Private browsing has a reputation it hasn’t fully earned. Most people have a reasonable grasp of what it does: the browser doesn’t save your history, cookies are cleared when you close the window, and the session leaves no obvious trace on the device. That’s accurate. It’s also less useful than it sounds.
The longer list is what private browsing doesn’t do — and the gap between the two lists explains why many people feel a false sense of protection using it.
A 2022 lawsuit against Google resulted in a $5 billion settlement in which the company admitted that Chrome’s Incognito mode continued to track users’ browsing data through Google Analytics, ad pixels, and other tools embedded in websites. The suit attracted significant attention because it made explicit what many privacy researchers had been explaining for years: private browsing is a local privacy feature. It is not a network privacy feature.
What Private Browsing Was Designed to Do
Private browsing mode — called Incognito in Chrome, Private Window in Firefox and Safari, InPrivate in Edge — was created to solve a specific, narrow problem: preventing people who share a device from seeing each other’s browsing history.
If you share a computer with a family member and don’t want them to see that you browsed for a birthday gift, private browsing accomplishes that. If you log into a website in a private window, your session data won’t persist after you close it. Autofill suggestions drawn from your regular browsing won’t appear. Cookies set during the session are discarded when you close the window.
This is the complete scope of the original design intent: local session isolation. The browser doesn’t remember what happened.
What Incognito Doesn’t Hide From Your ISP
Your Internet Service Provider sees every network request your device makes. Private browsing mode does not encrypt your traffic, does not route it through any intermediary, and does not hide your IP address. From your ISP’s perspective, a private browsing session looks identical to a regular one.
ISPs in the United States can legally collect and sell aggregated browsing data under rules that were weakened in 2017 when Congress voted to remove FCC privacy regulations. What this means practically is that your ISP can see the domains you visit — not the specific pages or search terms (those are encrypted if the site uses HTTPS), but the destination is visible.
If you’re browsing from a home internet connection, that activity is associated with your account and your address. A government subpoena to your ISP would return records of the sites your connection visited, regardless of whether you used Incognito mode.
What Incognito Doesn’t Hide From Websites
Websites you visit in private mode can still identify you through several mechanisms:
Your IP address is visible to every website you visit. IP addresses can narrow your location to a city or neighborhood and are sufficient to link multiple visits together if your IP doesn’t change between sessions.
Browser fingerprinting collects data about your browser configuration — screen resolution, installed fonts, GPU information, time zone, language settings, browser version — and combines them into a profile that is often uniquely identifying. This works the same in private mode because it reads your device’s properties, not stored cookies. Switching to Incognito doesn’t change your fingerprint.
Tracking pixels and embedded scripts from advertising networks and analytics platforms (Google Analytics, Meta Pixel, and others) run on virtually every commercial website. In private mode, these scripts still execute. They can’t read cookies set in your regular browser profile, but they can still log the visit, collect device data, and in many cases associate it with a profile based on your IP address or fingerprint.
Login state carries over if you log in. If you sign into Google, Facebook, Amazon, or any other service in a private window, that service can now associate your session with your account. The session ends when you close the window, but the record of the visit exists on their servers.
What Incognito Doesn’t Hide on Work or School Networks
If you’re using a device connected to a work or school network, that network’s administrators can monitor traffic passing through it. Corporate firewalls and network inspection tools operate at the infrastructure level — below the browser layer entirely — and see your traffic regardless of browsing mode.
Managed devices (laptops enrolled in MDM systems, school-issued Chromebooks) often have additional monitoring installed at the OS level. Browser mode has no effect on tools that operate at that layer.
On a home network, this isn’t typically a concern. On any network you don’t personally control, it is.
What Incognito Doesn’t Hide From Cloud Sync and Signed-In Browsers
If you’re signed into your Google account in Chrome, your browsing data is synced across devices — including, in some configurations, browsing activity from private sessions. Google’s settings for this have changed over time and can be confusing. The safest assumption is that if your browser is signed into an account, the provider may be collecting data across both regular and private sessions.
Firefox Sync, Apple’s iCloud sync for Safari, and similar cross-device sync services have different policies and different defaults. Reading the sync settings in your browser and understanding what’s being uploaded is the only way to know for certain what’s leaving your device.
When Incognito Mode Is Actually Useful
Understanding its limits doesn’t mean private browsing has no value. It remains useful for specific situations:
Shared devices. If you borrow someone’s computer or use a public terminal, private mode prevents your session from being saved locally. This remains its best use case.
Multiple accounts. Private windows are useful for testing a different login session (a second email account, a work account vs. personal account) without logging out of your main session.
Avoiding personalization. Some websites show different content or prices based on stored cookies and browsing history. A private window starts without that history, which can be useful for price comparison or research where you want an unbiased result.
Local privacy with trusted network. If your primary concern is that no one else on your device sees what you browsed — and you trust the network you’re on, and you’re not logged into accounts — private mode does address that concern adequately.
When You Need More Than Incognito
If your actual goal is network-level privacy — hiding which sites you visit from your ISP, employer, or network administrator — incognito mode doesn’t help. A VPN routes your traffic through an intermediary server and hides the destinations from your ISP, though it shifts trust to the VPN provider.
The Tor Browser routes traffic through multiple relays, making destination tracking significantly harder, though it comes with speed trade-offs and is better suited for high-sensitivity situations than everyday browsing.
For protecting what you store — personal documents, photos, journals — browsing mode is irrelevant. The question is where those files live and who controls the encryption keys. Storing sensitive personal files in a service that uses server-side encryption with access controls you understand is a different kind of privacy than browser mode, and it addresses a different threat.
Most people overestimate what the small incognito icon in their browser tab is doing. It’s clearing your local footprints, which matters in specific contexts and not at all in others. The network keeps its own records.