A privacy tuner for Chrome

Sugar Cookies

Not all cookies are sweet and fresh.

Every website you visit leaves crumbs behind, and some companies make a living off collecting your data from them. This guide will help you create a recipe that enhances your privacy and trashes your spoiled cookies.

It works on both Mac and Windows and doesn't require advanced security skills. Some privacy settings on Chrome for mobile are distinct, so it's best to make changes on your computer and let sync push them (if applicable) to your phone.

The Sweet Sixteen

Sixteen settings: two ways to fold them in

We scoured Chrome's URLs to find the top sixteen settings that can make your online experience more private. This guide walks you through what each setting does, how to change them, and what to watch out for. You can access the URLs two different ways:

1
Copy and paste

Use the Copy button then paste the link into the address bar. Why? Because Chrome doesn't let web pages open its internal settings directly.

2
Install the Sugar Cookies bookmarks

Every setting page is accessible with one click. No more copy and paste. To download the bookmarks folder, click here and follow the instructions.

Short on time?

The five settings that matter most

If you only do these five, you will have done more than most. After you complete a setting, click Done to record your progress from being Cookie Curious to becoming a Cookie Savant. You can always come back and continue your journey from where you left off.

Preheater 0 of 16 done

Check off each setting as you finish it.

Cookies and Site Data

Not all cookies are sweet and fresh. Here's how to tell them apart.

Sites Storing Data

chrome://settings/content/all

A list of every site that has saved data on this computer or holds a permission, like your location or camera.

Most people find sites they visited once, years ago, still keeping files on their machine.

What to do: Sort by data stored. Delete any site you don't recognize or no longer use.

Delete Browsing Data

chrome://settings/clearBrowserData

Clears your history, cookies and saved copies of web pages.

It wipes the tracking cookies that have already piled up, so you start fresh.

What to do: A few times a year, choose All time and check cookies and cached files.

Heads up: This signs you out of most websites. Know your passwords first.

Allowed and Blocked Sites

chrome://settings/content/siteData

Sets what websites may save on your computer by default, plus your exceptions.

You can tell Chrome to clean up after every session, while keeping the few sites you trust.

What to do: For the tidiest setup, choose Delete data sites have saved when you close all windows. Then add your bank and email under the Allowed List so they remember you.

Heads up: With cleanup on, you'll have to sign back in to most sites not in the Allowed List after closing Chrome. Skip this one if that would drive you crazy.

Block 3rd Parties / Do Not Track

chrome://settings/cookies

Controls cookies placed by companies other than the site you're actually on.

Third-party cookies are how ad networks follow you from site to site and build a profile of you. Blocking them is the single biggest privacy win in Chrome.

What to do: Choose Block third-party cookies. Also turn on Send a "Do Not Track" request. Many sites ignore it, but it costs nothing.

Heads up: A few sites may misbehave, usually sign-in windows. You can allow just that site from the same page.

Site Permissions

Your kitchen, your rules. Here's how to decide who gets in.

Notifications

chrome://settings/content/notifications

Websites you've allowed to send pop-up messages to your screen, even when you're not on their site.

Fake "your computer is infected" alerts usually come from a site that tricked someone into clicking Allow.

What to do: Remove every site you don't recognize. Then set the default so sites can't send notifications, or use the quieter option.

Location

chrome://settings/content/location

Sites that can see where you are.

A map needs your location. A recipe site doesn't.

What to do: Remove sites that don't truly need it. Leave the default as "Sites can ask" so you decide each time.

Camera

chrome://settings/content/camera

Sites allowed to use your webcam.

What to do: Keep only the video-call sites you actually use. Remove the rest.

Microphone

chrome://settings/content/microphone

Sites allowed to hear you.

What to do: Same rule as the camera. If you don't recognize it, remove it.

Security and Privacy Checkups

Even the best recipe needs a taste test. Here's how to run yours.

Safety Checkup

chrome://settings/safetyCheck

Chrome's own inspection. It looks at your saved passwords, extensions, updates and permissions you've stopped using.

What to do: Run it and work through anything it flags. Repeat every few months.

Password Checkup

chrome://password-manager/checkup

Checks the passwords saved in Chrome for ones that were leaked in a data breach, reused, or easy to guess.

What to do: Change any leaked password first, starting with email and banking. Your email password matters most, because it can reset everything else.

Google Privacy Checkup

Open Privacy Checkup

A guided tour of what your Google account saves, like search history, YouTube history and places you've been, plus how Google uses it for ads.

What to do: Set your activity to auto-delete after 3 months. Turn off personalized ads if you'd rather not be profiled.

Heads up: This one is a regular web page, so the link above works. You'll need to be signed in to Google.

Bonus: a Google account page, not a Chrome setting

Safe Browsing and Secure DNS

chrome://settings/security

Safe Browsing warns you before you land on known scam or malware sites. Secure DNS hides the names of sites you visit from others on your network.

What to do: Keep Safe Browsing on Standard or Enhanced, never "No protection." Scroll down and turn on Use secure DNS.

Heads up: Enhanced protection is stronger but shares more of your browsing with Google. Standard is a fine middle ground.

Chrome Defaults and Extensions

Some extras aren't worth the calories. Here's how to spot them.

Startup Pages

chrome://settings/onStartup

What Chrome opens when it launches.

An unfamiliar page that appears every time you open Chrome is a classic sign of adware.

What to do: Choose Open the New Tab page or Continue where you left off. Remove any web address you didn't add.

Extensions

chrome://extensions

Add-ons that give Chrome extra features.

Many extensions can read everything on every page you visit. Some get sold to new owners who start collecting data.

What to do: Remove anything you don't recognize or haven't used in a month. For the keepers, open Details and set site access to On click.

Google Services

chrome://settings/googleServices

Switches that quietly send Google a steady stream of what you do in Chrome: usage statistics, the address of every page you visit and, with one of them, the words you type.

None of them are needed for Chrome to work. Turning them off is a pure privacy win with nothing to break.

What to do: Turn off Make searches and browsing better (it sends the pages you visit to Google), Enhanced spell check (it sends what you type) and Help improve Chrome's features and performance.

Heads up: Improve search suggestions sends what you type in the address bar to your search engine as you type. Turning it off is more private, but you'll lose the suggestions that pop up while typing.

Update Chrome

chrome://settings/help

Checks for the newest version of Chrome.

Most security fixes arrive through updates. An old browser is an easy target.

What to do: Open it, let it finish, and click Relaunch if asked. Your tabs come right back.

Get the bookmarks

A one-time setup. Once the folder is on your bookmarks bar, every setting above is one click away.

Download bookmarks
  1. Download the fileUse the button above. It saves a small file named sugar-cookies-bookmarks.html.
  2. Import it into ChromePaste this into the address bar, choose Bookmarks HTML File, then pick the file. chrome://settings/importData
  3. Move it to your barChrome puts it in a folder called Imported. Drag Sugar Cookies out onto the bookmarks bar. Bar hidden? Press Cmd+Shift+B on Mac or Ctrl+Shift+B on Windows.