I understand the irony of attempting to maintain one’s privacy while using Google’s services. Nevertheless, sometimes the realities of life require us to do things we otherwise wouldn’t do. In my personal experience the following settings have worked well.

  1. Create a domain setting for *  Google moves across multiple subdomains during the authentication process, so a wildcard subdomain simplifies the process.
  2. Enable JavaScript. Most of the cool things that Google wants to do require JavaScript.
  3. Enable first-party cookies. Required for authentication.
  4. Enable DOM storage.
  5. Set the user agent to be WebView Default. Google is one of those sites that doesn’t like user agents it doesn’t recognize.