Key Takeaways
Option A
Cookies
The familiar, visible tracking method you can actually clear.
Best for: Understanding the traditional, consent-based approach to tracking user sessions and preferences online.
Option B
Browser Fingerprinting
The invisible tracker that persists even after you clear your history.
Best for: Understanding the newer, harder-to-block method that identifies you by your device's unique technical profile.
If you want to understand what clearing your browser history actually accomplishes
Cookies
Cookies are the tracking data most directly affected by clearing your browser. Understanding how they work clarifies exactly what deletion does and does not remove.
If you think incognito mode makes you anonymous
Browser Fingerprinting
Fingerprinting exposes why private browsing is not the same as invisibility — your device's technical profile remains identifiable regardless of the browsing mode.
If you are taking your first steps toward managing online privacy
Cookies
Cookie controls are built into every modern browser and are the most accessible starting point for limiting routine tracking.
If you want a deeper understanding of why tracking persists despite privacy tools
Browser Fingerprinting
Fingerprinting is the mechanism that makes many conventional privacy measures feel ineffective — understanding it helps set realistic expectations.
What Cookies Actually Are
A cookie is a small text file a website places on your device when you visit. It typically contains an identifier — a string of characters that lets the site recognise you on your next visit. That identifier can record that you were logged in, what was in your shopping cart, or which ads you previously saw.
Cookies come in two main varieties. First-party cookies are set by the site you are visiting and generally serve functional purposes, like keeping you logged in. Third-party cookies are set by outside services — most often advertisers — embedded within the page, and they are the ones most responsible for cross-site tracking, where ads seem to follow you from one website to another.
The key characteristic of cookies is that they are stored on your device. That means you can find them, inspect them, and delete them. Every major browser offers a setting to clear cookies, and regulations in many places now require websites to ask for your consent before placing certain types. This visibility is why cookies became the public face of online tracking — and also why the conversation rarely ends there.
For a practical look at managing these settings, see browser privacy settings worth turning on.
How Browser Fingerprinting Works — Without Storing Anything
Browser fingerprinting takes a completely different approach. Instead of leaving a file on your device, a website's script quietly reads characteristics of your browser and system — and combines them into a profile. Individually, none of these details are unique. Together, they often are.
The data points collected can include your browser type and version, operating system, installed fonts, screen resolution, time zone, language settings, graphics rendering behavior (via a technique called canvas fingerprinting), and even how your device's audio hardware processes sound. Each of these is a normal technical detail your browser shares as part of loading pages correctly.
| Criterion | Cookies | Browser Fingerprinting |
|---|---|---|
| Where data is stored | On your device (as a file) | On the server (nothing on device) |
| Survives clearing browser data | No — deleted when you clear cookies | Yes — unaffected by clearing history |
| Blocked by incognito mode | Partially (session cookies only) | No — fingerprint remains the same |
| User can inspect or delete | Yes, via browser settings | No direct access or deletion possible |
| Covered by cookie consent banners | Yes, in most regulatory frameworks | Often not covered or inconsistently so |
| Ease of blocking | Straightforward — browser settings | Difficult — no complete solution |
The result is a fingerprint — a composite identifier that is statistically distinct for a large proportion of users. Research from the Electronic Frontier Foundation found that most browser configurations are unique or nearly unique among observed users, which means the fingerprint can function as a reliable identifier without storing a single byte on your device.
This is why fingerprinting survives actions that defeat cookies: clearing your history, switching to incognito mode, or even deleting all cookies leaves your browser's technical profile unchanged. As we cover in our article on what incognito mode actually hides, private browsing is far more limited than most people assume.
Key Differences Between the Two Methods
Understanding the contrast between these methods helps clarify why privacy protection requires more than a single tool or habit.
~83%
Browser configurations found to be unique
The Electronic Frontier Foundation's Panopticlick research found the large majority of browser configurations were unique or near-unique among tested users.
Third-party
Cookie type driving most cross-site tracking
Third-party cookies, set by advertisers rather than the site you visit, are the primary mechanism behind ads that follow users across multiple websites.
0 bytes
Data stored on device by fingerprinting
Browser fingerprinting constructs an identifier entirely from browser and device attributes read in real time, leaving nothing written to the user's device.
Cookies are stateful — they persist on your device between sessions and can be cleared, blocked, or expired. Browsers give you direct control over them. Fingerprinting is stateless — nothing is written to your device, so there is nothing to delete. The tracking exists on the server side, assembled fresh each time you visit.
Consent frameworks, like the cookie banners now common on websites, apply to cookies. Fingerprinting largely falls outside these mechanisms because it does not technically set anything on your device, making regulatory treatment inconsistent across jurisdictions. Legally, whether fingerprinting requires consent is still debated in many regions.
Blocking cookies is straightforward: most browsers can refuse third-party cookies by default. Blocking fingerprinting is harder because it involves suppressing or randomising normal browser behaviors — some of which are needed for sites to display correctly. Tools like privacy-focused browsers or certain extensions attempt to add noise to fingerprint data, but none offer a complete solution. For a broader foundation on protecting yourself, starting with online privacy basics is a helpful place to begin.
What You Can Realistically Do
For cookies, your options are concrete: use your browser's settings to block third-party cookies, clear cookies regularly, or use a browser that restricts them by default. Many modern browsers have made blocking third-party cookies a default setting, which meaningfully reduces cross-site ad tracking.
For fingerprinting, no single setting eliminates it, but several steps reduce your exposure. Using a privacy-focused browser that standardises certain browser outputs across users can make your fingerprint less distinctive. Browser extensions designed for privacy can also interfere with some fingerprinting scripts. Keeping your browser updated ensures you are not carrying outdated, unusual version signatures that make you easier to identify.
It is also worth adjusting the privacy settings that many people leave untouched — overlooked privacy settings across your browser and device can quietly reduce how much information is shared. Staying alert to other digital threats, like phishing attempts, rounds out a practical approach to everyday digital security.
Neither method of tracking can be fully eliminated with consumer tools, but understanding how each works puts you in a far better position to make informed choices about the browsers and settings you use.