Ground Truth · pointed at a thing everyone gets wrong

Private to the Glass, Public to the Wire

Incognito mode is private to the glass (it wipes what your own screen would have remembered) and public to the wire: everything you send still travels the same network to the same servers, watched by the same parties. It makes you anonymous to exactly one audience: the next person to pick up your device.

Turn Incognito on and off in the console. Pick where you are (home, work, school, a café's Wi-Fi), add a VPN, choose the cookie era. Five parties can watch a browsing session; each cell shows whether that party SEES you, is PARTIAL (metadata only), or is BLIND. Tap any row for the sourced reason.

Slide Incognito off and on with your eye on the badges. In every configuration, the same thing happens: one row flips (the on-device row) because clearing your own device is the one thing Incognito was ever built to do. (Since 2024 a second row softens too; that is the twist below.) Everything on the wire is untouched.

The one real thing it does

The fear is not entirely wrong; it's aimed at the wrong pane of glass. On a shared device, Incognito genuinely protects you: close every Incognito window and this session's history, cookies and autofill are discarded, so the next person who opens the browser finds nothing. That is real privacy, and it is the reason Incognito isn't useless. It is simply privacy to the glass (the screen in front of you) and nothing on the wire behind it.

The twist: it got more private in 2024

"Who can see you" is not fixed in time. In 2020 a class action, Brown v. Google, argued that Incognito users were tracked anyway: that Google Analytics and ad tags on ordinary web pages kept receiving Incognito traffic. The suit sought $5 billion in damages. It did not end in a $5 billion payout. In the settlement given preliminary approval by Judge Yvonne Gonzalez Rogers in April 2024, the class received no cash at all. What Google gave instead was structural: delete or de-identify billions of Incognito records, rewrite the splash screen, and, for five years, block third-party cookies in Incognito by default.

That last term is why the console's "Google & trackers" row softens from SEES to PARTIAL when you set the era to 2024+: cross-site ad cookies are cut, though signing into a Google service still ties activity to you. Flip the era back to 2023 and the row goes red again. The settlement made Incognito do a second real thing, and it is the kind of moving target most explainers, written before April 2024, never mention.

The single load-bearing edit: "including Google." The old screen already warned that your activity "might still be visible to the websites you visit, your employer or school, and your internet service provider": the whole of the console's right-hand column was printed on the glass all along.

Two things people get exactly wrong

"Google paid $5 billion." It didn't. $5 billion was the figure the lawsuit sought; the class got $0 in cash. The relief was record destruction plus the injunctive changes above, and class members kept the right to sue Google individually for money. Spread across the more than 136 million people the settlement covers, the $5 billion sought works out to about $37 a head that nobody was paid.

"My ISP sees everything I do." Not with HTTPS, which is now nearly the whole web. Your ISP (and any Wi-Fi or gateway operator in the path) sees the domains you connect to (from DNS look-ups and the unencrypted "SNI" name in the TLS handshake) plus the timing and volume of traffic. It does not see the page contents, your passwords, or the exact URLs. That's why the ISP row reads PARTIAL, not SEES, a real distinction Incognito has nothing to do with either way.

And a VPN? Flip it on: the ISP and public-Wi-Fi rows go BLIND, but a new watcher appears. A VPN encrypts the first hop, so your ISP sees only "talking to a VPN," while your VPN provider now sees precisely the domains your ISP used to. You have relocated the trust, not deleted it. This page is not selling you one.