Is private browsing really private? Who can see you
Is private browsing really private? Only in a specific sense: it limits what your browser keeps on your device after the private session ends. It does not make you anonymous to websites, your Wi-Fi network, employer, school, ISP, or DNS resolver. The useful question is who you want to keep the activity from.
What does private browsing do in Safari, Chrome, and Firefox?
Private browsing starts a separate browser session and removes some of its data when you close the session. The exact list depends on the browser; downloads and bookmarks can remain, and an open window can still show the pages.
| Browser | What it removes after the session | Extra protection in private mode |
|---|---|---|
| Safari 27 on macOS 27 (Apple guidance checked October 2026) | History, searches, AutoFill, cookies, and site data aren’t saved. Downloads remain; tabs aren’t synced. Apple’s Safari User Guide (2026) | Blocks known trackers and removes tracking from URLs. Apple Support (2026) Advanced tracking and fingerprinting protection is on by default in private windows. Apple’s Safari User Guide (2026) |
| Chrome Incognito (checked October 2026) | Site data and the list of visited sites are removed when all Incognito windows close. Saved bookmarks and downloaded files remain. Google’s Chrome Help (2026) | Blocks third-party cookies by default. It does not stop Google or other sites from collecting data when their services run on a page. Google’s Chrome Help (2026) |
| Firefox Private Browsing (checked October 2026) | History, cookies, and site data from the session are deleted when all private windows close. Files and bookmarks remain. Mozilla Support (2026) | Enhanced Tracking Protection blocks known trackers; Mozilla says private windows don’t make you anonymous online. Mozilla Support (2026) |
On Mac, Locked Private Browsing is on by default, so Safari locks private windows when you aren’t using them; that protects an open window from casual access, not network activity. Apple Support (2026)
Is private browsing really private from everyone?
This matrix shows whether private browsing can be tracked, and by whom; it assumes you close every private window. “With Relay or VPN” means Safari with iCloud Private Relay, or a correctly configured VPN. HTTPS usually hides page paths and contents from network observers, even when they can infer the site. The browser and network claims cite current vendor and EFF guidance, checked October 2026.
| Observer | Safari Private | Chrome Incognito | Firefox Private | With iCloud Private Relay or VPN |
|---|---|---|---|---|
| Someone using your device later | History and searches omitted; downloads remain; open windows lock. Apple (2026) | Visit record and site data removed; downloads and bookmarks remain. Google (2026) | Session data removed; downloads and bookmarks remain. Mozilla (2026) | Same local files and open-window limits. |
| Websites and embedded trackers | Yes; private mode doesn’t hide your IP address. Safari blocks known trackers. Wu et al. (2018) Apple (2026) | Yes, including Google sites; sites that use Google services share your activity with Google, signed in or not. Google (2026) | Yes; Mozilla says sites can still gather information about the pages you visit. Known trackers are blocked. Mozilla (2026) | With Private Relay, sites see a temporary IP address instead of yours; a VPN moves your traffic to the provider. Apple (2026) EFF (2026) |
| Accounts you sign in to | Private tabs aren’t synced to iCloud, but a provider can record what you do while you’re logged in. Apple (2026) Wu et al. (2018) | Chrome doesn’t sign you in automatically; once you sign in, the provider can record your activity. Google (2026) Wu et al. (2018) | Same: a logged-in provider can record your activity. Wu et al. (2018) | Relay or VPN changes the address, not the account. |
| Wi-Fi owner, employer, school, or ISP | Can observe traffic and often the site; HTTPS hides paths and contents. EFF (2026) | Same. Google (2026) EFF (2026) | Same. Mozilla (2026) EFF (2026) | Network and ISP see Apple or VPN relay, not sites in the tunnel; the VPN provider becomes a party you trust. Apple (2026) EFF (2026) |
| DNS lookups | Your network provider can see DNS records as usual; private mode doesn’t change how your traffic looks on the network. Apple (2026) Wu et al. (2018) | Same. Wu et al. (2018) | Same. Wu et al. (2018) | Relay encrypts Safari’s DNS records, so neither your network provider nor Apple’s relay sees the site name. Apple (2026) |
| Malware or an administrator with access to the device | Apple’s guide claims no protection here. Apple (2026) | Google’s help claims no protection here. Google (2026) | Private windows do not protect against keyloggers or spyware. Mozilla (2026) | Same; encryption in transit protects the route, not the device. EFF (2026) |
The Google settlement often mentioned when people ask whether Incognito mode is really private didn’t make private mode block Google’s collection. The court-filed agreement required Google to clarify that data collection from third-party sites using Google services does not depend on the browser or mode, remediate specified older records, and remove four Incognito-detection bits. Those are the agreement’s terms, not a finding that every Incognito session was collected. The 2024 settlement agreement describes those requirements.
