Why Incognito Mode Does Almost Nothing

You reach for it when you want to disappear: a search you’d rather no one saw, a gift you’re buying, something you’d rather keep to yourself. You open a private window, the little hat and glasses appear, the page goes dark, and you feel invisible.

That feeling is the problem. Private browsing does something real, but it’s almost never the thing people think it is. Here’s exactly what it hides, what it doesn’t, and why the gap between the two landed at least one giant company in court.

What it actually does

When you browse normally, your browser keeps notes on your own device: pages go into history, cookies pile up so sites recognise you, and what you type into forms gets saved. A private window simply stops keeping those local notes. Close it, and that session’s history, cookies, and typed entries are gone.

That’s the whole feature. It’s local amnesia, a way to use your own computer without leaving marks on your own computer. Genuinely useful, just not for the reason most people open it.

The clean desk, not the cloak

Here’s the model that fixes everything: a private window is a clean desk, not an invisibility cloak. When you’re done, the desk is wiped, so the next person at your machine sees nothing. That’s real protection against one threat: other people who can physically get at your device.

But a clean desk does nothing about the people watching the building, the shop you walked into, or the road you took to get there. Private mode protects you from people who share your computer. It does almost nothing about everyone else on the path between you and the site.

Who still sees you

Your internet provider still sees which sites you connect to. Your traffic flows through them exactly as always.
Your work or school network can see the same thing, because you’re still using their road.
The website still sees you arrive from the same network address (private mode doesn’t change your address at all), can still read what your browser reveals about your device, and knows exactly who you are the moment you sign in.
Your DNS resolver still sees the name of every site you ask for when your browser looks up its address.

The little hat in the corner is a setting inside one app on your device. It was never talking to the network at all.

Fingerprinting doesn’t care about private mode

Even if you never log in, your device has a fingerprint: your fonts, screen size, and the precise way your graphics and audio behave form a pattern specific enough to recognise you again. Private mode hides none of it. A private window and a normal window on the same machine look essentially identical to a fingerprinting script.

You cleared the cookies, but you brought the same face. This is the part that surprises people most, because clearing cookies feels like it should be enough. For a long time it was. It isn’t anymore.

The name oversells it

Words like “private” and “incognito” promise far more than the feature delivers. They suggest you’re hidden from the world, when really you’re only hidden from your own device’s memory. Surveys have repeatedly shown large numbers of people believe private mode hides their activity from their employer, their internet provider, even the websites themselves.

None of that is true, and the belief was so widespread it became a legal problem: a major browser maker faced a lawsuit arguing people were misled about what incognito did, ending in a settlement involving the deletion of huge amounts of collected data. Enough people misunderstood one feature that it turned into a courtroom fight.

A quick worked example

Picture someone at work who opens a private window to browse job listings. Their browser saves nothing, so a coworker borrowing the laptop later finds nothing. That worked.

But the company network logs the connection to the job site. The resolver recorded the name. The site saw a visitor arrive from the company’s address with the same device fingerprint as always. And if they check personal email in the same window out of habit, they’ve now signed in by name on the very network they were trying to hide from. The private window did its one job perfectly. It just wasn’t the job that mattered.

This is not a VPN

The most common mix-up is between private mode and a tool that reroutes your traffic. Private mode works inside your browser and only manages local memory; it never touches your address or the path your data takes. A rerouting tool does the opposite: it changes where your traffic appears to come from, but does nothing to clear your local history and nothing to stop a site fingerprinting your device or recognising you when you log in.

Neither is a disappearing act. Stacking both still leaves the site able to recognise you by your fingerprint and your accounts. That’s the honest ceiling.

It gets murkier on a phone, where most browsing happens. A private tab in a phone browser still only forgets locally, but on a phone a huge share of what you do never goes through a browser at all, it goes through apps. Apps have their own logins, stored identifiers, and quiet connections back to their makers, none of which a browser’s private mode can touch. Add the device’s advertising identifier tying activity together, and the place people feel most casual is where a private tab covers the least.

Where the wall is actually high

Is there anything that genuinely raises the bar? Yes, but be honest about the cost. The setups that meaningfully increase anonymity are purpose-built, attacking several layers at once: rerouting traffic through multiple hops so no single point sees both who you are and where you went, and making every user’s browser look identical so fingerprinting has nothing to grab. That’s slower, breaks plenty of sites, and demands you change your habits, because one careless login undoes it instantly. That’s the real price of being hard to follow. It’s a discipline, not a toggle.

The takeaway

The danger was never the feature. It’s the gap between what it feels like and what it does. Someone who knows private mode only wipes their local history behaves carefully. Someone who believes it makes them invisible does things they’d never do if they understood the truth, and is quietly exposed the whole time.

Keep the clean desk in your head, not the cloak. It wipes your own desk when you leave. It doesn’t dim the lights in the building. Use it for what it’s good for, and never lean on it for the things it can’t do.

The Hidden Internet takes apart the systems that quietly run the modern web, explained from the inside. No products, just the machinery. Subscribe on YouTube.