Incognito Mode: What It Hides (and What It Does Not)

Incognito mode, called Private Browsing in Safari and Firefox, is one of the most misunderstood features in modern computing. Its name suggests secrecy, and its icon (a hat and glasses, a mask, a moon) reinforces that. What it actually does is much smaller.

A Google class action lawsuit in 2020 alleged that the search giant continued tracking users in incognito mode. The case settled in 2024 for $5 billion. The plaintiff's claim was not that Google had done anything illegal. It was that Google had implied incognito meant more privacy than it does. That implication is the whole problem.

What incognito mode actually hides

Three things, and only three:

• Your local browser history. The pages you visit in an incognito window are not saved to your browser's history.
• Cookies and site data. They are isolated from your normal browser profile and deleted when you close the window.
• Form autofill and saved passwords. The browser will not auto-populate them in an incognito session.

That is the full list. Everything else behaves the same as normal browsing.

What incognito mode does not hide

The list is longer, and this is where the confusion lives.

Your ISP

Your internet service provider sees every DNS request and every connection your device makes. Incognito mode does not change that. Your ISP knows you visited Wikipedia, YouTube and a medical symptom site, even if the exact page URLs are hidden behind HTTPS.

In most countries, ISPs are legally required to keep this metadata for a period of time (often 6 to 24 months) and can be compelled to hand it over in a legal proceeding.

Your employer (on a work network or work device)

If you are on a company network or a company-managed device, everything you do is visible to your employer. Incognito mode does not help. A managed device usually has monitoring software that sees everything at the OS level, below the browser. A work network can see DNS and metadata, and may have a proxy that inspects content.

The rule: never assume incognito mode protects you on a device or network you do not control.

The websites you visit

Every website sees your IP address, which reveals your approximate location and ISP. It sees your browser fingerprint, which combines your user agent, screen resolution, installed fonts, timezone and dozens of other signals to identify you even without cookies. And if you log in to any account, the site obviously knows who you are.

Incognito mode does not stop any of this.

Ad networks and analytics

This is the big one. Third-party scripts from Google Analytics, Meta Pixel, TikTok Pixel, Amazon, and thousands of others still load and still fire in incognito mode. They still collect data on what page you are on, where you came from, how long you stay, and where you scroll. They still send that data to their respective companies.

The only thing incognito changes for tracking is that they cannot link the visit to your normal browsing session via cookies. They can still fingerprint you. They can still use other signals. And the moment you log in to any one of their services, they have you.

Your search engine (if you are logged in)

If you are logged into Google and you open a new incognito window and search on Google, the search is attributed to your account. Signing in is stronger than incognito. This is the specific behaviour that the 2020 lawsuit was about.

What incognito mode is actually for

None of the above means incognito mode is useless. It is designed for specific, legitimate scenarios:

• Logging into a second account on the same website without logging out of the first.
• Checking a website as a new visitor (for web developers, SEOs, marketers).
• Booking a flight or hotel without being tracked across sessions by airline cookies (this only works if the site is not fingerprinting you).
• Using someone else's computer without leaving your browsing history on their machine.
• Shopping for a gift on a shared computer so the recipient does not see it in the browser history.
• Running a demo or a test in a clean browser environment.

None of these are privacy scenarios. They are convenience scenarios. That is what incognito is for.

What to use instead

If your goal is actually private browsing, here is what works, in order of impact.

A content blocker

uBlock Origin blocks ad networks, tracking scripts and analytics from loading at all. This is more effective than incognito mode for reducing what trackers learn about you, because it stops them from running in the first place.

It works in normal browsing. You do not need a special mode.

A privacy-focused browser

Brave and Firefox with strict tracking protection block the majority of trackers by default. Brave also randomises your fingerprint, which is the strongest defence against being identified without cookies.

This is what you want if "private browsing" is your goal. It is on all the time, not just in a special window.

A VPN (for hiding from your ISP)

If you specifically want your ISP to not see which sites you visit, a paid VPN does that. It routes your traffic through an encrypted tunnel to the VPN provider, so your ISP sees only the VPN connection. The VPN provider sees the sites you visit instead.

Choose a VPN provider you actually trust (Mullvad, IVPN, Proton). A free VPN is worse than no VPN for privacy.

Tor Browser (for strong anonymity)

Tor routes your traffic through three volunteer-run relays and encrypts it at each hop, so no single party knows both who you are and where you are going. It is slower than a normal browser, and some sites block Tor traffic, but it provides genuine anonymity against most adversaries.

This is not a tool for daily browsing. It is a tool for specific scenarios where anonymity is the actual goal.

The honest answer

Incognito mode hides your browsing history from anyone who uses the same device as you. It does not hide you from anyone else.

If your threat is "I do not want my partner to see what I am shopping for", incognito works. If your threat is "I do not want Google to know what I search for", it does not. If your threat is "I do not want my employer to know I am job hunting", it definitely does not.

For privacy in the modern sense, you need a content blocker and a browser that respects your data. Those work silently all the time, and they do not pretend to hide more than they do.

The bottom line

Incognito mode is a convenience feature, not a privacy feature. It hides local history. It does not hide your IP, your ISP, your employer, the websites you visit, or the trackers embedded on them.

If you want actual privacy, install uBlock Origin, switch to Brave or Firefox with strict tracking protection, and consider a paid VPN if hiding from your ISP matters to you. Those are the tools that do something. Incognito is the wrong tool with a misleading name.