Deleting cookies feels like a fresh start, but fingerprinting can recognise you the moment you return. Here is how the two forms of tracking differ and why they are used together.
On this page
Clearing your cookies does not stop you being tracked.
That is the blunt version, and it is worth sitting with before the explanation. Clearing cookies feels decisive — like wiping a slate clean so no site can remember who you are — and for a long time that instinct was mostly right. Today it is only half the story, because the tracking industry has spent years building a method that survives the wipe entirely. Knowing how the two forms of tracking differ is the difference between a privacy habit that works and one that only feels like it does.
A cookie is stored on your device
A cookie is a small piece of text a website asks your browser to store and send back on your next visit. When that text contains a unique identifier, the site can recognise you across visits: your logged-in session, your shopping cart, your preferences. Third-party cookies extended the same trick across different sites, which is how ad networks once followed you around the web.
The defining feature of a cookie is that it lives on your device. You can inspect it, block it, or delete it, and you can confirm your browser’s current behaviour with the cookies enabled test. That visibility is a real strength — and it is exactly why cookies have fallen out of favour for tracking. They are too easy to see and too easy to remove. Browsers now block third-party cookies aggressively while regulators demand consent banners, so the most dependable tool of the early tracking web has become the least dependable part of it.
A fingerprint is computed, never stored
A fingerprint works the opposite way. Nothing is stored. Instead, a script measures dozens of characteristics of your browser and device — screen size, fonts, graphics rendering, time zone — and combines them into an identifier that is computed fresh on every visit. If the combination is rare enough, and it usually is, the same identifier reappears each time you return.
That inverts every property that made cookies manageable. A cookie is something a site leaves behind, a note in a drawer you can empty. A fingerprint is something a site works out, a conclusion drawn from how the room is arranged. You cannot tidy a conclusion away.
Why the clean slate is an illusion
Here is the trap. You clear your cookies, open a private window, and every visible sign of tracking is gone. The browser reports a clean state, and nothing on screen suggests otherwise. But if a site is fingerprinting you, it recognises your browser the instant the page loads — before you have accepted or rejected a single cookie, and before the page has finished drawing itself.
The clean slate was an illusion, because you deleted the one form of tracking you could see and left the invisible one untouched. This is not hypothetical. As browsers phase out third-party cookies, fingerprinting has moved from a fringe technique to a mainstream fallback precisely because it keeps working when cookies fail. Losing the cookie did not cost the industry the ability to recognise you; it simply moved to a method the cookie’s weaknesses never applied to.
What each technique actually measures
The difference is easiest to hold in one comparison.
| Signal | How it behaves |
|---|---|
| Cookie | Stored on your device; you can inspect, block or delete it |
| Fingerprint | Computed on each visit; there is nothing to delete |
| Private mode | Clears the cookie; usually leaves the fingerprint |
| Consent rules | Block the cookie more and more; rarely touch the fingerprint |
Read down that column and the pattern is plain: every property that gives you power over a cookie is missing from a fingerprint.
Where each approach is strong
Because the two methods fail in different ways, no single defence works on both of them.
What clearing cookies does well
- Removes the identifier you can actually see
- Works well against cookie-based tracking
- Blocking third-party cookies closes a whole channel
Where it falls short
- Leaves the fingerprint completely untouched
- Treats a private window as a fresh identity
- Does nothing about a value the site computes itself
How the two get combined
In practice, trackers rarely choose one or the other. They combine them. A cookie is convenient and accurate while it lasts; a fingerprint is the backup that re-links you to your old profile after you clear the cookie. Delete the cookie, and the fingerprint quietly sets a new one tied to the same identity.
That pairing is sometimes called cookie regeneration, and it is why “just clear your cookies” is no longer sufficient advice. The two cover each other’s weaknesses: one is precise but fragile, the other is blunt but persistent. Set them side by side and you have a system that survives almost any single action taken against it.
What actually helps
If cookies and fingerprints resist different defences, then a real strategy has to address both. Treat them as two separate problems rather than one.
The cookie side
- Block third-party cookies. This removes a whole class of cross-site tracking before it starts.
- Clear them regularly. A cookie you delete cannot carry an identifier forward.
- Isolate sites from one another. Container and partitioning features keep each site’s cookies separate, so one site’s identifier cannot follow you to the next.
These steps are genuinely effective against cookie-based tracking, and they are worth doing on their own terms.
The fingerprint side
- Aim to blend in rather than stand out. Since you cannot delete a fingerprint, the goal is to look like everyone else.
- Prefer a mainstream browser in its default state, or one that actively normalises fingerprints. That is worth far more than any individual tweak, and we cover the specifics in how to reduce your browser fingerprint.
- Signal your preference if you want to. Privacy signals such as Do Not Track and Global Privacy Control express a preference, though only the latter carries legal weight in some regions.
Clearing cookies is not a finish line
The honest conclusion is that no single action makes you invisible, and that is the caution worth carrying away. Clearing cookies is still worth doing — it just is not the finish line it once was, and a private window is not a new identity. Run the fingerprint test after clearing everything, and you will see for yourself how much of your identity remains.