The Brave browser has positioned itself as a privacy-first alternative to Chrome and Firefox, but its new tab page deserves closer scrutiny from developers and power users who value data sovereignty. This review examines what happens when you open a new tab in Brave, what data leaves your machine, and how the customizable new tab page affects your privacy posture.
Table of Contents
- Understanding Brave’s New Tab Architecture
- Network Request Analysis
- Data Collection Mechanisms
- Custom Tiles and Third-Party Content
- The Brave News Integration
- Privacy-Focused Alternatives
- Inspecting Your Installation
- Configuration Recommendations
- Network Monitoring Methodology
- Threat Model - What NTP Data Leaks Reveal
- Advanced Hardening Configuration
- Custom New Tab Page Implementation
- Privacy Comparison - Brave NTP vs Alternatives
- Verification - Check Current NTP Settings
- Troubleshooting NTP Privacy Issues
- Related Reading
Understanding Brave’s New Tab Architecture
When you open a new tab in Brave, the browser displays a customizable dashboard that can show news, bookmarks, speed dials, and aggregated statistics. The page loads from Brave’s servers and may include elements fetched from third-party sources. Understanding this architecture is essential for anyone conducting a thorough privacy review.
The new tab page (NTP) is implemented as a web extension bundled with the browser. You can examine its source code in the Brave repository, but the compiled version you interact with daily may differ slightly from the open-source code due to build configurations and feature flags.
Network Request Analysis
To understand what data transmits when you load a new tab, developers can use standard browser developer tools or network inspection utilities. Here’s what typically occurs on a fresh Brave installation:
When the NTP loads, the browser makes requests to Brave’s content delivery network to fetch the dashboard components. These requests may include identifiers that correlate with your browsing session. The exact endpoints depend on your region and Brave’s current server configuration.
For users who prefer to minimize even this minimal network traffic, Brave offers an offline mode. Navigate to brave://flags/#ntp-offline-mode to enable it. This caches the new tab page locally, eliminating network requests on subsequent opens. However, this also disables dynamic content like news cards and removes the ability to customize the page through Brave’s sync service.
Data Collection Mechanisms
Brave’s new tab page implements several data collection mechanisms that privacy-conscious users should understand:
Local Storage and IndexedDB - The NTP stores preferences, viewed tiles, and interaction history in browser-local storage. This data remains on your machine and doesn’t transmit to Brave’s servers unless you enable sync.
Usage Statistics - Brave collects anonymous usage data through its telemetry system. Users can disable this in settings under Privacy and security > Help improve Brave. Even when enabled, this data is aggregated and cannot be traced to individual users.
New Tab Metrics - The NTP reports anonymized metrics about which tiles users interact with, how long they view certain sections, and which customization options they select. Developers can examine these requests by filtering network traffic for domains ending in brave.com with /ntp-metrics in the path.
Custom Tiles and Third-Party Content
The most significant privacy consideration involves custom tiles, user-defined shortcuts that appear on the new tab page. When you add a custom tile, Brave stores the URL, title, and favicon locally. However, loading the favicon may cause your browser to make DNS queries or HTTP requests to the target domain, potentially revealing your browsing patterns to network observers.
To add custom tiles without leaking information, use Brave’s built-in bookmark functionality rather than external services. Here’s how to create a privacy-respecting speed dial entry:
- Navigate to your desired site in a regular tab
- Press
Ctrl+D(orCmd+Don macOS) - Check “Show in New Tab” to display it as a tile
- Click “Done” to save
This approach keeps all tile data local and avoids third-party trackers commonly embedded in online bookmark services.
The Brave News Integration
Brave’s new tab page often includes a news feed powered by Brave’s own content aggregation system. This feature has undergone significant privacy evolution, but developers should understand its current implementation:
The news feed loads content from Brave’s servers, which may log your IP address and requested categories. You can completely disable the news component by right-clicking on the new tab page and deselecting “Show News” in the context menu, or by navigating to brave://settings/newTab and toggling off the news feature.
For users who want news but prefer not to contribute to Brave’s data collection, consider using RSS feeds with a local reader instead. This approach gives you complete control over what data is collected and by whom.
Privacy-Focused Alternatives
Developers who find Brave’s new tab page too feature-rich have several alternatives:
Extensions - Privacy-focused NTP extensions exist that provide speed dial functionality without telemetry. Extensions like “StartPage” or custom-built solutions using the WebExtensions API can replace the default experience entirely.
Browser Settings - Navigate to brave://settings/newTab to disable most NTP features. You can reduce the page to a simple search box with minimal tracking.
Custom HTML - Advanced users can create a custom new tab page using the chrome://newtab override feature available in some Chromium derivatives. This requires modifying browser files or using specialized extensions.
