| What a cookie actually stores | Text strings — not programs or malware |
| End-to-end encryption availability | Standard in many major messaging apps |
| Typical data broker sources | Public records, loyalty programs, app data, social media |
| Browser fingerprinting resistance | Not blocked by most ad blockers by default |
| VPN limitation | Does not prevent tracking by logged-in accounts |
| Privacy policy average length | Thousands of words — often longer than short stories |
Why Privacy Vocabulary Matters
Online privacy discussions are often undermined by vague or misused terminology. When a headline warns about "hackers stealing your data" or an app promises "military-grade encryption," the words carry weight — but only if you understand what they actually mean.
This reference guide defines the core terms that shape how personal information is collected, shared, and protected online. You don't need a technical background to use it. Whether you're reviewing account settings, reading a privacy policy, or trying to understand a news story about a data breach, having a working vocabulary gives you a clearer picture of what's at stake.
For a deeper look at how these concepts apply to your everyday browsing experience, see our explainer on what your browser actually knows about you.
Incognito Mode Has Real Limits
Private browsing prevents your browser from saving local history and cookies after a session ends — but it does not hide your activity from your internet service provider, employer networks, or the websites you visit. For a fuller picture of what browsers actually collect, see our guide to what your browser knows about you.
Core Privacy Terms Defined
The definitions below cover the most commonly encountered terms across privacy settings, app permissions, security alerts, and data regulation discussions. Use this as a quick-reference companion.
Many of these concepts intersect. Browser fingerprinting, for example, is a tracker technique that doesn't rely on cookies — which is why blocking cookies alone doesn't eliminate all tracking. Understanding how these terms relate to each other helps you spot gaps in common privacy advice.
For a practical look at how some of these mechanisms play out in real account settings, our walkthrough of privacy settings worth checking is a useful next step.
Quick Reference: Key Facts at a Glance
The following facts help put common privacy concepts in context — particularly where assumptions tend to diverge from technical reality.
| What a cookie actually stores | Text strings — not programs or malware |
| End-to-end encryption availability | Standard in many major messaging apps |
| Typical data broker sources | Public records, loyalty programs, app data, social media |
| Browser fingerprinting resistance | Not blocked by most ad blockers by default |
| VPN limitation | Does not prevent tracking by logged-in accounts |
| Privacy policy average length | Thousands of words — often longer than short stories |
It's worth noting that privacy protections are rarely binary. Encryption protects message content but not metadata. A VPN hides your IP address but not your identity if you're logged into an account. Knowing what each tool does — and doesn't — do helps you make more grounded decisions about the tools you use.
Common misconceptions about these protections are explored in detail in our article on online privacy myths that give people a false sense of security. If you're also thinking about how privacy considerations apply to children's digital activity, privacy considerations parents often miss covers those specifics. And for an overview of the rights you may have over your own data, see your rights over your personal data.