Google Chrome
What the default settings do
Chrome ships with several features enabled that share data with Google and third-party services. These include search predictions, usage statistics, browsing history sync, page preloading, and various forms of ad personalization built on Google’s Privacy Sandbox initiative.
Most of these defaults are designed for convenience. They make browsing faster and more personalized, but they also mean more of your activity is collected and processed. It is worth noting that Google reversed course on fully removing third-party cookies from Chrome: after years of testing a replacement, Google confirmed it will keep third-party cookies as a user choice rather than deprecating them outright, so the cookie setting described below is still something you need to set yourself rather than something Chrome now does for you.
A reasonable privacy baseline
These settings offer a practical balance between privacy and usability. You can find them in Settings from the Chrome menu.
Privacy and Security section
Enhanced Safe Browsing → Consider switching to Standard protection
Standard protection still checks pages you visit against a locally stored list of known dangerous sites and only sends full URLs to Google when something looks suspicious. Enhanced protection evaluates more of your browsing in real time against Google's servers so it can catch newer threats faster, at the cost of sharing more browsing data. A third option, "No protection," disables this checking entirely and is not recommended.
Send a "Do Not Track" request → On
Not all websites honor this, but it signals your preference. Chrome still offers this toggle even though some other browsers have dropped it.
Third-party cookies → Block third-party cookies
This reduces cross-site tracking. Some sites may require you to allow exceptions. Chrome still allows third-party cookies by default outside Incognito mode, so this remains an active choice rather than something already applied for you.
Preload pages → No preloading
This setting has moved out of the Privacy section into Settings → Performance → Preload pages, and now offers three levels: No preloading, Standard preloading, and Extended preloading. Both preloading levels send requests to sites you have not chosen to visit yet, and Extended preloading sends more of your likely browsing activity through Google's servers to predict pages across the web.
Site permissions
Location, camera, and microphone → Leave at the default, Ask before accessing
Chrome already defaults these sensitive permissions to asking first rather than granting automatically, which is a reasonable baseline. Review and remove per-site exceptions you no longer need under Settings → Privacy and security → Site settings.
Notifications → Don't allow sites to send notifications
Chrome's default lets sites ask to send notifications, with a quieter, less intrusive prompt for sites Chrome judges likely to be spammy. Setting the default to fully block notification requests avoids the prompt entirely; you can still allow specific sites (such as webmail or a calendar app) individually.
Sync and Google services
Autocomplete searches and URLs → Off
When enabled, every keystroke in the address bar is sent to Google.
Help improve Chrome's features and performance → Off
This sends usage statistics and crash reports to Google.
Make searches and browsing better → Off
When this is on and Google is your default search engine, Chrome sends the URL of the page you are currently viewing to Google to improve search suggestions and related features.
Sync → Encryption options → Consider Use your own passphrase to encrypt all the Chrome data in your Google Account
By default, synced Chrome data (passwords, history, bookmarks) is encrypted but Google holds the keys and can technically access it. A custom passphrase means only your devices can decrypt your synced data, not Google.
Ad privacy controls
Ad topics → Off
When on, Chrome builds a rolling list of up to a few interest topics based on the sites you visit and shares a small number of them with participating sites; topics are deleted automatically after four weeks, but turning this off stops the profile from being built at all.
Site-suggested ads → Off
Prevents sites from storing ad preferences in Chrome that can resurface as ads on related sites; these suggestions otherwise expire after 30 days but can reappear if you revisit the site that stored them.
Ad measurement → Off
Stops Chrome from sharing ad conversion data (such as whether an ad led to a purchase) between the site that showed the ad and the site where you took action.
Trade-offs
- Blocking third-party cookies may cause some websites to break. You may need to add exceptions for sites you trust.
- Turning off search autocomplete means slightly slower address bar suggestions.
- Standard Safe Browsing relies on a local list of known threats and only contacts Google when a page looks suspicious. Enhanced protection catches newer, unlisted threats faster but shares more of your browsing with Google in the process.
- Disabling preloading, or choosing “No preloading” over Standard or Extended, means pages may load slightly slower when you click a link.
- Blocking notifications by default means legitimate sites (webmail, calendars, delivery tracking) will not be able to alert you unless you add them as exceptions.
- Using a custom sync passphrase means you cannot view saved passwords at passwords.google.com, cannot use Chrome’s built-in leaked-password checkup on the synced data, and cannot recover your synced Chrome data if you forget the passphrase; you would need to reset sync and start over.
Who should not change these settings
- If you rely heavily on Chrome’s personalization features and are comfortable with Google’s data practices, the defaults may suit you.
- If you use Chrome as part of a managed enterprise or school environment, some settings may be controlled by your administrator and will not appear as editable.
- If you depend on Chrome’s password leak checkup or viewing saved passwords through your Google Account on the web, skip the custom sync passphrase, since it disables both.
- If any of these changes make websites you depend on stop working, reverting individual settings is straightforward.