Private Browsing Isn't Private: What Incognito Mode Actually Does (and Doesn't Do)
Google paid $5 billion in 2024 to settle a class-action lawsuit over Chrome's Incognito mode. The allegation: Google continued tracking users even when they thought they were browsing privately. The settlement tells you everything you need to know — "private" browsing is not what most people think it is.
Here is what Incognito mode (Chrome), Private Browsing (Safari/Firefox), and InPrivate (Edge) actually do, what they do not do, and what you need instead for real privacy.
What Incognito Mode DOES
Incognito mode protects you from people who share your device. That is its primary purpose.
When you open an incognito/private window:
- Browsing history is not saved. When you close the window, the sites you visited do not appear in your browser history.
- Cookies are deleted on close. Cookies from your incognito session are wiped when you close the window. This means you are logged out of everything and sites cannot track you via persistent cookies across sessions.
- Form data is not saved. Anything you type into search boxes or forms is not auto-saved for future use.
- Downloaded files stay. Files you download are saved to your computer normally — they are not deleted when you close the window.
The use case this serves: You are searching for a birthday gift on a shared family computer and do not want your spouse to see "diamond necklace" in the browser history. You are checking a second email account on a work computer and do not want to stay logged in. You want to see a website without your personalized cookies affecting the content (useful for comparing prices or seeing how a page looks to a new visitor).
These are the only things incognito mode does. Everything else people assume about it is wrong.
What Incognito Mode DOES NOT Do
1. It Does Not Hide Your Activity From Your ISP
Your Internet Service Provider (Comcast, AT&T, Verizon, Spectrum, etc.) can see every website you visit in incognito mode. Incognito affects what your browser stores locally — it does not affect your network traffic.
Your ISP sees your DNS queries (which websites you are requesting) and can log the domains you visit. They can sell this data to advertisers. They do.
2. It Does Not Hide Your Activity From Your Employer
If you are on a work network or a company-managed device, your IT department can see your incognito browsing. Corporate network monitoring tools operate at the network level — they see traffic regardless of browser mode.
Using incognito on a work computer does not protect you from your employer seeing that you spent 45 minutes on Reddit.
3. It Does Not Hide Your Activity From the Websites You Visit
Every website you visit in incognito mode sees your IP address, your browser type, your operating system, your screen resolution, and dozens of other "fingerprinting" data points. The website knows you visited. It just does not have your persistent cookies from a previous session.
Google, Facebook, Amazon, and other major platforms can still identify you through fingerprinting even without cookies. You are not anonymous.
4. It Does Not Protect Against Malware
If you click a malicious link in incognito mode, you get the same malware as you would in regular mode. Incognito does not add any security layer against viruses, phishing sites, or malicious downloads.
5. It Does Not Hide Your Searches From Google
If you are logged into your Google account in an incognito window (which Chrome allows), Google records your searches just like in regular mode. Even if you are not logged in, Google can still associate your searches with your IP address and browser fingerprint.
The Gap Between Perception and Reality
A 2018 University of Chicago study found that 56.3% of people believed incognito mode prevented websites from tracking them. 40.2% believed it hid their location. 22.0% believed their ISP could not see their browsing. All of these beliefs are wrong.
The browsers have gotten slightly better at disclosing this. Chrome now shows a disclaimer when you open an incognito window: "Your activity might still be visible to websites you visit, your employer or school, and your internet service provider." But the disclaimer is in small text that most people skip, and the word "incognito" itself implies invisibility.
Actually hide your browsing from your ISP
NordVPN encrypts your entire internet connection — not just your browser. Your ISP sees only encrypted traffic, not which websites you visit. This is what people think incognito does, but only a VPN actually delivers.
What You Need Instead
| What You Want to Hide | What to Use |
|-----------------------|-------------|
| Browsing from people on your device | Incognito mode (this is what it is for) |
| Browsing from your ISP | VPN (encrypts traffic between you and the VPN server) |
| Browsing from websites | VPN + Firefox with Enhanced Tracking Protection on Strict |
| Browsing from your employer | Your personal phone on cellular data (not the company network) |
| Your IP address from websites | VPN |
| Search history from Google | DuckDuckGo, Brave Search, or Kagi instead of Google |
| All of the above simultaneously | VPN + Firefox + DuckDuckGo + uBlock Origin |
The Practical Privacy Stack
For real browsing privacy (not just from your spouse, but from ISPs, advertisers, and trackers):
- Use Firefox as your browser (better privacy defaults than Chrome)
- Install uBlock Origin (blocks ads, trackers, and malicious scripts)
- Change search engine to DuckDuckGo (does not track searches)
- Use a VPN (encrypts everything so your ISP sees nothing)
- Enable Firefox Strict tracking protection (blocks cross-site cookies and fingerprinting)
This combination provides dramatically more privacy than incognito mode on Chrome — and it works in regular browsing mode, not just a special window.
When to Use Incognito Mode
Incognito is still useful for its intended purpose:
- Gift shopping on a shared device
- Checking a second account without logging out of your primary
- Price comparison — some sites show higher prices to returning visitors (cookies removed = fresh visitor pricing)
- Troubleshooting websites — opens a clean session without cached data or extensions
- Using someone else's computer — keeps your login and history off their device
Just do not mistake it for privacy from the outside world. It is privacy from the person who uses the same computer after you — nothing more.
Key Takeaways
- Incognito mode only hides your activity from people who share your device
- Your ISP, employer, and visited websites can still see everything in incognito
- Google paid $5 billion to settle a lawsuit over misleading incognito privacy claims
- For real privacy: VPN + Firefox + DuckDuckGo + uBlock Origin
- Incognito is still useful for gift shopping, price comparison, and shared computers
- The word "private" in "Private Browsing" is the most misleading label in tech
Get The Private Intelligence — weekly
One privacy fact per week that most people get wrong — plus the tools to fix it. Join 1,000+ readers.
Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.