Five Browsers, Five Privacy Policies, One Honest Comparison

2026-03-20 upd. 2026-03-21 tech/security 10 min read

Every few weeks, someone somewhere asks: "Is Opera GX spyware?", "Is Brave legit?", "Is Firefox still worth it?" — and the answers range from "it's all fine" to "the Chinese government is reading your grocery list." Both are nonsense.

I took a hard look at five of the most debated browsers — not with a tinfoil hat, but with a sober eye on what the companies themselves write in their privacy policies, what independent audits say, and where there have been real controversies. No hearsay, no Reddit rage.

The contenders: Firefox, Brave, Vivaldi, Safari, and Opera GX.


TL;DR — Which Browser Should You Use?

Are you on Apple? → Use Safari. It has the strongest anti-tracking architecture of any mainstream browser, and you already have it installed.

Are you on anything else? → Use Brave.brave.com Best privacy out of the box, no configuration needed, works everywhere.

Do you care about keeping the web independent from Google's Chromium monopoly? → Use Firefox.mozilla.org It's the only major browser running its own engine. Go into settings once and turn off the telemetry.

That's it. Three browsers, three reasons. Everything else is details — and if you want those, read the full post below.


First things first: None of these are "malware"

There is no serious, current evidence that the official installer of any of these five browsers contains malicious software. Period.

What does exist: fake installers impersonating popular browsers, distributed through shady download sites. Opera GX and Brave are particularly popular targets for this kind of brand abuse. The fix is simple: Always download from the official website. Not from "download-browser-free-2026.xyz". I'm sure that site has your best interests at heart though. /s


Firefox — The Veteran With a Few Scuffs

Firefoxmozilla.org is the browser many people recommend on principle: independent from Google, its own engine (Gecko instead of Chromium), open source, backed by the non-profit Mozilla Foundationmozilla.org. All of that is true, and it genuinely matters — because the more people use only Chromium browsers, the more control Google has over the web.

What Firefox does well

Firefox has strong built-in tracking protection. It blocks third-party trackers, fingerprinting, and crypto miners by default. And if you want, you can crank the protection up even further.

What you should know

Firefox collects telemetry data by defaultsupport.mozilla.org — performance metrics, memory usage, feature usage, device info. No browsing history, no passwords, but also not "zero data." Mozilla is transparent about it: you can turn it all offsupport.mozilla.org, and they say previously collected data gets deleted within 30 days. But if you thought Firefox was completely data-free out of the box, that's a myth.

Then there was some trust erosion in 2025: new Terms of Use caused an uproarblog.mozilla.org (Mozilla clarifiedblog.mozilla.org they weren't claiming ownership of user data), and an ad attribution experiment called "Privacy-Preserving Attribution" was prepared but never actually activated. Still, it showed that Mozilla is increasingly experimenting with ad-adjacent technology. Not exactly on-brand for the "privacy browser." But hey, everyone needs to pay the bills somehow, right? /s

My verdict on Firefox

Solid browser, actively maintained, and strategically crucial for an open web. But the "Firefox is automatically the privacy king" myth doesn't hold up unconditionally anymore. If you use it, go into the settings and configure the telemetry consciously.


Brave — Strong Privacy, With One Stain on the Record

Bravebrave.com is the browser that markets privacy the hardest — and actually delivers. Shields block trackers, fingerprinting, cross-site cookies, and even tracking parameters in URLs, all by default, without you having to flip a single switch.

What Brave does well

According to its own privacy policybrave.com, Brave does not collect or store your browsing history. Safe Browsing runs through a proxy so your IP doesn't go directly to Google. Compared to other Chromium browsers, Brave communicates remarkably little with its own serversbrave.com. That's a strong overall package.

What you should know

In 2020, Brave was caught automatically injecting affiliate linkscoindesk.com into certain crypto URLs — without being transparent about it. It wasn't a security issue, but it was a real breach of trust. The CEO apologizeddecrypt.co, the behavior was removed. But for a browser that puts "privacy-first" on the flag, that was a spectacularly bad look.

Also, Brave ships with a lot of stuff these days: Wallet, Rewards, Brave Ads, AI, News, Talk, VPN. Each feature is built relatively privacy-consciously, but every additional feature is also additional complexity and potentially additional attack surface.

…Because what a privacy browser really needs is a cryptocurrency wallet… /s

My verdict on Brave

If you want a browser that does most of the heavy lifting for you out of the box, without manual configuration, Brave is currently the strongest pick. The affiliate link incident is worth knowing about, but it was fixed. The many extras are a matter of taste — if you don't need them, you can ignore them. Or turn them off entirely.


Vivaldi — The Tinkerer's Browser

Vivaldivivaldi.com is for people who want to configure their browser down to the last pixel: tab stacking, custom themes, built-in mail client, calendar, RSS reader. It's the Swiss army knife of browsers.

What Vivaldi does well

Vivaldi clearly statesvivaldi.com that user data is neither sold nor shared. There's a built-in tracker and ad blocker (though you should manually set it to a more aggressive level — the default isn't the strongest). Security updates arrive promptly, with Chromium patches integrated regularly.

What you should know

Vivaldi had a unique ID controversy: each installation sends a unique identifier to Vivaldi's serversvivaldi.com every 24 hours for user counting. To many people, that looked a lot like tracking. Vivaldi acknowledged the issuehelp.vivaldi.com and planned to switch to a local-only solution — though as of their own update, the unique ID is still in usehelp.vivaldi.com because alternative counting methods weren't accurate enough. Problem recognized, solution still pending — which shows that even well-meaning developers don't automatically get everything right.

