What a private browser on a Mac can and cannot hide

A private browser on a Mac is one keystroke away. In Safari, press Shift-Command-N, or choose File > New Private Window, and the Smart Search field turns dark with white text. In Chrome the same shortcut opens an Incognito window, and in Firefox it is Shift-Command-P. That is enough to stop the Mac itself from remembering the session. It is not enough to stop the websites, the Wi-Fi operator or an employer from seeing what happens in that window. The useful question is not which browser is "the private one", but who the browsing has to be hidden from.

There are three audiences, and each one needs a different tool:

1. People who use the same Mac. A private window handles this well in every browser.
2. The websites and the ad networks behind them. The browser and its tracking protection matter more than the window type.
3. The network in between. Only a relay, a VPN or Tor changes what the network sees.

This site is run by the maker of SpaceDeck, a Mac browser for web apps. Every vendor detail below was checked on the official pages on October 18, 2026.

Audience one: the next person at the keyboard

This is the job private windows were built for. When the last private window closes, the browser drops the pages visited, the cookies collected in that session and the form entries typed into it.

Apple's guide to browsing privately in Safari lists what Safari does beyond that minimum. Browsing started in one tab is isolated from browsing started in another. Open pages are not stored in iCloud, so they never show up in the tab list on an iPhone or iPad signed into the same Apple Account. Recent searches stay out of the Smart Search suggestions, and private windows are not passed to other devices through Handoff.

Chrome's behavior differs in one way that catches people out. Google's help page on Incognito mode says that opening a second Incognito window continues the same session, and the session ends only when every Incognito window is closed. A number next to the Incognito icon at the top right shows how many windows are still open. One forgotten window on another desktop Space keeps the whole session, and its sign-ins, alive.

Three things survive every private mode on macOS:

• Downloaded files. Safari leaves them out of the downloads list, but Apple states plainly that the items remain on the computer. Chrome says the same.
• Bookmarks. A bookmark saved from a private window shows up in normal windows afterward, in Safari, Chrome and Firefox alike.
• Anything a website stored on its own servers. A purchase, a comment or a search typed into a site's own search box is recorded by that site, not by the browser.

For a Mac shared at home, or a borrowed MacBook used to check a personal account once, a private window is the right tool and nothing more is needed. The next two audiences are where the misunderstanding starts.

Lock private windows before stepping away

On a laptop, the most likely privacy failure is an open screen in a café or a meeting room, not a tracker. Safari is the only browser in this comparison with a lock built into the private window. Apple's page on locking private browsing windows gives the steps:

1. In Safari, choose Safari > Settings and click Privacy.
2. Select "Require password to view locked tabs". On a Mac or keyboard with Touch ID, the option reads "Require Touch ID to view locked tabs".
3. To lock on demand, choose Window > Lock All Private Windows.

Once the setting is on, Safari also locks private windows by itself when the screen locks, when a password is required after the screen saver starts or the display turns off, and when the windows sit minimized or untouched in the background for a while.

To make every new Safari session private, Apple's same guide gives this path: Safari > Settings > General, then set "Safari opens with" to "A new private window". If that choice does not appear, open System Settings > Desktop & Dock and turn on "Close windows when quitting an application" first.

These two settings together cover most real situations on a travelling Mac. A person who uses Chrome or another browser for daily work can still keep Safari as the place for short private sessions, purely for the lock.

Audience two: the websites and the trackers behind them

A private window logs out of nothing on the server side and hides nothing from the page itself. Google's help page is direct about it: Incognito does not make a person invisible, websites visited, including Google sites, may still observe activity, and sites that use Google services share activity with Google as described in its privacy policy. Signing into Gmail inside an Incognito window tells Google exactly who is there.

What changes the picture for websites is the tracking protection, and that differs by browser.

	Safari	Chrome	Firefox	Brave	Mullvad Browser
Price	Free, built in	Free	Free	Free	Free, open source
Third-party cookies in private mode	Blocked	Blocked by default in Incognito	Tracking cookies erased on close	Blocked (Shields)	Isolated per site, cleared on close
Fingerprinting defense	Advanced protection on by default in private windows	Not a stated feature of Incognito	Blocks known fingerprinters, limits suspected ones	Randomizes browser APIs	Makes all users look alike
Cookies kept between sessions	Yes in normal windows	Yes in normal windows	Yes in normal windows	Yes in normal windows	No, private mode always on

Apple says that in private windows "Use advanced tracking and fingerprinting protection" is turned on by default. It blocks connections to data collection companies that use fingerprinting and removes known tracking parameters from URLs. If a page breaks, View > Reload Reducing Privacy Protections loads it with the protection relaxed.

