Every website you visit asks the same question within seconds: accept cookies? Most people click yes just to make the banner disappear, without knowing what they agreed to. Browser cookies are small text files websites store on your device, and they are genuinely useful: they keep you logged in, remember your shopping cart, and save your preferences. But the same mechanism lets advertising networks follow you across the web, building profiles of your browsing that are bought and sold. Understanding what cookies are, how tracking works, and how to stop the parts you do not want, is basic digital hygiene in 2026.

What are cookies, technically?

A cookie is a small piece of data, usually just a few kilobytes, that a website asks your browser to store. When you return, the browser sends it back, letting the site recognise you. First-party cookies come from the site you are actually visiting: these handle logins, remember language settings, and keep items in your cart. They are the helpful kind, and breaking them breaks websites. Third-party cookies come from other domains embedded in the page: advertising networks, analytics services, social media buttons. A single news article can load trackers from dozens of companies you have never heard of, each dropping cookies that recognise you across every site carrying their code. It is this third-party layer that turned a humble memory aid into a surveillance infrastructure.

How does website tracking work?

Tracking stitches your browsing into a profile through several mechanisms working together.

• Third-party cookies: the classic method, letting an ad network recognise you on thousands of sites and build an interest profile.
• Pixels and beacons: invisible images that report page views back to trackers, often used in emails too.
• Fingerprinting: combining your device model, screen size, fonts, browser version and dozens of other signals into a unique identifier that works even without cookies.
• Login-based tracking: when you are logged into Google or Meta, your activity across their vast empires is tied to your identity directly.
• Mobile ad IDs: your phone’s advertising identifier lets apps and trackers link behaviour across apps until you reset or disable it.

The result is sold as audience segments, “in-market car buyers in Mumbai”, and used to target ads, set prices and train algorithms.

Why are third-party cookies going away?

The industry is in a long, messy transition. Safari and Firefox blocked third-party cookies years ago; Google Chrome, which dominates browsing in India, has been phasing them out through its Privacy Sandbox initiative, replacing them with technologies that group users into interest cohorts rather than tracking individuals. Regulators pushed this along: Europe’s GDPR and India’s data protection law require meaningful consent for tracking, which those cookie banners, however annoying, attempt to collect. The transition is incomplete and contested: advertisers warn of broken business models, privacy advocates warn the replacements still enable profiling, and fingerprinting threatens to fill the gap. But the direction is clear: the free-for-all era of third-party cookies is ending.

How to stop unwanted tracking

You have more control than the banners suggest. Start with your browser: enable “block third-party cookies” in Chrome, Edge or Firefox settings, and turn on Do Not Track and Global Privacy Control signals. Use your browser’s cookie controls to clear cookies periodically, or set it to clear them on exit. Install a reputable tracker blocker like uBlock Origin or Privacy Badger, which stop many trackers before they load. On your phone, disable ad personalisation: reset or turn off the advertising ID in Android’s privacy settings and enable “Ask App Not to Track” on iPhones. Review which apps and extensions can see your browsing, and remove the ones you do not recognise. None of this makes you invisible, but it collapses most of the commercial tracking most people face.

What about those cookie banners?

The banners exist because the law requires consent, but their design often manipulates it: “Accept All” in a big bright button, “Reject” buried three clicks deep. Fight back with thirty seconds of effort. Look for “Manage preferences”, “Reject all” or “Necessary only” options; under Indian and European law these must exist and be honoured. Consider a consent-management extension that auto-rejects non-essential cookies. And understand what you are choosing: rejecting optional cookies rarely breaks sites, since necessary cookies for login and core function are separate. The sites that punish rejection with degraded service are telling you something about their business model.

FAQs

Will blocking cookies break websites? Blocking third-party cookies almost never breaks sites. Blocking all cookies, including first-party, will log you out everywhere and break carts and preferences, so keep first-party cookies enabled.

Are cookies dangerous like viruses? No. Cookies are plain text; they cannot execute code or infect your device. The risk is privacy, not malware.

Does incognito mode stop tracking? It stops your browser saving history and cookies locally after the session, but trackers still see and profile you during the session itself.

Cookies began as a clever solution to the web’s forgetfulness and became the backbone of surveillance advertising. The good news is that the tools to tame them are built into every browser, and the industry’s direction is toward less invasive defaults. Take ten minutes to configure your browser and phone, reject the optional cookies as a habit, and the web gets noticeably less creepy without getting any less useful.

Compiled by the Khabar 24h Editorial Desk from publicly available sources.