← Back to Tools
Privacy isn't about hiding wrongdoing. It's about control — your control over information about yourself. When you lose privacy, you lose the ability to make decisions without being judged, manipulated, or discriminated against.
Your data is used to build profiles that predict your behavior, influence your political views, determine insurance rates, affect job applications, and target you with psychological advertising. You are the product, not the customer.
"Saying you don't care about privacy because you have nothing to hide is like saying you don't care about free speech because you have nothing to say." — Edward Snowden
Privacy protects everyone — not just people doing something wrong. It protects journalists, activists, abuse survivors, LGBTQ+ individuals in hostile environments, and anyone who simply doesn't want corporations profiling their every move.
By websites and apps:
- •Every page you visit, how long you stay, what you click
- •Your IP address (reveals your approximate location and ISP)
- •Browser fingerprint (screen size, fonts, plugins — uniquely identifies you)
- •Search queries and browsing history
- •Location data (GPS, WiFi triangulation)
- •Purchase history and browsing habits
By social media:
- •All posts, likes, messages (even deleted ones, stored on servers)
- •Your social graph — who you know and how close you are
- •Face recognition data (if you upload photos)
- •Tracking pixels on third-party sites (Facebook tracks you even when you're not on Facebook)
Even if you've never had a Facebook account, Facebook builds "shadow profiles" on you using data from websites with Facebook Pixel and from contacts uploaded by other users.
Your browser is your window to the internet — and also the primary tool used to track you. Here's what matters:
Recommended Browsers Start Here
Essential Browser Extensions
What to Avoid
Google Chrome sends browsing data to Google by default and has been weakening ad-blocking APIs. Microsoft Edge has telemetry you can't fully disable. Incognito/Private mode only hides history from people using your device — your ISP, employer, and websites still see your traffic.
Weak and reused passwords are the #1 cause of account compromises. Here's what to do:
Most important accounts to secure with 2FA: Email (controls everything else), banking, social media, cloud storage, and your password manager.
What about WhatsApp? WhatsApp uses Signal's encryption protocol for messages, but collects significant metadata (who you talk to, when, how often) and shares it with Meta. Better than unencrypted alternatives, but Signal is the superior choice.
- ✓Enable full-disk encryption (FileVault on Mac, BitLocker on Windows, built-in on modern iPhones and Android)
- ✓Use a strong screen lock PIN (6+ digits, not biometrics as your only method)
- ✓Keep your OS and apps updated — most exploits target unpatched systems
- ✓Review and revoke unnecessary app permissions (location, microphone, camera, contacts)
- ✓Use a privacy-respecting DNS (Cloudflare 1.1.1.1 or NextDNS)
- ✓On Android: use Brave or Firefox, not Chrome
- ✓Disable advertising IDs (Settings → Privacy → Advertising)
VPNs Intermediate
A VPN encrypts your traffic and hides your activity from your ISP. But it shifts trust — your VPN provider can see your traffic instead. Choose carefully: Mullvad and ProtonVPN have independently audited no-logs policies.
VPN myths: VPNs don't make you anonymous. Websites can still track you via cookies, fingerprinting, and account logins. A VPN primarily protects you from ISP monitoring and hides your IP from websites.
Public WiFi
Public WiFi is generally safe for HTTPS traffic — your browser encrypts data in transit. The main risks are evil twin attacks (fake hotspots) and unencrypted HTTP sites. Always verify you're on the real network and use a VPN if you're accessing sensitive accounts.
Do these today. Each one takes less than 30 minutes and significantly improves your privacy:
- □
Install uBlock Origin in your browser — blocks thousands of trackers immediately
- □
Set up Bitwarden — start saving all new passwords there, and change your most important account passwords to strong, unique ones
- □
Enable 2FA on email and bank accounts — use an authenticator app, not SMS
- □
Switch to Signal for personal messaging — invite 3 close friends or family
- □
Switch DNS to 1.1.1.1 — change in router or device network settings
- □
Review Google account permissions — myaccount.google.com → Data & Privacy → reduce what's tracked
- □
Opt out of targeted advertising on your phone (iOS: Settings → Privacy → Tracking; Android: Settings → Privacy → Ads)