Does the Do Not Track Header Actually Do Anything in 2026
Patrick Bushe
January 28, 2025 · 5 min read
Do Not Track (DNT) is a browser setting that sends websites a signal asking them not to track you. It sounded like a simple fix for online tracking. In practice, almost every site ignores it.
Why it failed
- It was voluntary: no law required sites to honor it in most places.
- No agreed meaning: industry and privacy groups never agreed on what "tracking" covered. The W3C working group trying to define it closed in 2019 without a final standard.
- Defaults fight: when some browsers turned it on by default, advertisers argued it no longer reflected a user's real choice and ignored it.
What it does today
- Chrome still offers it: Settings → Privacy and security → Third-party cookies → "Send a Do Not Track request".
- Apple removed it from Safari in 2019, partly because the signal itself could help fingerprint users.
- A few sites honor it, but you can't count on it.
Global Privacy Control replaced it
Global Privacy Control (GPC) is a newer signal that tells sites not to sell or share your personal data. The key difference is legal force:
- California: businesses must treat GPC as a valid opt-out under the state's privacy law. The California Attorney General's 2022 settlement with Sephora was partly over ignoring it.
- Colorado and several other states also require businesses to honor recognized opt-out signals.
How to send GPC
- Firefox: Settings → Privacy & Security → "Tell websites not to sell or share my data".
- Brave and DuckDuckGo send it by default.
- Chrome doesn't have a built-in setting; privacy extensions such as Privacy Badger can send it.
What actually stops tracking
- Block third-party cookies in your browser settings.
- Reject non-essential cookies on consent banners. Cookie Auto-Reject clicks "Reject all" for you on many sites.
- Use a content blocker to stop tracker scripts from loading.
- Clear cookies regularly and limit extensions.
Blocking works whether or not a site wants to cooperate, which is why it beats any request signal. See what each cookie type does and the third-party cookie timeline.
Should you turn DNT on?
It does little harm, but little good. Turning on GPC, where available, and blocking trackers will do far more.