A digital footprint is less like a footprint and more like a paper trail that writes itself. Every cookie you wave through, every "sign in with Google" button, every loyalty card and abandoned app leaves a record somewhere. None of it matters much on its own. Stacked together, it's a fairly detailed sketch of who you are, where you live and what you buy.
You don't need to vanish from the internet to shrink it. A couple of focused evenings will clear most of the clutter, and a short routine afterwards keeps it that way. Work through these steps in order — the early ones make the later ones easier.
Start with cookies, because they're everywhere
Cookie banners are designed to be tiring. "Accept all" is bright and obvious; "reject" or "manage" sits in smaller text off to the side. That's deliberate, and it's why most of us click through without reading. You can opt out of a lot of it in a few minutes.
Begin with the browser. Chrome, Safari, Firefox and Edge all keep cookie controls in their privacy settings. Switching on third-party cookie blocking stops the advertising trackers that follow you from site to site, and it breaks very little. You can also set cookies to clear each time you close the browser, though you'll be signed out of everything and will tire of it quickly.
Then change how you answer the banners. Rejection is usually as quick as acceptance once you look for it.
- Block third-party cookies, then check your bank and email still work as expected.
- Choose "reject all" or "essential only" as your default answer rather than accepting everything.
- Clear cookies for sites you no longer visit — old shopping baskets and price comparison tools are the worst offenders.
- Keep a second browser or profile for shopping and casual browsing, and leave your main one signed into the accounts you care about.
One myth worth clearing up: private or incognito mode doesn't hide you from websites or your broadband provider. It simply discards the local record when you close the window.
Work through your privacy settings
Don't audit everything in one sitting. You will drown in toggle switches and give up halfway through. Instead, pick the handful of accounts that hold the most about you — email, social media, cloud storage, shopping — and work down that list over a few evenings. The aim isn't perfect secrecy; it's reducing the amount of information that can be linked back to you.
Start with your Google, Apple or Microsoft account if you use one. These are the hubs that connect your devices, payments, email and location history. In each, look for privacy or data settings and check what is being collected. Google, for example, has controls for Web & App Activity, Location History and YouTube History. Turning off location history doesn't delete past records, so use the auto-delete option too — three months is usually enough for recommendations to still work. Apple users should check Settings, then Privacy & Security, then Tracking, and turn off "Allow Apps to Request to Track" if they don't want cross-app tracking.
Social media is next. On Facebook, Instagram, X and TikTok, the default settings often share more than you'd expect. Work through these areas:
- Audience: Set old posts to friends only, and check who can see your phone number, email and birthday.
- Ad preferences: Turn off "ads based on data from partners" and reset your advertising ID.
- Searchability: Stop search engines and people who aren't logged in from finding your profile by email or phone number.
- Tagging: Require review before tagged posts appear on your timeline.
- Third-party apps: Remove games, quizzes and login tools you no longer use. They often retain access long after you've forgotten them.
Don't forget the quieter accounts: loyalty schemes, takeaways, gyms, old forums, newsletters. They may not feel like social networks, but they hold your address, purchase history and sometimes your date of birth. If you haven't used one in a year, it's a candidate for deletion.
If a service is free, the useful question isn't "What do they know about me?" but "How long do they keep it, and who else can they share it with?"
Delete accounts you no longer use
Old accounts are the digital equivalent of a spare key under the mat. You may have forgotten it, but a data breach hasn't. The more dormant accounts you have, the more chances there are that your email address, password or personal details will surface in a leak.
A practical way to find them is to search your email inbox for phrases like "welcome", "verify your email", "your receipt" and "unsubscribe". That will surface services you signed up to years ago. For each one, decide whether to keep, deactivate or delete. Deactivation is often reversible and leaves your data in place; deletion is what actually removes the account. Look for "Delete account" in the settings or help centre, and be prepared for some companies to make you email support or wait out a cooling-off period.
If you're unsure what a service will do with your data, you can use your rights under the UK GDPR. You can ask for a copy of the personal data they hold about you, ask them to correct it, or in some cases ask them to erase it. Companies must respond within one month, though they can extend that for complex requests. It's not a magic wand, but it's a useful lever when a company is being vague.
Reduce what you hand over in the first place
Cleaning up is half the job. The other half is slowing the flow of new data. You don't need to become a hermit; you just need a few default habits that stop you giving away more than necessary.
Use a separate email address for shopping, newsletters and anything that might sell your details. If you use Gmail or Outlook, you can add a plus sign and a word to your address — for example, [email protected] — and many services will still deliver to your main inbox. If a site rejects that, a free alias service or a second free email account works just as well. When a form asks for your phone number and it isn't essential for delivery or security, leave it blank. If it won't let you, use a landline-style number if you have one, or a number you're willing to change later.
Be equally careful with loyalty cards, competitions and "free" Wi-Fi sign-ups. A date of birth and postcode are enough to match you to marketing databases. If a form asks for more than it needs, ask yourself whether the discount is worth the profile it builds. For UK readers, the Mailing Preference Service can reduce addressed junk mail, and Royal Mail's opt-out service can stop unaddressed door-to-door deliveries. The Cifas Protective Registration scheme is also worth knowing about if you're worried about identity theft; it flags your name and address to lenders for extra checks.
Search, browse and shop more privately
You don't have to switch to a niche browser to reduce tracking. Start with small changes. Use a search engine that doesn't build a profile from your queries, or at least sign out of your main account when you search for sensitive things. Install a reputable tracker blocker in your browser. Clear your browser's cache and cookies every month or two, and review which extensions have access to your data — a free shopping extension that reads every page you visit is a high price for a discount code.
A VPN is often marketed as anonymity, but it mainly hides your traffic from your broadband provider and changes your apparent location. It doesn't stop you signing into accounts, and it doesn't make you invisible to websites. If you use one, choose a paid, reputable provider with a clear no-logs policy rather than a free app that has to make money somehow.
Build a short maintenance routine
The worst mistake is doing a big cleanup and then letting it drift. A few minutes a month is enough to keep the clutter down. Pick a time that suits you — the first Sunday of the month works for many people — and run through this list:
- Check your browser: clear cookies and cache, and review site permissions for camera, microphone and location.
- Review your email: unsubscribe from three newsletters you never read, and delete old accounts you've stopped using.
- Check privacy settings: look for new options or defaults after app updates, especially on social media.
- Update passwords: use a password manager and turn on two-factor authentication for email, banking and social accounts.
- Search for yourself: run your name and email address through a search engine to see what's publicly visible. If something shouldn't be there, use the site's removal request or contact the site owner.
Two-factor authentication deserves a special mention because it does more for your security than almost any privacy toggle. Use an authenticator app or a hardware key rather than SMS where possible. If you must use SMS, keep your phone number private and be aware of SIM-swap attacks, where someone persuades your mobile network to move your number to their SIM. A strong, unique password for your email account is the single most important lock on the door.
When it's worth going further
For most people, the steps above are enough. But there are times when a more serious approach is justified: if you're a survivor of domestic abuse, a journalist, an activist, or someone who has been doxxed. In those cases, consider deleting social media accounts entirely, using a pseudonym, removing your address from public records where possible, and asking the Information Commissioner's Office for guidance. The ICO is the UK's data protection regulator, and it can advise on your rights and take complaints about organisations that mishandle your data.
The goal isn't to be untraceable. It's to be deliberate. Every account you keep, every form you fill in and every app you install is a small trade. Make the trade consciously, and your digital footprint stops being something that happens to you and becomes something you manage.
Photo: VAZHNIK / Pexels
