What Private Browsing Mode Hides and What It Leaves Exposed
You opened a private window to look up a medical symptom, shop for a gift or check a job listing, and now you are wondering who else can see it. The honest answer is that private browsing mode hides far less than its name suggests.

You opened a private window to look up a medical symptom, shop for a gift or check a job listing, and now you are wondering who else can see it. The honest answer is that private browsing mode hides far less than its name suggests. It protects you from people who use the same device after you, and almost nobody else.
That is still useful. But if you treat an incognito tab as an invisibility cloak, you will make decisions based on protection you do not have. This guide breaks down exactly what private browsing mode clears, what it never touched in the first place, and the few habits that close the gaps.
What private browsing mode actually does
Every major browser calls it something different. Chrome has Incognito, Firefox and Safari use Private Browsing, Edge calls it InPrivate. Under the names, they all do roughly the same four things when you close the last private window:
- Delete the browsing history for that session, so the pages do not appear in your history list or address bar suggestions.
- Delete cookies and site data created during the session, which logs you out of anything you signed into.
- Clear form entries and search terms typed into the browser.
- Keep a separate cookie jar from your normal windows, so a site you are logged into normally does not automatically recognize you in the private window.
That last point is the most practical benefit. Open a private window and you can check how your own social profile looks to a stranger, compare prices without your shopping account attached, or log into a second account on the same site without signing out of the first.
What private browsing mode does not hide
Here is the part that surprises people. All of the following can still see your activity in a private window:
- The websites you visit. They see your IP address, your browser type, screen size and other details. If you log in, they know exactly who you are.
- Your internet provider. Your ISP can see which domains you connect to, and how much data you move. HTTPS hides the specific pages and content, but not the site names in most setups.
- Your employer or school network. On a managed laptop or office Wi-Fi, administrators can log traffic, and monitoring software installed on the device can record everything regardless of window type.
- Trackers that do not rely on cookies. Browser fingerprinting combines dozens of small signals, such as fonts, time zone, graphics card details and language, into an identifier that often survives a fresh private session.
- Downloads and bookmarks. Any file you save stays on the device, and a bookmark created in a private window is saved to your normal bookmarks.
In 2024, Google settled a US class action over Chrome's Incognito mode and agreed to delete billions of data records and to update its disclosure text. The core complaint was simple: people assumed "private" meant private from Google, and the data collection continued.
A quick comparison of private browsing, a VPN and a separate profile
These tools get confused constantly, so it helps to see who each one protects you from.
| Who can see your activity | Private window | VPN | Separate browser profile |
|---|---|---|---|
| Others using the same device | Hidden after closing | Not hidden | Hidden if profile is locked |
| Your internet provider | Visible | Hidden, shifted to VPN provider | Visible |
| Websites you visit | Sees IP and fingerprint | Sees VPN IP and fingerprint | Sees IP and fingerprint |
| Employer monitoring software | Visible | Usually visible | Visible |
No single column gives you full privacy. Each one moves the information to a different place or removes one specific observer.
The advice I would push back on
A lot of privacy guides recommend browsing in private mode all the time as a default. I think that usually makes things worse, not better.
When every session starts from zero, you log into the same accounts again and again. That means more typed passwords on more networks, more two factor prompts that you start approving on autopilot, and more chances to land on a convincing fake login page. You also lose saved settings that reduce tracking, such as cookie consent choices you already rejected, so you either click "accept all" out of fatigue or spend minutes per site refusing again.
A better default is a normal browser with good settings, plus private windows used deliberately for specific jobs. Most of the privacy you gain comes from habits, as we argue in simple privacy habits that matter more than a VPN.
Settings that make your normal browser more private
These take about ten minutes and do more day to day than living in incognito.
- Block third party cookies. Safari and Firefox do this by default. In Chrome, go to Settings, then Privacy and security, then Third party cookies, and choose to block them.
- Turn on tracking protection. In Firefox, set Enhanced Tracking Protection to Strict. In Edge, set Tracking prevention to Strict. Test a few sites you use daily, and relax it for any that break.
- Change the default search engine to one that does not build a profile from your queries, if your searches are something you would rather keep separate from your main account.
- Auto clear on exit. Firefox can delete cookies and history every time you close it, with exceptions for the handful of sites where you want to stay logged in.
- Use separate profiles for work and personal life. Each profile has its own cookies, extensions and history, which stops cross contamination without the constant re-login of private mode.
Pair this with a review of what you sign up for in the first place. Our guide on keeping your privacy when joining a new online service covers the email and permission choices that matter before you ever open a browser tab.
When a private window is exactly the right tool
- Signing into your email or bank on a friend's laptop or a hotel business center computer. Close every private window before you walk away.
- Checking what a search result or profile looks like without your personalization.
- Researching a surprise gift on a shared family computer.
- Testing whether a website problem is caused by your extensions or stored cookies, since most extensions are disabled in private windows by default.
- Logging into two accounts on the same service at once.
Notice the pattern. Every one of these is about the device and the people near it, not about hiding from the wider internet.
Frequently asked questions
Can my internet provider see what I do in private browsing mode?
Yes. Private browsing only clears data stored on your device. Your internet provider still sees which domains you connect to and how much data you send, although HTTPS hides the exact pages and their content.
Does incognito mode hide my activity from my employer?
No. If you are on a work device or work network, administrators can log traffic and monitoring software can capture activity no matter which window you use. Assume anything on a company laptop is visible to the company.
Is private browsing mode safe for online banking?
It is a sensible choice on a shared or public computer, because it stops your session cookies and history from being left behind. It does not protect you from malware on that computer or a fake banking site, so check the address carefully and close all private windows when you finish.
More in Online Privacy
Online Privacy
Email Aliases That Keep Your Real Inbox Private
Count the companies that have your main email address.
Online Privacy
How to Remove Your Info From People Search Sites
Type your full name and town into a search engine and there is a fair chance that one of the first ten results shows your...
How to Spot the Trackers Hiding in Your Phone Apps
Most of the apps on your phone are quietly watching more than they let on.