Brave Shields take a different route. They are on for every site by default, block third-party ads and trackers, partition cookies, and randomize the browser features that fingerprinting scripts read, so each site sees a slightly different device. Mozilla's page on fingerprinting protection in Firefox says Firefox blocks known fingerprinters and applies broader protections to suspected ones. The Mullvad Browser, developed together with the Tor Project, does the opposite: it tries to make every user look identical, keeps private mode on permanently, uses uBlock Origin for tracker blocking and saves no cookies between sessions. Mullvad describes it as a Tor Browser without the Tor network.

The stricter the browser, the more often something breaks. Banking sites, single sign-on pages and internal company tools are the usual casualties. Mullvad Browser is the strictest option here and the most likely to need a second browser for work.

Audience three: the network, the employer and the internet provider

No private window changes what the network sees. Mozilla's page on Firefox private browsing states that private mode does not stop websites from seeing where a visitor is physically located, does not stop the internet service provider from logging activity, and does not protect against malware. Google lists the same groups by name: a school, an employer or an internet service provider may observe Incognito activity.

Changing that requires sending traffic through someone else. As of October 18, 2026, the main options on a Mac are these:

• iCloud Private Relay, part of every iCloud+ plan. Apple's iCloud+ plans and pricing page lists the 50 GB plan at $0.99 per month in the United States. According to Apple's page about iCloud Private Relay, traffic goes through two relays: the first, run by Apple, sees the IP address but not the site, and the second, run by a third-party provider, sees the site but assigns a temporary IP address. It covers browsing in Safari and is not available in every country or region.
• Brave Firewall + VPN costs $9.99 per month or $99.99 per year with a 7-day free trial, according to the Brave VPN page.
• Mullvad VPN is a flat €5 per month whatever the length of the term, usable on up to 5 devices, with a 14-day money-back guarantee except for cash payments, per its pricing page.
• Brave's private window with Tor routes that window through the Tor network at no cost, with slower pages as the trade-off.

On a company-managed Mac there is one more layer. Device management can install configuration profiles, proxies or root certificates. None of the private modes above, and not every VPN, change what that management layer can see. The safe assumption is that a work Mac is visible to the employer whatever browser is used.

Match the purchase to the worry. A shared-laptop problem needs no subscription. A hotel or café network problem needs the relay or the VPN. Paying for a VPN to solve the first, or trusting Incognito to solve the second, is the most common mismatch.

When a private search slipped into a normal window

It happens: a gift search or a medical question went into an ordinary window. Safari can remove the record after the fact. Choose History > Clear History, pick a range such as the last hour or today from the pop-up menu, and confirm. That removes visited pages, the back and forward list, frequently visited sites, recent searches, page icons, the downloads list and site permission prompts for that range.

Two limits apply. If Safari history is synced through iCloud, clearing it removes it from every Apple device signed into the same account, which surprises families who share one Apple Account. And clearing history on the Mac does nothing to records the site itself kept, or to files already in the Downloads folder.

In Chrome the equivalent is More > Delete browsing data, where a time range such as Last hour or All time can be chosen before confirming with Delete data. Clearing a short range is less disruptive than clearing everything, because sign-ins and site settings from earlier days stay in place.

When privacy is not actually the goal

A large share of searches for a private browser come from people who are not hiding anything. They want a work Gmail and a personal Gmail open side by side, or two client Slack workspaces signed in at the same time, and a private window looks like a quick way to get a second login.

It is a poor fit for that job. Every private mode forgets the login when it closes, so the second account has to be signed into again every day. In Chrome, every Incognito window shares one session, so Incognito cannot hold two separate second accounts at once either.

The tools built for separation keep data instead of throwing it away:

• Browser profiles keep separate cookies, history and saved passwords per profile, each in its own window. Safari, Chrome, Edge and Brave all offer them.
• Firefox Multi-Account Containers give each tab its own cookie jar inside one window, colour-coded by identity.
• A browser that keeps each web app in its own window, with its own cookie container per app, lets several accounts on the same service stay signed in at once without switching profiles. The Workspaces page shows how that separation is organised, and the Features page covers link routing, which opens a link inside the app and account it belongs to.

A private window is for leaving no trace. A profile or a per-app container is for keeping identities apart for months. Treating one as the other is why so many people end up signing in and out all day.

What to change first

On a shared or travelling Mac, turn on "Require Touch ID to view locked tabs" in Safari today and use a private window for anything the Mac should not remember. If the real problem is several accounts colliding in one browser, the answer is per-app separation rather than a stronger private mode, which is how SpaceDeck handles it.