Private Windowno local history, no cookies kept

Private Browsing

10 min readPrivacy

Private browsing — Chrome's Incognito, Firefox's Private Window, Safari's Private Browsing — is one of the most misunderstood features in modern computing. Users often think it protects more than it does. It's useful, but for specific things; the protections it doesn't provide are the ones that matter most for actual privacy.

Private browsing is a browser mode that doesn't write history, cookies, cached files, or form data to disk for the session. When you close the private window, the local traces of that session disappear. It's also called "Incognito" (Chrome), "Private Window" (Firefox, Safari), "InPrivate" (Edge), and various other names. The behavior is similar across browsers with minor differences.

What private browsing actually does

  • Doesn't save browser history. Pages visited don't appear in the History view.
  • Doesn't persist cookies after close. Cookies set during the session exist for that session only.
  • Doesn't save form input. Autofill won't remember what you typed.
  • Doesn't cache resources. Files downloaded for rendering aren't kept.
  • Doesn't persist localStorage / IndexedDB — they exist for the session, vanish at close.
  • Doesn't reuse non-private profile state. Your existing cookies, history, and logins don't apply to the private window.

What it doesn't do

The misconceptions:

  • Doesn't hide your IP. Websites still see your real IP. ISPs still see what destinations you visit. Network observers see the same metadata as before.
  • Doesn't prevent fingerprinting. See our browser fingerprinting article. The fingerprintable properties of your browser don't change in private mode. Trackers can still identify you uniquely.
  • Doesn't hide activity from your employer or school. Network-level monitoring sees the same traffic; managed devices may install tracking software that ignores private mode entirely.
  • Doesn't hide activity from your ISP. Without a VPN or Tor, your ISP can see every domain you connect to.
  • Doesn't make you anonymous to sites you log into. If you log into Google during a private session, Google knows you're you for that session.
  • Doesn't block extensions. Most browsers disable extensions in private mode by default; users can re-enable them, and many do, defeating some isolation.

What private browsing is good for

Specific legitimate uses:

  • Shared computers. Using a friend's laptop briefly, leaving no trace on their browser.
  • Multi-account scenarios. Logged into account A in your main window, opening a private window to log into account B without conflict.
  • Avoiding personalization. Testing what a site looks like to a logged-out user, or what a search result page looks like without your history influencing it.
  • Gift-shopping or surprise planning. Browsing for things you don't want autofill or ad retargeting to remind you about.
  • Quick research on shared accounts. Reading a news article you don't want to enter your account's reading history.

None of these are privacy from external observers. They're privacy from your own browser's memory.

Browser-specific differences

  • Chrome Incognito — the most basic implementation. Doesn't save local state, doesn't enable additional protections by default.
  • Firefox Private Window — adds Enhanced Tracking Protection (Strict mode) by default in private windows, blocking some third-party trackers.
  • Safari Private Browsing — adds Intelligent Tracking Prevention defaults and (in Safari 17+) blocks several tracking techniques in private mode that aren't blocked in normal mode.
  • Brave Private Window — offers a "Private Window with Tor" option that routes traffic through Tor while in private mode.
  • Edge InPrivate — similar to Chrome.

What you actually want for privacy

Depending on what you're trying to hide:

  • Hide activity from people who use your computer: private browsing works.
  • Hide activity from websites: a privacy-focused browser like Brave, Firefox with tracking protection, or Mullvad Browser. Private mode alone doesn't do this.
  • Hide your IP from websites: VPN or Tor. Private mode doesn't change your IP.
  • Hide what you're doing from your ISP: VPN or Tor. Private mode doesn't help.
  • Anonymous-ish browsing: Tor Browser. Even Tor is not anonymous against all adversaries, but it's the closest mainstream answer.
  • Defeat fingerprinting: Tor Browser or Mullvad Browser, with their hardening on by default.

The misleading product naming

"Incognito" and "Private" sound like more than they are. Chrome's own disclaimer when you open Incognito now reads: "Your activity might still be visible to: Websites you visit, Your employer or school, Your internet service provider." Even with that disclaimer, surveys consistently show users believe private mode does more than it does. Apple, Mozilla, and Microsoft all face the same misconception.

A 2022 Google class-action settlement explicitly involved this gap between user expectations and Incognito behavior — Google agreed to update disclosures and delete data collected from Incognito sessions.

Frequently asked questions

Does my ISP see what I do in private browsing?
Yes. Private browsing doesn't change network behavior — your ISP sees the same connections as in normal mode. To hide from the ISP, use a VPN or Tor.
Does private browsing block tracking cookies?
Partially. Cookies set in the private session disappear when you close it, so cross-session tracking via cookies is blocked. But within a session, trackers can still set cookies and read them. Firefox and Safari add stronger protections in private mode; Chrome's Incognito is the most permissive of the mainstream options.
Can my employer or school see private browsing activity?
Yes, if they monitor at the network level (which most do) or if your device has corporate monitoring software (also common). Private browsing only hides activity from your local browser history — anything outside that scope sees you normally.
Why are extensions disabled in private mode?
Because extensions can read every page you visit, defeating the privacy-from-others purpose of private browsing. Most browsers disable extensions by default in private windows; users can opt back in per-extension if they trust it.
Is private browsing better than no browsing at all for privacy?
It's better than nothing for the specific use case of leaving no local trace. For network-level privacy or anti-fingerprinting, you need different tools (VPN, Tor, hardened browser). Private mode is a useful local-state tool — not a privacy panacea.
Private Browsing Explained: What Incognito Actually Hides — and What It Doesn't