of your Google account when you do not need sync, and check your permissions every few months. If you want to understand what private browsing does and does not hide, read our guide on does incognito mode hide history from your WiFi owner. Incognito mode hides local history from other people using your device. It does not hide your activity from your internet provider or from the sites you visit.
Extensions deserve the same attention. A single careless extension can undo good privacy settings by reading your browsing data. Review your extensions at chrome://extensions and remove anything you no longer use. Read our Chrome extensions safety guide before you install a new one, and check what permissions each extension asks for. If an extension asks to read all your data on every site, it needs a very good reason.
Finally, check whether your email has already appeared in a known data breach. Privacy settings protect your future browsing, but they cannot undo past leaks. Our guide to how to check if your email was in a data breach shows you how to read the results and what to change first if your details have leaked.
FAQs
Will blocking third-party cookies break websites?
Most sites work fine. A few embedded features, such as some payment forms and video players, may need third-party cookies for that site only. Allow them for that single site through the eye icon in the address bar, and keep the global block in place.
Should I choose Enhanced or Standard Safe Browsing?
Choose Enhanced protection for the strongest defence against phishing and malware. It checks pages and downloads against the latest threat data in real time. Standard protection is a fair middle ground if you prefer to share less data, but never choose No protection.
Does turning off ad personalisation stop ads?
No. You will still see ads. They will just be less tailored to your browsing history. To reduce tracking further, block third-party cookies and review site permissions as well.
Do these settings work on mobile Chrome too?
Yes. The same controls exist on Android and iPhone, under Settings, then Privacy and security. Labels differ slightly, and some desktop options sit under Site settings on mobile. Work through the same five areas and you get the same protection.
How often should I review Chrome privacy settings?
Review them every three months, and again after any major Chrome update. Updates can add new settings or reset old ones. A quick check of Site settings and your extension list takes five minutes and catches permissions you forgot you granted.
Conclusion
Chrome privacy is not one switch. It is a handful of settings working together: blocked third-party cookies, the right Safe Browsing level, locked down site permissions, ad personalisation off and a regular clear out of old site data. Set them once today, review them every few months, and keep your extension list short. You will browse with far less tracking, and the sites you actually use will keep working normally.