Does private browsing hide your IP?
No, private browsing and Incognito don’t hide your IP. Private windows use your usual connection, so sites can see its public IP. Choose a route based on which observer you want out of the path:
| Option | What changes | What to keep in mind |
|---|---|---|
| iCloud Private Relay | With iCloud+, Safari traffic goes through two relays so no single one sees both your source IP and destination. Apple (2026) | Safari only; availability varies by region. |
| VPN | Encrypts traffic between your device and the VPN provider; someone watching your local network sees that you use a VPN, not which sites you visit. EFF (2026) | Trust shifts from the ISP to the provider, which can see, store and modify your traffic. Coverage depends on VPN settings. |
| Proxy or SSH SOCKS tunnel | Routes configured browser traffic through a proxy or SSH server. OpenSSH -D can provide a SOCKS proxy. OpenBSD (2026) |
The proxy sees destinations. Check that DNS also goes through it; SOCKS behavior depends on configuration. Mozilla (2026) |
Private Relay is in iCloud settings and requires iCloud+. Check Apple’s current guide (2026) for the control path. These routes hide an address from some observers, not an account you use to sign in.
What studies found—and what they did not
Older research explains why people overestimate private mode, but doesn’t prove current browsers leak data. In a 2018 study, 460 participants saw one of 13 disclosures (12 private-mode notices from six browsers, plus a control) and answered 20 scenarios; many thought private mode hid their IP or stopped ISP and site tracking. The study measured understanding. Wu et al. at WWW 2018
Aggarwal and colleagues’ 2010 tests covered Internet Explorer 8, Firefox 3.5, Safari 4, and Chrome 5-era builds. They described a DNS-cache issue and tested swap recovery with Firefox 3.5.9 on Ubuntu 9.10. Those results show why browser history deletion is not the same promise as forensic invisibility; they don’t establish the state of Safari 27 or current macOS. The USENIX Security 2010 paper
A 2023 Android forensic study reported that researchers recovered activity from volatile memory for Chrome, Brave, Firefox, and Tor on Android 13, even after reboot. That’s evidence about those Android test environments and memory acquisition, not today’s Mac browsers. The 2023 Computers & Security study
Which fix matches your threat?
- You share the device and want less history left behind: use a private window, close every private window, and delete files you downloaded if they must not remain. Apple specifically notes Safari downloads stay on the Mac.
- You want a fresh login or a second account: private mode separates that session’s cookies from the regular session. Don’t sign into the same account if you want the site to treat it as a separate identity.
- You want less third-party tracking: compare the browser’s tracker controls. Safari turns on advanced tracking and fingerprinting protection by default in private windows; Firefox blocks known trackers there; Chrome blocks third-party cookies by default in Incognito. None makes you anonymous to a site you visit.
- You want the Wi-Fi owner or ISP to see less: use a VPN or, in Safari, iCloud Private Relay. HTTPS already hides the page content and path; a tunnel changes who can see the destination metadata.
- You need one site to use a different network route: use a proxy or SSH tunnel configured for that site, and route DNS through it too. The SSH SOCKS proxy guide walks through that setup.
- You are worried about device monitoring or malware: private mode, Relay, and VPNs aren’t a fix for a monitored or compromised device. Use a device you control and get help from its administrator or a trusted security professional if needed.
I build Octoweb, so weigh this example accordingly: its private tabs use a separate in-memory WebKit data store and don’t write browser history, session, favicon cache, page memory, or reopen-list entries; they aren’t restored. Its per-site proxy and SSH options can route selected sites, but private tabs alone don’t hide your IP.
See what Octoweb stores.
Octoweb is free and open source, for macOS.
Install it →