Private browsing stops all tracking
Incognito mode provides local privacy by not saving history to the device. It does not encrypt traffic, hide the user's IP address, or prevent external parties from seeing browsing activity. True anonymity requires additional tools such as a VPN or Tor.
What we know
Private or incognito browsing modes prevent the browser itself from saving history, cookies, and form data to the local device after the session ends. They do not make browsing anonymous to the outside world. Every major browser maker, including Google, states this directly on the incognito or private-window splash screen that appears when the feature is opened.
Internet service providers can still see every site a device connects to while in private mode, because that traffic still passes through the ISP's network infrastructure. Employers and schools that manage network traffic or install monitoring software on company or school devices can typically still see browsing activity regardless of the browser mode used. Websites themselves can still identify visitors through methods unrelated to cookies, including IP address logging and browser fingerprinting, a technique that combines details like screen resolution, installed fonts, time zone, and browser configuration into a profile that is often unique enough to re-identify a specific device across sessions, private or not.
Google itself faced a class-action lawsuit, Brown v. Google LLC, over exactly this gap between user expectation and reality. Plaintiffs argued that Google continued collecting data through tools like Google Analytics and advertising services embedded in websites even when users browsed in Incognito mode, despite the mode's name implying otherwise. Google settled the case in 2024 for an estimated $5 billion in destroyed data and disclosure changes, while updating its Incognito splash screen language to clarify that websites, employers, and ISPs may still be able to see activity.
What private browsing does reliably protect against is a much narrower threat: someone else using the same physical device afterward and looking through browser history, saved passwords, or autofill data. For any broader anonymity from ISPs, network administrators, or sophisticated trackers, tools designed specifically for that purpose, such as a reputable VPN or the Tor Browser, are needed, and even those have real limitations. Understanding this distinction prevents the common and sometimes consequential mistake of assuming private browsing offers protection it was never designed to provide. Security researchers who study browser fingerprinting have found that a combination of only a handful of device characteristics, such as installed fonts, screen resolution, graphics card details, and browser plugin configuration, can uniquely identify a specific device among millions of others with high accuracy, even without any cookies stored at all. This is why privacy-focused browsers and extensions that specifically target fingerprinting resistance exist as a separate category of tool from ordinary private browsing modes, which were never designed to counter this kind of tracking in the first place. Financial and healthcare institutions that handle sensitive data are increasingly aware of this gap, since several compliance frameworks explicitly warn that private browsing does not meet data protection obligations on its own, precisely because network-level visibility and fingerprinting remain unaddressed by the feature.
Common claims
- Private browsing makes you anonymous online.Not supported
- Websites can still track you in incognito mode through fingerprinting and login data.Supported
- Your ISP or employer can see your activity even in private mode.Supported