Back to Blog

Does the Do Not Track Header Actually Do Anything in 2026

PB

Patrick Bushe

January 28, 2025 · 5 min read

Do Not Track (DNT) is a browser setting that sends websites a signal asking them not to track you. It sounded like a simple fix for online tracking. In practice, almost every site ignores it.

Why it failed

  • It was voluntary: no law required sites to honor it in most places.
  • No agreed meaning: industry and privacy groups never agreed on what "tracking" covered. The W3C working group trying to define it closed in 2019 without a final standard.
  • Defaults fight: when some browsers turned it on by default, advertisers argued it no longer reflected a user's real choice and ignored it.

What it does today

  • Chrome still offers it: Settings → Privacy and security → Third-party cookies → "Send a Do Not Track request".
  • Apple removed it from Safari in 2019, partly because the signal itself could help fingerprint users.
  • A few sites honor it, but you can't count on it.

Global Privacy Control replaced it

Global Privacy Control (GPC) is a newer signal that tells sites not to sell or share your personal data. The key difference is legal force:

  • California: businesses must treat GPC as a valid opt-out under the state's privacy law. The California Attorney General's 2022 settlement with Sephora was partly over ignoring it.
  • Colorado and several other states also require businesses to honor recognized opt-out signals.

How to send GPC

  • Firefox: Settings → Privacy & Security → "Tell websites not to sell or share my data".
  • Brave and DuckDuckGo send it by default.
  • Chrome doesn't have a built-in setting; privacy extensions such as Privacy Badger can send it.

What actually stops tracking

  1. Block third-party cookies in your browser settings.
  2. Reject non-essential cookies on consent banners. Cookie Auto-Reject clicks "Reject all" for you on many sites.
  3. Use a content blocker to stop tracker scripts from loading.
  4. Clear cookies regularly and limit extensions.

Blocking works whether or not a site wants to cooperate, which is why it beats any request signal. See what each cookie type does and the third-party cookie timeline.

Should you turn DNT on?

It does little harm, but little good. Turning on GPC, where available, and blocking trackers will do far more.

More Tools by Patrick Bushe

Free Chrome extensions to boost your productivity and privacy