And: Vivaldi is not fully open source. The Chromium core is open, but their own UI layer on top is not completely so. For most users, irrelevant. For particularly security-conscious people, a trust minus. I'm sure "just trust us, the code is fine" has never gone wrong before. Sounds pretty much like "Source: trust me bro" /s

My verdict on Vivaldi

A genuinely good browser for power users who want control and features. Privacy is decent, but not at Brave or Safari level. If maximum privacy is your goal, this isn't quite it. If you want a configurable all-rounder, absolutely.


Safari — The Quiet Winner (If You Have Apple)

Safari often gets overlooked in browser debates because it's "just there." Which is a shame, because from a privacy perspective, it's one of the strongest in the field.

What Safari does well

Apple has technically hardened Safari against tracking quite aggressively: third-party cookies are blocked by default. Intelligent Tracking Prevention (ITP)webkit.org classifies trackers locally on your device and limits or deletes their data. WebKit's Tracking Prevention Policywebkit.org makes the philosophy explicit: all cross-site tracking should be prevented by default, and circumvention attempts are treated with the same seriousness as security vulnerabilities. In Private Browsing, tracking parameters are stripped from URLs. And since Safari 26.0, known fingerprinting code faces additional restrictions — APIs for screen dimensions, hardware info, and canvas are deliberately made less talkative.

On top of that, Safari has a restrictive extension model: in new profiles and in Private Browsing, extensions are disabled by default.

What you should know

Safari only exists on Apple devices. You're locked into the ecosystem, and updates come through the operating system — you can't update the browser independently. Flexibility and extensibility are significantly lower than Firefox or Vivaldi. And independently auditing the whole thing is harder than with a fully open project. But Apple would never use their ecosystem lock-in for anything but your benefit. /s

My verdict on Safari

If you're in the Apple ecosystem, Safari is an excellent privacy choice — arguably the strongest anti-tracking architecture in the mainstream. The price is less flexibility and the Apple leash.


Opera GX — The One Everyone Fights About

Opera GXopera.com is the "gaming browser" with a CPU/RAM limiter, Discord integration, and flashy design. No browser generates more online arguments. So: what's actually true?

What Opera GX does well

Opera GX is Chromium-based, gets regular security updates, and has built-in protection against malicious websites. Opera's VPN has been audited by Cure53 and Deloitteblogs.opera.com (security audit and no-log audit respectively). These are real security measures, not a malware profile. Opera has also published a rebuttalblogs.opera.com against common "spyware" accusations, calling them misleading.

What you should know — and this is where the list gets longer

Telemetry: According to Opera's own security pageopera.com, Opera collects data to "improve and monetize" its free browsers. This includes installation ID, machine ID, hardware specs, OS data, and feature usage. On Windows, there's a "Browser Assistant" that can report system events like battery level, storage space, or newly detected Wi-Fi networks. This data is stored for up to four years according to the privacy policy. That's noticeably more than any of the other four browsers.

Ad profiling: Opera serves targeted advertising and builds rough interest profiles from visited website categories, device info, and clicked ads. Opera says this happens on a consent basisblogs.opera.com — but it happens. Brave and Safari don't do this.

AI/Aria: If you use the AI features, your prompts and potentially open tabs are forwarded to OpenAI or Google. Chats are stored for up to 365 days on Opera's servers (with an account) or 30 days (without). Opera says the data isn't used for AI training — but the data flow exists. I'm sure sending your browsing tabs to OpenAI is exactly what "gaming browser" implies. /s

Ownership structure: Opera is registered in Osloopera.com and subject to GDPR. At the same time, the majority shareholder is Kunlun, a Chinese company. That's not technical proof of espionage, but it's the reason the "Chinese spyware" accusation is so persistent. Add to that old controversies around predatory loan apps in the Opera group (2020), which had nothing to do with the browser itself but damaged trust in the company.

…And now a word from our sponsor RAID Shad-- cough cough /s

My verdict on Opera GX

Opera GX is not malware. But of the five browsers in this comparison, it's the one where telemetry, ad profiling, AI data flows, and governance questions together paint the murkiest overall picture. If you want to use it: download officially, disable AI if you don't need it, review the telemetry and personalized advertising settings, and always keep it updated.


If you just want a good, secure browser:

Brave. Works on all platforms, protects you out of the box, zero configuration needed.

If you use Apple and want it simple:

Safari. Technically excellent at tracking protection, and you already have it.

If an independent web matters to you:

Firefox. The only relevant alternative to the Chromium monoculture. But go into settings once and turn off the telemetry.

If you want a tinkerer's browser:

Vivaldi. Not the privacy hardliner, but extremely customizable and solid.

If you like Opera GX:

Not the end of the world — but disable the AI features, check the advertising and telemetry settings, and only download from opera.comopera.com.


One Last Thought

Your browser choice isn't the only lever. A browser with perfect privacy defaults doesn't help much if you sign into Google everywhere, hit "Accept All" on every cookie banner, and never update. Conversely, a mediocre browser with conscious usage, a good adblocker, and regular updates can be perfectly fine.

The most important step isn't the perfect browser. The most important step is bothering to look in the first place.

Built in Germany with ♥︎ powered by satz v0.8.2