Incognito mode in Chrome and private windows in Firefox stop the browser keeping a record of your session on the computer you are using: no history, no cookies and no form entries once you close the window. They do not hide what you do from the websites you visit, from whoever runs the network, or from malware on the computer. Private browsing protects you from the next person at the keyboard, not from the internet.
This is the first of three short articles on browser privacy and security. The second covers choosing a privacy browser and the third ad blockers and browser extensions.
In short
It clears the session when you close the window. The browser throws away what the session left behind:
Google's Chrome help pages and Mozilla's Firefox support pages both describe this. Chrome also blocks third-party cookies by default in Incognito, which stops many advertising networks following you from site to site during that session.
Firefox goes a little further in private windows. Mozilla says it blocks known trackers, keeps each site's cookies in a separate jar, adds protection against fingerprinting (identifying a browser by its unique combination of settings) and sends the Global Privacy Control signal, which asks websites not to sell or share your data.
No. Private browsing changes what is stored on your device, not what other people can see.
| Who | Can they still see what you do in a private window? |
|---|---|
| The next person using the computer | No. The history, cookies and form entries are gone. |
| The websites you visit | Yes. They see your IP address and what you do on their pages. If you sign in, they know who you are. |
| Your employer, school, hotel Wi-Fi or internet provider | Yes. They can see which sites you connect to. |
| Malware, keyloggers and phishing pages | Yes. Mozilla says private browsing does not protect against them, and a fake login page is as dangerous in a private window as anywhere else. |
Some things stay. In Firefox, bookmarks you add, passwords you choose to save and files you download remain after the window closes.
In a class action in the United States, Brown v. Google, Google agreed in 2024 to settle claims about what it collected during Incognito sessions. Under the settlement as filed, Google is to change the wording it shows when Incognito opens, delete or deal with older private-browsing data, and keep third-party cookies blocked by default in Incognito for five years. Google supports approval of the settlement but disputes how the plaintiffs describe the facts. The court docket linked under Sources shows the current position.
The practical lesson is the one Google's own help page now gives: Incognito changes what is stored on your device, not what the sites you visit can see.
Private browsing deals with your own device. For the rest:
| You want to stop | Use | Where to read more |
|---|---|---|
| Tracking across websites | A browser with strong tracking protection on all the time | Part 2, choosing a privacy browser |
| Ads, trackers and malicious adverts | A content blocker you can trust, and few other extensions | Part 3, ad blockers and browser extensions |
| The local network seeing which sites you visit | A VPN. HTTPS, which almost every site now uses, already protects the content of what you send. | Noiz offers a managed VPN for desktops, laptops and phones |
| Malware | Updates, official software only, and care with downloads | Infostealer malware: how to protect your business passwords |
Read next:
If you work from public Wi-Fi often, a managed VPN from Noiz encrypts the connection from each of your devices.
Note: while some of this content was produced with the help of AI, the final editing has been done by a real human being.