6.1 Browsers and search engines

Defaults matter

For most people, the browser and search engine are the front door to the modern internet. They decide which sites load smoothly, which logins “just work”, and which adverts follow you around. Those default choices are rarely neutral. A browser vendor may earn money from advertising or from partnership deals; a search engine lives by collecting data about what people look for, when, and from where. That does not make them inherently unsafe or unethical, but it does mean the first tools you install shape what data leaves your device each day.

It is easy to focus on spectacular threats and miss the quieter ones: routine collection of browsing habits, device characteristics, and location hints that build a long-term profile. That profile is not a shadowy dossier; it is a practical tool used to decide which adverts you see, which results you are offered, and whether you are asked for extra identity checks when signing in. Understanding how the browser and search engine work together helps you choose which trade-offs you are willing to accept.

Browser choice

A browser is not just a window; it is a platform. It runs code, stores cookies, and keeps a history of the sites you visit. Some browsers are tightly integrated with a larger ecosystem of services such as email, maps, and analytics. Others are designed to keep more data on the device or to reduce tracking by default. The practical difference shows up in small, everyday moments: whether a login can be auto-filled across devices, whether a site remembers what you looked at last week, and how much data is sent back to the vendor when a page loads.

In the UK, many people use a browser that comes with their phone or laptop. That is a rational choice: it is already installed, it is tuned for the device, and it is familiar. The risk is not that it is “bad”, but that its default settings are designed for convenience and advertising rather than privacy. Browser telemetry, cloud synchronisation, and default search engine partnerships often mean your browsing patterns are visible to more parties than you expect.

A common misunderstanding is that using a “privacy browser” makes you anonymous. It does not. A browser can reduce passive tracking and block obvious trackers, but it cannot hide everything you do from your internet provider, your employer’s network, or the services you sign into. It can, however, reduce the routine collection of data across the wider web and make it harder for third-party companies to stitch your activity together.

Practical choice often sits between convenience and control. If you rely on tight integration with a phone or password manager, a mainstream browser may fit your life best. If you prefer to minimise data sharing and are willing to accept occasional website quirks, a privacy-focused browser with stricter defaults may be a better fit. The important part is to understand what you gain and what you give up.

Search engine profiling

Search engines operate as knowledge brokers. They process your queries, learn from what you click, and refine future results. This learning does not only happen on your device. When you are signed in, your searches can be tied to an account profile. Even without signing in, your IP address, time zone, device type, and browser fingerprint can link searches to the same person or household over time.

Real-world impact is often subtle. If you search for “mortgage rates” and then “schools in Birmingham”, you may start seeing adverts for estate agents, moving services, or financial products. If you search for information about a sensitive medical condition, you might see related adverts for weeks. This is not necessarily malicious; it is how advertising works. But it can feel intrusive, and it can influence what you read and what you buy.

There is also the question of personalisation. Search engines may tailor results based on prior activity or location. The effect is often useful, such as prioritising local news or transport information, but it can narrow the range of perspectives you see. In the UK, where news and politics can be polarised, this can matter. The result is not a sealed bubble, yet the ordering of results subtly shapes which sources feel prominent.

Mitigation does not require radical steps. Using a search engine that keeps fewer logs can reduce long-term profiling. Signing out for general browsing, or using a separate browser profile for searches that are sensitive or temporary, limits how much is linked to a single identity. Some people use different search engines for different tasks, such as a mainstream one for local business information and a privacy-focused one for general research. The trade-off is that you may lose some convenience features, like personalised suggestions and fast re-queries.

Fingerprinting techniques

Fingerprinting is a way to identify a device or browser based on a collection of characteristics rather than a single identifier. A fingerprint might include the browser version, installed fonts, screen size, language settings, and the way the device renders a particular image. Individually, these details are mundane. Together, they can be specific enough to track a user across sites without relying on cookies.

A simple example is a website that loads a small script to test how your browser draws a canvas element. The exact rendering differences can be used as a fingerprint. Another is the list of available audio devices or the precise timing of certain operations. These techniques are not sci-fi; they are used by advertising networks and some fraud-detection services to recognise repeat visitors and to spot unusual activity.

The misconception here is that clearing cookies wipes the slate clean. It helps, but fingerprints can persist. Blocking fingerprinting entirely is difficult because the same features are used to make websites work well across devices. If a browser deliberately lies about its capabilities, some sites will break or degrade.

The practical mitigation is to reduce uniqueness rather than chase perfect invisibility. Some browsers include anti-fingerprinting features that standardise or limit the data websites can see. Using a common browser configuration makes you blend in with a larger crowd, whereas unusual settings or rare add-ons can make you more distinctive. In everyday life, this might mean avoiding novelty browser themes or obscure language packs if your priority is privacy. The downside is a slightly less personalised experience and, occasionally, a site that refuses to load unless you allow more access.

Extension risk

Browser extensions can be extremely useful. They block adverts, manage passwords, translate web pages, and de-clutter news sites. The risk is that extensions often have broad permissions. A tool that can “read and change all your data on the websites you visit” is powerful, and that power can be misused if the extension is poorly designed, sold to a new owner, or compromised in an update.

A realistic scenario is a popular extension that starts out as a simple coupon finder. Over time, it is acquired by a marketing company and updated to inject affiliate links or to capture browsing data. Users who installed it for convenience may never notice the change. Another is a legitimate extension that becomes a target for attackers who push a malicious update, which then harvests session cookies and allows account hijacking.

The safest approach is not to avoid extensions entirely but to be selective. Fewer extensions means fewer points of trust. Prefer extensions from well-known vendors with clear update histories, and review permissions when you install or update them. If you use a password manager, it may be better to use the vendor’s official extension than a third-party helper. For some tasks, a built-in browser feature can replace an extension entirely.

Not every risk can be eliminated. Even reputable extensions can have bugs, and permission prompts are blunt tools. The goal is to treat extensions like apps on your phone: install what you genuinely use, remove what you do not, and be comfortable with the small amount of friction this adds to daily browsing.