Does “Incognito” mode save data in the browser? Why deleting browsing history is not enough before selling your computer
Privacy in the digital space is often misunderstood, especially when it comes to browser features. One of the most mythologized features is Incognito mode (or private browsing). Many users believe that this mode provides complete anonymity or “cleans” the device of all activity traces. However, the reality is much more complex. When preparing a computer for sale, simply deleting the browser history is not enough – it can leave a serious security gap and allow the new owner to access your personal data.
1. How does “Incognito” mode work and what does it actually protect?
The main purpose of Incognito mode is not to hide your actions from the internet provider or websites, but to prevent other users of the same device from seeing the details of your browsing session.
What is not stored in local memory:
- Browsing history: The browser does not record the addresses of visited websites in the main history log.
- Cookies & Site Data: At the end of the session, cookies are deleted, so the next time you log in, the site “does not recognize” you.
- Form Data: Information entered into registration forms or search fields is not saved.
What remains visible:
Although your computer seems to “forget” the session, activity is still visible to external parties. Research (e.g., Wu et al., 2018) shows that Incognito mode does not protect against IP tracking or browser fingerprinting.
- ISP (Internet Service Provider): The provider sees every request you make.
- Employer/School: If you are using a work network, administrators can see the websites visited.
- Websites: The websites themselves collect data about your visit for marketing purposes.
2. Why deleting browsing history is deceptive security?
Many users rely on the “Clear Browsing Data” feature before selling their computer. Although it seems that the data is gone from the browser, the situation at the physical level is different.
Data Remanence
When you delete a file or browsing history, the operating system (OS) usually just removes the link to that data block and marks it as “free” for new information to be written. The actual data on the disk remains until it is overwritten. Using specialized Data Recovery software, these “deleted” data can be surprisingly easily recovered.
Browser artifacts
Browser data is stored in complex SQLite databases. Even after clearing history, the system may retain:
- DNS Cache: A system-level cache that stores recently visited domain names.
- Thumbnails & Icons: The operating system may save thumbnails of visited websites in background process folders.
- Pagefile / Swap file: If you ran out of RAM while browsing, data fragments may have been moved to the hard drive as temporary memory.
3. Dangers of selling a device
Selling a computer without proper preparation can allow the new owner to access your Digital Identity.
- Saved Passwords: Although browsers encrypt passwords, weak system passwords or older OS versions allow them to be extracted using brute-force attacks.
- Session Tokens: Even if passwords are not saved, session cookies may remain in disk fragments, allowing the new owner to log into your accounts without entering a password.
- Personal Information: Autofill data from the browser can reveal your home address, phone number, and even partial credit card information.
4. How to properly prepare a computer for sale?
To ensure your data is inaccessible, data sanitization methods must be applied, rather than just deleting them.
HDD vs. SSD sanitization
- HDD: It is recommended to use methods that overwrite the entire disk surface multiple times with random numbers (e.g., Gutmann method).
- SSD: It is necessary to use the manufacturer’s provided Secure Erase function, which sends an electrical pulse to all memory blocks.
Recommended steps
Disconnect from all accounts (iCloud, Microsoft Account). Decrypt the disk (remove BitLocker or FileVault keys). Use the Factory Reset function selecting “Remove everything and clean the drive”.
“Only complete disk sanitization can guarantee that your personal life will not remain recorded in the device’s hardware.”
Summary: How does cleaning work?
| Method | Security Level | Recoverability Probability |
|---|---|---|
| Incognito mode | Low (only local) | High (through network/artifacts) |
| History Clear | Medium (cosmetic) | Medium (through Data Recovery) |
| Secure Erase / Reset | High | Minimal / Zero |
Conclusion
Incognito mode is a useful tool for instant privacy from family members, but it does not protect against deeper data analysis or technical recovery. When planning to transfer a computer to someone else, simply deleting browsing history is merely a cosmetic action. Only complete disk sanitization can guarantee that your personal life will not remain “recorded” in the device’s hardware.
Sources
- Wu, Y., et al. (2018). Your Secrets are Safe: How Private Browsing Modes Protect Against Forensic Analysis. Proceedings of the 2018 ACM SIGSAC Conference.
- Habib, H., et al. (2019). An Empirical Analysis of Private Browsing Modes in Modern Browsers. USENIX Security Symposium.
- Garfinkel, S. L., & Shelat, A. (2003). Remanence in the wild: Evidence and implications of discarded hard drives. IEEE Security & Privacy.
- Wei, M., et al. (2011). Reliably Erasing Data from Flash-based Solid State Drives. FAST ’11.
- Microsoft Support (2025). How to prepare your Windows device for resale. Official security guidelines.
Read also: Why does a purchase-sale agreement protect the seller?