Google tracks user data even when they go 'Incognito'
Report disputes Google's claim that the Chrome feature lets users browse privately
Google has been criticised for a policy that appears to allow the tracking of user data even when using Chrome's Incognito browsing mode.
Although the setting is meant for those users wishing to hide their activity, researchers recently discovered that Google could still monitor and record the sites a user visited, and then match that activity with their account information.
Incognito mode is advertised as a protected version of the Chrome browser that's meant to prevent site history from being collected, with content being supported by "anonymous cookies". When users switch to the mode, they're greeted with the message: "Now you can browse privately, and other people who use this device won't see your activity".
According to a study from Vanderbilt University in Nashville, Tennessee, if a user logs back into Google before they exit Incognito mode, the company is able to retroactively link their activity back to their account by using the anonymous cookies.
"While such data is collected with user-anonymous identifiers, Google has the ability to connect this collected information with a user's personal credentials stored in their Google Account," the researchers explained.
"Overall, even in the absence of user interaction with Google's most popular applications, a user of an Android phone and the Chrome browser still sends a significant amount of data to Google, the majority of which is associated with location and calls to ad server domains."
Douglas Schmidt, a professor of computer science and the author of the study, said that the scale of the data collection has until now "largely been overlooked".
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
"Google utilises the tremendous reach of its products to collect detailed information about people's online and real-world behaviours, which it then uses to target them with paid advertising."
He added that Google's revenues "increase significantly as the targeting technology and data are refined".
Google has since labelled the report "wildly misleading" and has denied claims it tracks user data in the mode.
Speaking to the Telegraph, a spokesperson for the company said: "This report is commissioned by a professional DC lobbyist group, and written by a witness for Oracle in their ongoing copyright litigation with Google", referring to an ongoing copyright dispute between the companies.
Google faces a separate legal challenge over allegations that it tracked millions of users through their smartphone activity, even after they switched off the OS' ability to share location history data.
Dale Walker is a contributor specializing in cybersecurity, data protection, and IT regulations. He was the former managing editor at ITPro, as well as its sibling sites CloudPro and ChannelPro. He spent a number of years reporting for ITPro from numerous domestic and international events, including IBM, Red Hat, Google, and has been a regular reporter for Microsoft's various yearly showcases, including Ignite.
-
Why patching velocity matters as Claude Mythos supercharges vulnerability discoveryFrontier AI models such as Claude Mythos and GPT-5.5 make patching more urgent than ever. How can firms increase the velocity at which they apply fixes and mitigations?
-
The UK is running on fumes as data center build-outs can’t keep pace with demandNews The country's vacancy rate has dropped sharply, with much of the pipeline early-stage and uncertain