Your Browser Is Wearing A Wire

Your browser is the single most active piece of software on your machine. It sees everything you type before the websites do. It knows your tabs, your times, your tempo. And if you're running Chrome, Edge, or Safari, it's narrating all of that back to a parent company whose business model depends on the narration. These aren't browsers. They're informants with bookmark bars.

Each of the three big ones reports to a different empire — Google, Microsoft, Apple — with different dialects of the same surveillance language. Let's go one at a time, with receipts.

01 Chrome: Google's ad business with a bookmark bar

Chrome is a data pipeline that happens to render websites. In April 2024, Google settled a class action that had been filed back in 2020, agreeing to delete billions of records of private browsing data and rewrite its disclosures about what Incognito mode actually does. The plaintiffs alleged Google kept collecting data on users even when they thought they were browsing privately — through Analytics, Ad Manager, and various third-party integrations that didn't give a damn what mode your window was in. TIME ↗ NPR ↗

Worth separating two things people constantly mash together: the Incognito lawsuit was about Google's ad tech tracking you on third-party sites. Privacy Sandbox is a separate Google initiative — their proposed replacement for third-party cookies, which critics call surveillance with a new coat of paint. Both are controversial. They're not the same controversy.

Either way, when you're in Chrome, you are the product. Fingerprinting — fonts, installed extensions, screen resolution, battery status, GPU — happens whether you're signed in or not. The Incognito settlement doesn't change that. It just requires Google to admit it a little more clearly in the fine print.

02 Edge: Chromium in a trench coat

Microsoft's Edge sits on the same Chromium base as Chrome but layers its own bloat and its own phone-home behaviors on top. A crypto wallet. A shopping assistant. Coupon injection. AI-generated blurbs nobody asked for. It's not a browser. It's a delivery vehicle for Microsoft services.

The one that made headlines: in April 2023, Edge users discovered that the browser was sending the full URL of nearly every page they visited to a Bing API endpoint. Reddit caught it first. The Verge and The Register confirmed it was a misfired "Follow creators" feature that was supposed to notify Bing only on whitelisted sites — but shipped sending almost all of them by default. Microsoft said it was investigating. The Register ↗ 9to5Google ↗

Separate from the URL leak, Edge ships shopping tools that inject coupons and price comparisons on retail pages, a feature Microsoft has promoted heavily and privacy advocates have flagged as page-level behavioral tracking dressed up as a consumer perk. The two scandals are different. Stack them and you get the picture: Edge treats the address bar as a revenue surface.

03 Safari: the privacy brand with a paywall

Apple wants you to believe they're the white knight. Tim Cook on stage. "Your data is your own." The ads on the side of buildings. And to be fair, Safari does block third-party cookies by default and resists a lot of cross-site tracking out of the box. That's real.

What's also real: the flagship Safari privacy feature, iCloud Private Relay, is paywalled. Per Apple's own legal page, Private Relay is offered only as part of an iCloud+ subscription — meaning the strongest IP-masking option Apple ships is reserved for paying customers, only works inside Safari, and isn't available in every country. Apple Legal ↗

Apple is a privacy brand the same way a fast-food chain is a wellness brand. It sounds nice on the bag. You still feel greasy after.

04 The Firefox reminder: your priors expired

For years, Firefox was the non-negotiable recommendation. Non-profit backing. No ad business. "We never sell your data" printed right on the FAQ. Then February 2025 happened.

Mozilla rolled out a new Terms of Use with broad language granting themselves a royalty-free worldwide license to information users input through Firefox. At the same time, they quietly deleted the "we don't sell your personal data" pledge from their public FAQ. The backlash was immediate — even Brave CEO Brendan Eich posted a three-letter reaction on X. Mozilla walked parts of it back within days, clarified the license language, and published a follow-up explanation citing evolving legal definitions of "sale" under California's CCPA. TechCrunch ↗ The Register ↗ Mozilla ↗

Does this mean dump Firefox? Not necessarily. The walked-back terms are cleaner now, and hardened builds like LibreWolf strip telemetry by default and ignore the whole Mozilla-adjacent business drama. But the old reflex of "just tell people to use Firefox" — that one needs retiring. The non-profit halo got noticeably smaller in 2025.

05 What to actually run

None of these are perfect. All of them are better than the default. Pick based on your threat model, not vibes.

• 🦊 Firefox (hardened) — Pair with uBlock Origin and a few about:config tweaks. Still the most flexible option if you're willing to configure it, and still the only major non-Chromium engine. Updated priors apply.
• 🛡️ LibreWolf — Firefox fork with telemetry stripped and privacy defaults locked in. No sync, no Pocket, no Mozilla account. Install-and-go for people who don't want to tune config files.
• 🦁 Brave — Chromium base so Chrome extensions work. Built-in tracker and ad blocking, optional Private Window with Tor routing. Two caveats worth naming: a 2020 affiliate-link incident where Brave auto-added referral codes without disclosure, and a 2021 DNS leak in its Tor private windows. Both were fixed, but they happened.
• 🧅 Mullvad Browser — Built by The Tor Project, distributed by Mullvad VPN, released April 2023. Designed to give you Tor Browser's anti-fingerprinting without the Tor network — paired with a trustworthy VPN instead. Telemetry-free, private mode default.
• 🧄 Tor Browser — The actual Tor network. Slow, breaks some sites, overkill for most daily use. But it's the standard for serious anonymity needs — journalism, activism, anything where location linkage is a real threat.

06 What the browser can't fix alone

Switching browsers is step one. It's not the whole staircase. A hardened browser on a network leaking your DNS to your ISP, searching through an ad-funded engine, on a phone where the operating system forces an engine choice on you — that's a half-measure.

The point isn't to achieve perfect privacy. That's not a real destination. The point is to stop being passively catalogued by three companies with legal obligations to their shareholders and no particular obligations to you. Every switch you make — browser, search, DNS, extension — pulls one thread out of that profile. Do enough of them and the profile stops being useful to the people trying to build it.