Is incognito mode really private?

What incognito mode actually is

Incognito, Private Browsing, and InPrivate are the same idea with three different names: a browsing window that doesn't write your activity to your device's local storage. Close the window, and the browsing history, cookies, and site data from that session disappear from your computer or phone as if they never happened.

That's the entire scope of what it was designed to do. It's a local, on-device feature — useful for keeping a search hidden from someone else who uses your laptop, not for keeping it hidden from anyone else on the internet.

Local browsing data

History, cookies, and cached files stored on your device. This is what incognito mode actually clears.

Network visibility

What your ISP, network administrator, or anyone monitoring the connection can see. Incognito has no effect on this at all.

Site-level tracking

What the websites you visit, and the ad and analytics tech embedded in them, can observe about your device and behavior. Mostly unaffected.

What it hides, step by step

To be fair to the feature, it does a specific job correctly. Here's exactly what changes when you open a private window, using Chrome's implementation as the reference point since it's the most widely used.

1. History stops recording

   Pages you visit aren't added to your browsing history, so they won't appear in autocomplete suggestions or the history list later.

2. Cookies are session-only

   Cookies set during the session, including login cookies, are deleted when you close the window. You'll be logged out of everything the next time you open a private window.

3. Most extensions are disabled

   Browser extensions don't run in private windows by default unless you've explicitly allowed them to, since many extensions themselves collect browsing data.

4. Third-party cookies are blocked

   Chrome, Firefox, and Safari all block third-party cookies in private mode by default now — a real, meaningful protection against the oldest form of cross-site ad tracking, the same mechanism we break down in our cookies guide.

What still survives the session

Two things are easy to forget: files you download stay on your device exactly like any other download, and bookmarks you create during a private session are saved permanently. Incognito clears activity records, not the files or bookmarks that activity produces.

What it doesn't hide

This is the part the browser's own "you've gone incognito" splash screen already tells you, in smaller text than most people read. Nothing about opening a private window changes what leaves your device on the network.

Your internet provider still sees every domain you connect to, the same as normal browsing. Your employer or school, if you're on their network or a managed device, can see the same thing, and on a managed device may also see it directly through endpoint monitoring software regardless of what the browser does. And browser fingerprinting — the technique of identifying your device from characteristics like screen size, installed fonts, and GPU rendering behavior — works identically in private mode, because none of the signals it relies on come from cookies or history in the first place.

How the major browsers actually differ

"Private mode" isn't one standard implementation; each vendor decided independently what to block by default, and the gaps between them are large enough to matter if you're choosing a browser specifically for this.

Firefox's Enhanced Tracking Protection is the standout here: it maintains a blocklist of known tracking domains and refuses to load their scripts at all in private windows, which is a meaningfully different approach from just clearing cookies afterward. Safari's protection works similarly against known trackers, and its IP-masking only applies through iCloud Private Relay, which requires an active iCloud+ subscription and isn't on by default. None of the four vendors ship fingerprint resistance strong enough to actually defeat a determined fingerprinting script — that's a harder problem, covered in our canvas and WebGL fingerprinting breakdown.

The Google Incognito lawsuit

This isn't a hypothetical gap. In 2020, a class action was filed against Google alleging that Chrome continued collecting data through Google Analytics, ad tech, and website plug-ins while users browsed in Incognito mode, despite the mode's name and marketing implying otherwise.

Google settled in April 2024. As part of the settlement, the company agreed to delete billions of data records tied to Incognito sessions and to keep third-party cookies blocked in Incognito by default for five years. No damages were paid to the class as a whole — individuals were left free to file separate claims, and roughly fifty had already done so by the time the settlement was filed. Court discovery in the case also surfaced an internal exchange in which Google's own chief marketing officer warned the CEO that describing the mode as private risked "exacerbating known misconceptions" about what it actually did.

The practical takeaway isn't that Google was uniquely bad here; it's that even the company that built the feature agreed, under oath, that "Incognito" was never a privacy mode in the way its name suggested.

See it for yourself

You don't need to take any of this on faith. Open a private window and run two of our tools in it:

• Our IP address checker will show your real IP exactly as it does in a normal window.
• Our browser fingerprint test will generate the same, or a near-identical, fingerprint to your regular browsing session — because none of the signals it reads depend on cookies or history.

If either result surprises you, that's the gap this article is describing, made concrete.

Frequently asked questions

Does incognito mode hide my IP address?

No. Incognito mode doesn't route your traffic through a different server or mask your IP in any way. Your internet provider and every site you visit see the same IP address they would in a normal browsing window.

Can my employer or school still see what I do in private mode?

Yes, if you're using their network or a device they manage. Network-level monitoring and endpoint software both operate independently of the browser's private mode, which only controls what gets saved locally on the device.

Does incognito mode stop websites from tracking me?

It stops the specific tracking method that relies on cookies persisting across sessions, since those cookies are wiped when you close the window. It does not stop browser fingerprinting, which identifies a device using characteristics that have nothing to do with cookies.

Is a VPN with incognito mode more private than incognito alone?

Yes, meaningfully so, because the two solve different problems. Incognito controls what's saved on your device; a VPN controls what your network and the sites you visit can see about your IP and location. Combined, they cover more ground than either alone, though neither addresses browser fingerprinting.

Was Google actually tracking people in Incognito mode?

According to the allegations in a 2020 class action, yes, through Google Analytics, advertising technology, and website plug-ins that continued operating regardless of Incognito status. Google settled the case in April 2024, agreeing to delete billions of the collected data records without admitting wrongdoing.

Sources

• CNN Business — Google to delete billions of browser records to settle 'Incognito' lawsuit, April 2024
• Google Chrome Help — Browse in Incognito mode
• Mozilla Support — Enhanced Tracking Protection in Firefox
• Apple Support — Browse privately in Safari