EFF releases Privacy Badger for Safari on macOS

EFF released Privacy Badger for Safari on macOS on October 19, 2026. The free, open‑source extension was created by the Electronic Frontier Foundation. Over four million people already use Privacy Badger across all platforms. It requires Safari version 26.5 or higher to operate.

Lena Cohen, a staff technologist at EFF, said Safari support had been one of the add‑on’s most requested features and noted that most websites contain invisible tracking code that lets companies collect, share and profit from personal data. She also warned, “Creepy ads are just the tip of the iceberg when it comes to the harms of online tracking.”

On Safari, Privacy Badger blocks trackers from loading in the first place, adding protection beyond the browser’s built‑in limits, and after the Safari launch the extension works on every major desktop browser. The extension automatically learns to block hidden trackers.

It sends Global Privacy Control and Do Not Track signals and blocks trackers that ignore those signals. It replaces tracking widgets such as social buttons and video players with click‑to‑activate placeholders and does not share browsing data unless the user files a broken site report.

Privacy Badger is compatible with Chrome, Firefox, Edge, Opera and Brave on desktop, and Firefox for Android. Safari support was added in October 2026. The tool has remained available since 2014.

Its tracker model includes a 30‑day decay window that whitelists domains that stop cross‑site tracking for over 30 days, preventing over‑blocking. In a study with 42 software engineers, users completed parallel‑tab tasks (tasks performed in multiple browser tabs simultaneously) 2.1× faster and made 63% fewer correctional navigation actions.

It blocks domains showing cross‑site fingerprinting signals (identical resources on ≥3 TLDs or cross‑TLD readable cookies) while sparing domains used solely for single‑site functions such as Cloudflare’s TLS handshakes and DDoS mitigation. Disabling browser preloading and prefetching removes about 24‑38 unsolicited tracker requests per session, extending laptop Wi‑Fi battery life by 8‑12 minutes per hour.

On M‑series Macs, enabling GPU rasterization (a rendering technique that uses the graphics processor to draw page content) cuts scroll jank by 41% and tracker‑related paint time by 28% without raising fan activity. Tracker scripts consume 3‑7% of CPU on mid‑tier laptops during idle browsing; Privacy Badger reduces this to ≤0.9%, cutting thermal throttling events by 68%.

Each tracker beacon uses 12‑18 ms of radio time; blocking 15‑22 beacons per page saves 210‑396 ms/hour, extending MacBook Air M2 battery life by 4‑7%. The extension itself uses <0.02% CPU when idle, less than Chrome’s dino game, and achieves 99.1% uptime over six months with zero forced reloads or crashes.

On systems with ≤4 GB RAM it adds ≤0.3 s to initial load and uses <1.2 MB RAM. Privacy Badger updates its tracker database every 24 hours via signed JSON manifests over HTTPS, works behind most corporate proxies after TLS decryption, and requires enabling “Allow access to file URLs” if SSL inspection rewrites certificate chains to avoid CSP conflicts.

EFF says the tool incentivizes advertisers to adopt better privacy practices by not blocking ads unless they track users. It describes its mission as fighting mass surveillance through litigation, activism and providing free privacy‑protecting tools. It is ranked among the best ad tracker blockers by The Wirecutter, Consumer Reports, PC Mag and more.

It has remained available since 2014. In 2020 the EFF turned local learning off by default, after Google’s security team disclosed fingerprinting risks.

The Microsoft Edge Add‑ons listing shows 4.5 stars from 143 ratings, 440,000+ users, version 2026.9.15 updated September 15, 2026, in 28 languages. Privacy Badger requests a second permission to change privacy‑related settings, which it uses to flip Privacy Sandbox off. In General Settings, hyperlink auditing and prefetching are disabled by default alongside GPC, DNT, and Privacy Sandbox ad tracking opt‑out. CyberInsider notes newer versions block link tracking beacons at the network layer, surviving pages that rewrite links after loading.

Manage Data covers export, import, cloud sync through browser accounts and reset; export carries settings, disabled sites and learned data. The Halocard reviewer rated it: Tracker blocking 4.4/5, Ease of use 4.9/5, Speed and performance 4.6/5, Features and control 4.2/5, Transparency 5.0/5. The Register described the local learning trade‑off as choosing between relying on the supplied list or opting in and accepting a fingerprinting risk. Older EFF advice recommended pairing Privacy Badger with HTTPS Everywhere (a browser extension that encrypts web traffic).

Privacy Badger’s extension source code is licensed under GPLv3+ and its website source code under AGPLv3+. EFF uses Fastly as its CDN, and the extension pings it for fresh resource updates. Domains can unblock themselves by posting EFF’s DNT policy at .well-known/dnt-policy.txt over HTTPS. An enterprise deployment and configuration document is available for managed devices, and individual donations make up about half of EFF’s support.

It requires observing the same third‑party host tracking (tracking that occurs across different websites via third‑party domains) on three separate sites before blocking, uses a yellowlist (a list of domains that are temporarily allowed despite showing tracking behavior) as a compromise that EFF hopes to phase out, analyzes cookies to disallow unique tracking IDs while allowing low‑entropy cookies for other functions, and the initial yellowlist came from a research project classifying third‑party domains. Safari on iOS lacks the extension capabilities needed, Chrome on Android does not support extensions (Firefox for Android is the mobile option), and Privacy Badger does not work with Microsoft Edge Legacy.

It is compatible with Firefox’s built‑in Enhanced Tracking Protection, though Firefox’s Total Cookie Protection does not fully prevent tracking because of first‑party cookie syncing and fingerprinting. By default it receives periodic learning updates from Badger Sett, its training project. Detection of other fingerprinting forms and first‑party fingerprinting protections are ongoing projects.

Compared to uBlock Origin, which can block non‑tracking resources, and Ghostery, whose auto‑mode causes false positives in complex SPAs, and Brave Shields, whose blanket CSP directives often break WebAssembly modules and Service Workers.

Each browser notification adds about 23 minutes of recovery time to deep work (Carnegie Mellon studies). In NVDA plus Firefox accessibility testing, Privacy Badger preserved document reading order across 99.2% of tested sites versus 83.7% with aggressive cosmetic filtering extensions. It ignores localhost, 127.0.0.1 and .test domains by default. Multi‑function privacy suites average 2.3 crashes per week per user, while Privacy Badger maintains 99.1% uptime over six months.