If I’m using Incognito Mode and a VPN… why can I still be tracked?
Many people use a VPN and private browsing, but still see targeted ads and feel watched online. This guide explains, in simple language, why online anonymity is harder than it looks and what you can do about it.
This guide is simple and easy to follow — no technical background needed.
Privacy Exposure Game
Play with VPN, Incognito mode and logins to see how exposed you still are online.
Your settings
Change these settings to see how your exposure score changes.
Try changing one setting at a time to see how your score and explanation change.
Observer
IP
Location
Identity
Browsing history
Fingerprint
Metadata
ISP / mobile provider
Website you visit
Ad networks / trackers
Employer / school network
Big platform account
Browser vendor
🟢Mostly protected🟡Partially visible🔴Clearly visible—Not applicable or very limited
If I use Incognito mode AND a VPN, websites shouldn’t be able to track me… right?
Incognito mode and VPNs are helpful, but they do not make you invisible. They solve specific parts of the tracking problem, and leave other parts untouched. Websites, advertisers, and big platforms can still connect many of your visits. To really improve VPN privacy and tracking prevention, you need to understand who sees what and how different tools fit together.
Quick reality check
Here is a simple overview of what common privacy tools do in practice.
Technology
What users think it does
What it actually does
VPN
Makes me completely anonymous. Hides everything from everyone.
Hides your IP from websites and your ISP. The VPN provider itself can see your traffic. Trackers still see cookies, browser fingerprinting, and behavior.
Incognito / Private mode
Stops all tracking and cookies.
Stops saving history and cookies on your device after you close the window. Websites still see your IP, browser fingerprint, and can track you during the session.
Ad blocker
Removes all ads and tracking.
Blocks many ads and known tracking scripts. Some trackers still work, and platforms can track you when you are logged in.
Tracker blocker
Gives me full tracking prevention.
Blocks many third‑party trackers and cookies. Does not remove account-based tracking or all browser fingerprinting.
Tor Browser (advanced)
Gives me perfect online anonymity.
Routes your traffic through several relays and changes your IP. Reduces fingerprinting by making users look similar. Still has limits, and is slower and more fragile for everyday use.
Who still sees what?
Even with a VPN and private mode, different people along the path can still see parts of the picture.
ISP / mobile provider
Sees that you connect to a VPN server, and how much data you send.
Sees the time and rough volume of your activity, but not which websites you open through the VPN.
Can guess general patterns (for example, heavy streaming or gaming), but with less detail.
Website owner
Sees your requests, the pages you visit, and actions on the site.
Sees your VPN IP instead of your home IP, but still sees your browser fingerprint and device details.
Can link visits if you log in, re-use the same cookie, or behave in a similar way over time.
Advertising trackers
Run across many sites using the same tracking scripts.
Use cookies, browser fingerprinting, and behavior to build a profile, even if your IP changes.
Recognize you when you move from one site to another that uses the same tracker.
Login-based identity
(Google, Meta, Amazon, and similar accounts)
When you are logged in, they can link activity to your account.
See your searches, clicks, likes, and purchases inside their own apps and partner sites.
Use this to show targeted ads, even when you use a VPN or private mode.
Government / employer / school network
If you use their network (office, school, company VPN), they can often see which domains you visit.
They may filter, log, or block certain sites.
Even with a VPN, they may still see that you use a VPN and how much traffic you send.
How tracking really works
Tracking is not just one thing. It is a mix of simple pieces that work together.
1. IP address
This is the network address given to you by your ISP or VPN. Websites see it when you connect. A VPN changes your IP, which helps with VPN privacy, but does not stop other tracking methods.
2. Cookies and session tokens
Small files stored in your browser by websites. They keep you logged in, remember preferences, and can track you between pages. Incognito mode deletes cookies when you close the window, but they still work during the session.
3. Browser fingerprinting
A way to identify your browser using many small details: screen size, fonts, time zone, language, installed features, and more. Even if you block cookies, the combination of these details can be very unique. This is called browser fingerprinting and it is a big reason why private mode tracking still works.
4. Account login identity
When you sign in to a website, the site knows who you are. Your actions can be tied to your account, not just your device. Even if your IP or fingerprint changes, logging in links activity back to you.
5. Behavioral patterns
How fast you scroll, what you click, what you search for, what you buy, and what time you are online. This “behavioral fingerprint” can be very stable over time. It helps platforms connect different sessions and devices that belong to the same person.
Myth vs reality
Myth:
“Incognito mode hides me from websites.” Reality:
Incognito mostly hides what you do from other people who use your device. Websites still see you like any other visitor.
Myth:
“A VPN makes me completely anonymous.” Reality:
A VPN hides your IP from websites and your ISP, but the VPN company can still see your traffic, and it does not stop cookies, fingerprinting, or account-based tracking.
Myth:
“If I block cookies, sites can’t track me.” Reality:
Many websites now use browser fingerprinting and account logins to follow you, even with few or no cookies.
Myth:
“Only hackers and governments track people.” Reality:
Most day‑to‑day tracking comes from ad companies, analytics tools, and big platforms that want to measure and personalise what you see.
Myth:
“Privacy tools are only for tech experts.” Reality:
You can get much better protection with a few simple changes: a better browser, one good blocker, and stronger passwords.
Myth:
“It’s already too late; my data is everywhere.” Reality:
You can’t undo the past, but you can slow down and shrink what you share from today onward. Privacy is a direction, not a one‑time fix.
Myth:
“If I have nothing to hide, I don’t need privacy.” Reality:
Privacy is about choice and comfort, not about hiding crimes. You still close your curtains and lock your door, even when you’re doing nothing wrong.
Practical advice: realistic steps
You do not need a perfect setup. Start small, improve step by step, and choose what fits your life.
1. Pick a more privacy-friendly browser
Use a browser with stronger tracking protection by default (for example, Brave, Firefox with strict mode, or Safari with tracking protection). Turn on private mode when you do not want your history on the device, and keep your browser up to date.
2. Use a small number of good extensions
Install one trusted ad and tracker blocker instead of many overlapping tools. Avoid random extensions you do not know; they can also spy on you. Every few months, remove extensions you no longer use.
3. Have a "hardened" setup for sensitive tasks
For things like activism, research on sensitive topics, or travel, use a separate browser profile or a second browser with stricter settings. Consider Tor Browser for high‑risk situations, knowing it is slower and some sites may break.
4. Separate your online identities
Use different accounts for different areas of your life (work, personal, side projects). Try not to stay logged in to big platforms in the same browser where you do private reading and searching. Use email aliases or burner addresses for low‑trust services.
5. Fix basic security first
Use a password manager and strong, unique passwords everywhere. Turn on two‑factor authentication for important accounts. This does not stop tracking directly, but it protects you when data leaks happen.
6. Think in layers, not magic bullets
See VPNs, private mode, blocker extensions, and better browsers as layers that work together. Each one reduces part of the picture. Together, they make tracking harder, noisier, and less useful.
Even with Incognito mode and a VPN, websites still see many details about your browser and behavior. The good news is that you can measure this yourself, and then decide which changes matter most for you. Privacy is not about being perfect; it is about being more aware and more in control.