Every time you go online, you leave traces behind. Some you create intentionally — a tweet, a product review, a LinkedIn update. Many others are created without you realising it.
Together, these traces form your digital footprint: a persistent, detailed record of your online life.
The two types of digital footprint
Active footprint
This is data you knowingly share:
- Posts, comments, and likes on social media
- Information you enter into forms (name, email, address)
- Reviews you write
- Photos you upload
You chose to put this information out there, even if you didn't think carefully about who could see it or for how long.
Passive footprint
This is data collected about you without your direct input:
- Which websites you visit, and for how long
- Your approximate location (inferred from your IP address)
- The device and browser you're using
- What you click on, and in what order
- How long your mouse hovers over a particular ad
Advertisers, social platforms, data brokers, and even the websites you visit all collect this kind of data continuously — usually buried in the privacy policy you agreed to without reading.
Who collects your data?
Broadly speaking, four groups are interested in your digital footprint:
- Platforms you use directly — Google, Meta, Amazon, and others build detailed profiles of you to target ads and personalise your experience.
- Data brokers — companies you've likely never heard of that buy, aggregate, and sell personal data. There are thousands of them.
- Employers and institutions — it's common for employers to Google candidates, and for universities to review applicants' social media.
- Cybercriminals — exposed personal data can be used for phishing, identity theft, and account takeover attacks.
Why your footprint is bigger than you think
Research consistently shows that people underestimate their own digital footprint. A few things that might surprise you:
- Deleted isn't gone. Once data is shared or scraped, it's often archived by third parties. Deleting a post removes it from your profile, but not necessarily from every server that stored it.
- Apps share data with each other. Many free apps contain tracking SDKs from advertising networks. Using one app may share your data with dozens of third parties.
- Cross-device tracking. Companies link your phone, laptop, and tablet together using a combination of IP addresses, login sessions, and probabilistic fingerprinting.
Three things you can do right now
- Search your own name. Open an incognito/private window and search for your full name. What comes up? That's roughly what an employer, stranger, or data broker can find about you.
- Check for breaches. Visit haveibeenpwned.com and enter your email address to see if your data has appeared in any known breaches.
- Review one app's permissions today. On your phone, pick one app and check what permissions it has (location, contacts, microphone). Revoke anything it doesn't need.
You don't need to do everything at once. Small, consistent steps make a real difference.