What Metadata Reveals About Your Browsing Habits
PB
Patrick Bushe
March 16, 2026 · 5 min read
Metadata is data about your activity rather than the activity itself: not what a page says, but that you visited it, when, from where and on what device. On its own each piece seems harmless. Collected over weeks, it can reveal more than the content would.
What browsing metadata includes
- Your IP address, which shows your internet provider and approximate location. See what your IP address reveals.
- The sites you visit and when, including how long you stay.
- Website lookups (DNS), which name every site your browser contacts.
- Your device and browser: type, version, screen size, language and time zone.
- Where you came from: the previous page, sent as the "referrer".
- Identifiers: cookies and IDs in links that tie visits together.
What it can reveal
- Your routine: when you wake, work, commute and sleep.
- Where you live and work, from the locations you connect from most.
- Health, money and relationship concerns, from the sites you visit, even if no one reads them.
- Who you are, when patterns are matched with data from other sources.
Who can see it
- Your internet provider and Wi-Fi network: HTTPS hides the pages and content, but they can still see which sites you connect to. See how ISPs see your browsing.
- Websites and their ad partners: every site, and the trackers on it, logs visits.
- Your DNS provider, unless lookups are encrypted.
- Your browser and extensions, depending on settings and permissions.
- Employers and schools on their networks and devices.
How to reduce it
- Turn on secure DNS: Settings → Privacy and security → Security. See DNS over HTTPS.
- Block third-party cookies and clear cookies regularly.
- Use a trustworthy VPN on public Wi-Fi. It hides sites from the local network and your provider, though the VPN company can see them instead.
- Use Tor Browser for the strongest protection, at the cost of speed.
- Limit extensions to ones you trust.
- Work through a Chrome privacy checklist.
Extension options
- WebRTC Privacy Shield stops video-call features in Chrome from revealing your IP address to websites.
- Ghost Browser makes random background visits, so the profile built from your browsing is less accurate. It adds noise rather than hiding anything, so use it alongside the steps above.