Inspecting Your Installation
For developers conducting their own privacy review, Brave provides diagnostic tools. Navigate to brave://components to see which NTP-related components are installed and their current versions. The “Brave New Tab Page” component handles all NTP functionality and receives updates independently of the main browser.
You can also examine network traffic programmatically using tools like mitmproxy or Chromium’s built-in net-internals (chrome://net-internals). Filter for requests originating from the NTP to identify any unexpected data transmission.
Configuration Recommendations
Based on this privacy review, developers and power users should consider these configuration settings:
- Disable telemetry: Go to
brave://settings/privacyand disable all telemetry options - Turn off news: Right-click the NTP or navigate to settings to disable the news feed
- Use offline mode: Enable
brave://flags/#ntp-offline-modeif you want a static NTP - Review sync settings: Brave’s sync can replicate NTP data across devices, ensure you’re comfortable with this
- Clear NTP data regularly: Use
brave://settings/clearBrowserDatato remove local NTP storage
Network Monitoring Methodology
Conduct your own privacy audit of the new tab page to verify what data transmits:
Using mitmproxy:
Install mitmproxy
brew install mitmproxy
Start mitmproxy listening on localhost:8080
mitmproxy -p 8080
Configure Brave to use mitmproxy as a proxy
Brave Settings → Advanced → System → Open Proxy Settings
Set HTTP Proxy - localhost:8080
Open a new tab and observe all network requests in mitmproxy
Look for domains containing "brave.com", "cdn.jsdelivr.net", or news provider domains
Document the requests, headers, and data being sent
Using Firefox Developer Tools:
While monitoring Brave with Brave DevTools, open the Network tab and:
- Open a fresh new tab (Ctrl+T or Cmd+T)
- Observe all HTTP/HTTPS requests in the Network tab
- Filter by “XHR” to see data requests (distinct from CSS/JS/image loading)
- Examine request headers for tracking identifiers or user data
- Check response headers for cookies or tracking parameters
Expected Network Requests:
- brave.com API endpoints for NTP configuration
- CDN requests for images and static assets
- News feed endpoints if enabled
- Metrics collection endpoints (may contain anonymized usage data)
Threat Model - What NTP Data Leaks Reveal
Understanding the privacy implications of different NTP configurations:
IP Address Leakage - Every request to Brave’s servers or third-party content loads reveals your IP address (or proxy IP). Network observers can correlate multiple new tab openings to track your active browsing periods.
Usage Pattern Profiling - When you open new tabs multiple times per minute, Brave’s servers might log this frequency, creating an usage pattern profile even if the NTP itself doesn’t load content.
Geography Fingerprinting - Your IP address reveals your approximate location. If Brave serves location-specific news or content, they can infer your location from NTP requests.
Tile Preferences - If you sync NTP tiles across devices, Brave can profile your interests based on your bookmark choices and tile organization patterns.
Session Identification - If requests include session IDs or user tokens, Brave can correlate multiple NTP opens to the same session, building session-level usage profiles.
Advanced Hardening Configuration
For users requiring strict NTP privacy:
about:flags Configuration:
brave://flags/#ntp-offline-mode
# Enable offline mode to eliminate network requests
# Trade-off: No dynamic content, no news, no sync
brave://flags/#ntp-modules-first-run-experience
# Control whether first-run prompts appear
brave://flags/#ntp-shortcuts
# Enable/disable shortcuts functionality
brave://flags/#brave-ntp-superreferrer
# Control referrer passing to NTP requests
brave://flags/#brave-news
# Disable Brave News component entirely
brave://flags/#enable-sync-ui-ios
# Control sync integration
Hardened about:config Example:
// These settings further restrict NTP data collection
brave.local_preferences_on_startup = true
# Disables any network calls on startup
privacy.brave.metrics_aggregation = false
# Disables aggregated metrics transmission
privacy.brave.p3a.enabled = false
# Disables P3A (Privacy Preserving Product Analytics)
privacy.brave.stats.v2.enabled = false
# Disables stats reporting
Custom New Tab Page Implementation
For developers willing to implement a custom NTP:
Basic Custom HTML NTP:
Create a local HTML file and configure Brave to use it as the NTP:
<!DOCTYPE html>
<html>
<head>
<title>Private New Tab</title>
<style>
body {
margin: 0;
padding: 20px;
background: linear-gradient(135deg, #1a1a1a 0%, #2d2d2d 100%);
color: #fff;
font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
display: flex;
justify-content: center;
align-items: center;
min-height: 100vh;
}
.container {
max-width: 800px;
width: 100%;
}
.search-box {
width: 100%;
padding: 15px;
font-size: 16px;
border: none;
border-radius: 4px;
margin-bottom: 30px;
}
.tiles {
display: grid;
grid-template-columns: repeat(auto-fill, minmax(100px, 1fr));
gap: 10px;
}
.tile {
background: #3a3a3a;
padding: 15px;
border-radius: 4px;
text-align: center;
cursor: pointer;
transition: background 0.2s;
}
.tile:hover {
background: #4a4a4a;
}
</style>
</head>
<body>
<div class="container">
<input type="text" class="search-box" placeholder="Search..."
