What Incognito Mode Actually Does
When you open an incognito window, your browser creates a temporary session that is isolated from your normal browsing profile. Cookies, session data, and browsing history created during the session are deleted when you close the window. No trace remains on your local device of which sites you visited. This protects your privacy from other people who use the same device.
What incognito mode does not do: it does not change how your traffic travels over the internet. Your browser still sends HTTP/HTTPS requests to websites; your DNS queries still go to whatever DNS server your router or OS is configured to use; your ISP still sees the IP addresses you connect to and the domain names you look up. None of that traffic is encrypted or hidden by incognito mode.
What Your ISP Can See
Your ISP routes all your internet traffic. At minimum, they can see: every DNS query you make (the domain names you look up, unless you use encrypted DNS); the IP addresses of every server you connect to; the timing and volume of your connections (which reveals which sites you use even if the content is encrypted); and unencrypted HTTP traffic in full (though HTTPS encryption hides the specific page content, even if the domain is visible).
ISPs in many countries are legally permitted or required to log connection metadata. In the US, ISPs can sell anonymized browsing data to advertisers under FCC rules that have changed over time. Your ISP's privacy policy describes what they collect and how long they retain it. Incognito mode has no effect on any of this.
What Does Protect You From ISP Tracking
VPN (Virtual Private Network): A VPN encrypts all your traffic and tunnels it to a VPN server. Your ISP sees only encrypted traffic going to the VPN server — they cannot see which websites you visit or which DNS queries you make inside the tunnel. The VPN provider can see your traffic instead, so choosing a trustworthy VPN with a verified no-logs policy matters.
DNS over HTTPS (DoH) or DNS over TLS (DoT): Encrypts your DNS queries so your ISP cannot see which domain names you are looking up. Does not hide the IP addresses you connect to, but removes the most readable layer of surveillance. Firefox and Chrome support DoH natively; you can also configure it on your router for the whole network.
Tor Browser: Routes traffic through three layers of encryption via the Tor network, masking both your IP and browsing content from any single observer. Much slower than a VPN but provides stronger anonymity.
What Each Privacy Tool Hides From Your ISP
| Tool | Hides DNS Queries | Hides Destination IP | Hides Page Content | Hides Your IP From Sites |
|---|---|---|---|---|
| Incognito / Private Mode | No | No | No | No |
| HTTPS (standard) | No | No | Yes (body) | No |
| DNS over HTTPS (DoH) | Yes | No | Yes (body) | No |
| VPN | Yes | Yes (ISP sees VPN server) | Yes | Yes (site sees VPN IP) |
| Tor Browser | Yes | Yes | Yes | Yes (site sees Tor exit node) |
Frequently Asked Questions
Can my employer see my browsing in incognito mode?
Yes, if you are using a work network or a work device. Corporate networks often use a proxy or firewall that logs all outbound connections. Managed devices may have endpoint monitoring software installed. Incognito mode provides no protection against network-level or device-level monitoring.
Does incognito mode hide my location?
No. Your IP address is still your ISP-assigned address, which geolocates to your approximate location. Incognito mode does not change your IP address or location. A VPN changes your apparent IP address to the VPN server's location, which can make you appear to be in a different city or country.
If I use HTTPS, is my browsing private from my ISP?
Partially. HTTPS encrypts the content of the pages you view, so your ISP cannot read what you type or what you see on a page. However, your ISP can still see the domain name you visited (from DNS queries and TLS SNI) and the IP address of the server — enough to know which website you visited, if not exactly which page.
What is the best way to browse privately?
A reputable VPN encrypts all traffic between you and the VPN server, preventing your ISP from seeing your browsing. Combined with DoH (encrypted DNS), this removes the two main ISP visibility layers. No solution is perfect — the VPN provider sees your traffic instead of your ISP — so choosing a VPN with an independently audited no-logs policy is important.