Chrome Incognito Mode Is Not a Privacy Shield: Data Still Leaks to Google and ISPs

Incognito mode in Google Chrome is often mistaken for a privacy shield that makes users untraceable on the internet. In reality, the feature only offers a clean browsing session that deletes local data—such as history and cookies—when the window is closed, without hiding activity from internet service providers (ISPs) or the websites visited.

This misunderstanding is not unfounded. The hat-and-sunglasses icon on Incognito mode gives an impression of anonymity akin to a disguise. However, Google itself has acknowledged that it collects data from users in that mode, a fact revealed through a class action lawsuit. In 2024, the company agreed to delete billions of data records as part of a settlement and updated its Incognito explanation page to be more transparent.

What needs to be underlined is that Incognito does not encrypt data traffic like a VPN. ISPs can still see which sites you access, and those sites can record your behavior. Google also still receives data from third-party sites that use its advertising services, including IP addresses, devices, and the browsers used. Even if Google is later forced to sell Chrome—a scenario that surfaced and drew OpenAI's interest—there is no guarantee that this data collection practice will change.

For users in Indonesia, this understanding is crucial. A national digital literacy survey shows that many still regard Incognito as a safety tool when accessing banking or social media services. In fact, once users log in to accounts such as Instagram or Facebook, the platforms still collect data intensively. If the goal is to avoid tracking by a boss at the office, Incognito is also futile because network administrators can still see the domains visited.

"Incognito is not a privacy tool, but merely a clean session to avoid local storage," said a cybersecurity researcher who declined to be named, commenting on the widespread misconception in society.

Nevertheless, Incognito remains useful in certain situations. When using a shared computer, this mode prevents the next person from seeing search history or accounts that were logged in. Incognito also helps view sites without algorithmic personalization, for example YouTube or more neutral search results. However, for genuine privacy protection, users are advised to use a trusted VPN or a browser that truly focuses on privacy such as Tor or Brave.

Going forward, public pressure and increasingly strict data protection regulations in various countries, including Indonesia through the PDP Law, could force Google and other technology players to be more open about the limits of privacy features. The question is, will users switch to tools that are truly safe, or remain comfortable with the illusion of anonymity offered by Incognito?