id="searchBox" autofocus>
<div class="tiles" id="tiles"></div>
</div>
<script>
// All data stored locally, no network requests
const bookmarks = [
{ title: 'GitHub', url: 'https://github.com' },
{ title: 'Privacy Guide', url: 'https://example.com' },
];
const tilesContainer = document.getElementById('tiles');
bookmarks.forEach(bookmark => {
const tile = document.createElement('a');
tile.href = bookmark.url;
tile.className = 'tile';
tile.textContent = bookmark.title;
tilesContainer.appendChild(tile);
});
document.getElementById('searchBox').addEventListener('keydown', (e) => {
if (e.key === 'Enter') {
const query = e.target.value;
// Use privacy-respecting search engine
window.location.href = `https://duckduckgo.com/?q=${encodeURIComponent(query)}`;
}
});
</script>
</body>
</html>
Configuration Steps:
- Save the HTML file locally
- Configure as Brave NTP via a custom NTP extension or manual configuration
- All bookmarks and preferences remain local, no network requests
Privacy Comparison - Brave NTP vs Alternatives
| Feature | Brave NTP | Edge NTP | Chrome NTP |
|---|---|---|---|
| IP Leakage | Yes | Yes | Yes |
| Telemetry | Optional | Enabled | Enabled |
| Offline Mode | Yes | No | No |
| Data Sync | Optional | Optional | Optional |
| News Feeds | Optional | Enabled | Disabled |
| Third-Party Content | Minimal | Extensive | Extensive |
| Privacy Controls | Good | Fair | Poor |
Verification - Check Current NTP Settings
Verify your Brave NTP configuration:
Browser Settings Review:
brave://settings/newTab
→ Review all enabled features
→ Disable News, Widgets, or Metrics collection as desired
brave://settings/privacy
→ Verify "Help improve Brave" is disabled
→ Review data sharing preferences
brave://components
→ Find "Brave New Tab Page" component
→ Note current version and update status
Network Verification:
- Open new tab with Developer Tools (Shift+Cmd+I or F12)
- Go to Network tab
- Open another new tab (Command+T)
- Document all requests made
- Compare requests with/without news, metrics enabled
Troubleshooting NTP Privacy Issues
News Feed Not Respecting Disablement:
- Clear Brave cache: Settings → Clear browsing data
- Restart browser completely
- Verify setting persists in brave://settings/newTab
Sync Replicating NTP Data Unexpectedly:
- Check brave://sync-internals/ to see what’s being synced
- Disable NTP sync specifically or all sync
- Clear sync data: Settings → Clear browsing data → Synced data
High Network Usage from NTP:
- Enable offline mode: brave://flags/#ntp-offline-mode
- Disable news: Settings → New Tab Page → News → Off
- Disable metrics: Settings → Privacy → Help improve Brave → Off
Frequently Asked Questions
Is this product worth the price?
Value depends on your usage frequency and specific needs. If you use this product daily for core tasks, the cost usually pays for itself through time savings. For occasional use, consider whether a free alternative covers enough of your needs.
What are the main drawbacks of this product?
No tool is perfect. Common limitations include pricing for advanced features, learning curve for power features, and occasional performance issues during peak usage. Weigh these against the specific benefits that matter most to your workflow.
How does this product compare to its closest competitor?
The best competitor depends on which features matter most to you. For some users, a simpler or cheaper alternative works fine. For others, this product’s specific strengths justify the investment. Try both before committing to an annual plan.
Does this product have good customer support?
Support quality varies by plan tier. Free and basic plans typically get community forum support and documentation. Paid plans usually include email support with faster response times. Enterprise plans often include dedicated support contacts.
Can I migrate away from this product if I decide to switch?
Check the export options before committing. Most tools let you export your data, but the format and completeness of exports vary. Test the export process early so you are not locked in if your needs change later.
Related Articles
- Brave Browser Honest Review 2026
- Brave Browser Vs Edge Privacy Comparison 2026
- Brave vs Safari Privacy Comparison 2026: A Developer Guide
- Brave Browser Ad Blocking vs uBlock
- Best Browser for Developers Privacy 2026: A Technical Guide
- AI Assistants for Creating Security Architecture Review Built by theluckystrike. More at zovo.one