Online advertising has fundamentally changed how it tracks people, and many users respond by installing a total ad blocker. That is a legitimate choice — but it is not the only one, and it comes at a cost: it cuts the oxygen supply to independent sites that depend on legitimate advertising revenue. This guide shows you how to meaningfully reduce tracking while still seeing ads on the sites you choose to support. Blocking ads and stopping profiling are two different things, and the second can be achieved without the first.
What Has Changed
For years Google banned fingerprinting in its own advertising policies, calling it in 2019 a practice that "subverts user choice." On 16 February 2025 that position was reversed: companies using Google's advertising technology may now rely on fingerprinting. On top of that, from August 2026 IP addresses can be used for ad measurement and personalisation across the European Economic Area, the United Kingdom, and Switzerland. The UK's Information Commissioner's Office (ICO) described the decision as "irresponsible," arguing that it reduces people's ability to control the collection of their own data.
What Fingerprinting Is (and Why It Is Not a Cookie)
Fingerprinting collects many small technical details about your device and browser — screen resolution, operating system, installed fonts, graphics card, time zone, language — and combines them. Individually these signals are unremarkable; together they often form a combination unique enough to identify you.
The crucial difference from cookies: a cookie can be deleted; a fingerprint cannot. It is not a file stored on your device but the way your device appears to websites. This is why it persists across sessions and across sites, and why users usually do not notice it happening. It is also why private browsing mode does not protect you: it clears local history, but your browser continues to present the same fingerprint.
The Key Principle: You Are Tracked Because You Are Different
Fingerprinting works because your configuration is unusual. From this follow the two strategies explored in this guide, both compatible with ad display:
- Normalise or "noise" your signals — make your browser report standardised or slightly randomised data so the fingerprint does not remain stable and cannot be linked across time.
- Withhold consent to profiling — act at the source, on the legal plane, by refusing the use of your data for personalised advertising.
"The paradox to avoid: piling on privacy extensions often makes things worse — it makes you more unique, therefore more recognisable. Less is more: a well-implemented native protection beats ten overlapping extensions."
Step 1 — Choose a Browser That Defends You But Still Shows Ads
This is the single most impactful lever, and the best options for most users do not block ads: they limit tracking and mask the fingerprint while letting pages load normally.
| Browser | How it defends you (while still showing ads) | Best for |
|---|---|---|
| Firefox (Fingerprinting Protection) |
Introduces random noise into canvas, WebGL, and audio API readings to make signals less useful to trackers, and blocks known fingerprinters. Its "Fingerprinting Protection" mode is designed to reduce invasive tracking while keeping the web usable. Recent updates have measurably reduced trackability. | Recommended for most users. |
| Safari (Apple) |
Advanced Fingerprinting Protection introduced in recent versions injects noise into fingerprint data across all browsing modes. Ads remain visible. | iPhone, iPad, and Mac users. |
| Microsoft Edge | "Tracking Prevention" (Balanced or Strict mode) limits known trackers without blocking ads; can be supplemented with an anti-fingerprinting extension (see Step 3). | Users staying within the Windows/Edge ecosystem. |
A note for those who want maximum protection (with an honest trade-off). Tools like Tor Browser, Mullvad Browser, and full ad blockers offer the strongest available protection — but they stop all ads, including the legitimate ones that fund the sites you read. If absolute privacy is your priority, those are valid and respectable choices; just be aware of the effect on independent creators. For most people, the combination of steps below provides robust protection without going that far.
Step 2 — The Most Effective and Most Fair Move: Refuse Personalisation, Not Ads
This is, paradoxically, the most powerful defence — and also the most respectful towards the sites you visit. Across the EEA, the UK, and Switzerland, consent to advertising is granular: you can accept ads while refusing their personalisation. In that case you are shown non-personalised ads: they still appear (so the site you are reading continues to earn revenue), but they are not based on a profile built by tracking you.
- When a site shows a cookie banner, look for the option to refuse personalisation / personalised ads and accept only what is strictly necessary.
- Consent must be freely given and specific: no pre-ticked boxes. If a banner does not offer a genuine choice, you can report it to your local data protection authority.
- You can also review your preferences at Google Ads Settings and turn off personalisation there.
This approach targets exactly the use that Google is expanding (IP-based and fingerprint-based profiling for personalised ads), acting at the source through legal means — and it does so without starving the sites you value. Seeing a generic ad is a far more equitable price than not supporting content creators at all.
Step 3 — Mask Signals with a Surgical Extension
If you use a Chromium-based browser (such as Edge or Chrome) and want an extra layer without giving up ads, you can add an extension that alters only the signals used for fingerprinting while leaving the rest of the page untouched.
- Canvas Blocker / Canvas Fingerprint Defender — in "fake" mode it does not block anything, but it alters the values returned by canvas and related APIs so that no stable fingerprint can be derived. Available for Firefox, Chrome, and Edge. Does not interfere with ad loading.
- Privacy Badger (EFF) — learns automatically to recognise invisible trackers, including some fingerprinters, in a targeted way.
The golden rule: use one protection per signal type.
Stacking, for example, Canvas Blocker on top of Firefox's native
resistFingerprinting for the same vector can cause slowdowns and — once
again — make you more recognisable. If your browser already has native protection
(Firefox, Safari), you often do not need the extension at all.
Will These Extensions Hold Up Against Google's New Techniques?
That is the right question, and the honest answer is: they help, but alone they are not enough — for two reasons.
First, an extension that spoofs the canvas covers that vector (and little else), while modern fingerprinting combines many signals. Second, and more importantly, Google's update relies heavily on the IP address: no canvas extension reaches that layer. Furthermore, the native browser protection (Firefox, Safari) tends to be more comprehensive and harder to detect than a third-party extension, because it covers more vectors and is shared by a large pool of users.
The combination that is genuinely robust — and compatible with ads — is therefore: a browser with native protection (Firefox or Safari) + refusal of personalisation at the consent banner + IP management (the next step). A canvas extension is a useful reinforcement if you stay on Edge or Chrome, not the foundation.
Step 4 — Manage Your IP Address (Also Without Blocking Ads)
The IP address is the other half of the problem, and it is at the heart of Google's new data-use policy. On its own it is a weak identifier — especially behind a CGNAT, where many users share the same IP — but combined with a fingerprint it becomes powerful. The following solutions operate at this level without blocking ads:
- A trustworthy VPN replaces your real IP. Remember: it changes the IP but not your browser fingerprint, so it should be combined with the steps above.
- Apple's iCloud Private Relay masks the IP for Safari traffic for iCloud+ subscribers.
- Enable DNS over HTTPS in your browser to reduce what your internet provider can observe.
Check Your Exposure
Free, neutral tools to measure how recognisable you currently are:
- Cover Your Tracks (Electronic Frontier Foundation) — shows whether your fingerprint is unique.
- AmIUnique — analyses in detail the signals your browser exposes.
- PrivacyTests.org — compares browsers across dozens of privacy criteria.
An Honest Note
No measure offers total protection: fingerprinting is an arms race. The realistic goal is not invisibility but a meaningful reduction in your trackability by layering multiple defences — a browser with native protection, refusal of personalisation, IP management — and doing all of this without needing to stop supporting the sites you value. Those who want maximum protection do have more radical tools available, at the cost of blocking every ad: that is a legitimate choice, but an unnecessary one for most people.
Privacy does not have to be an all-or-nothing switch. You can protect yourself and keep a web of independent voices alive. Done thoughtfully, the two goals are not in contradiction.