Yes. Google did track millions of Chrome users in Incognito mode, and the company has now agreed to pay billions of dollars to delete that data and change how it operates. The settlement stems from a class-action lawsuit, Brown et al. v. Google LLC, where users claimed that Google’s private browsing mode wasn’t actually private.
Despite users believing they were browsing anonymously, Google was collecting their browsing activity through analytics platforms, ad networks, plugins, and third-party apps—information that was then used for targeted advertising and other purposes. For example, a user who searched for arthritis remedies in Incognito mode would still see relevant ads on other websites, indicating that Google had tracked and recorded that private search activity. The lawsuit, which received preliminary court approval in April 2024, represents one of the largest privacy settlements in tech history. While Google is not paying cash to individual class members, the settlement requires the company to delete billions of browsing records from users’ private sessions, maintain cookie-blocking protections for five years, and provide clearer disclosures about what Incognito mode does and doesn’t protect. The settlement covers any Chrome user who used Incognito mode from June 1, 2016 onwards—affecting millions of people worldwide. This settlement raises important questions about what “private browsing” actually means and whether any corporation can truly be trusted to keep your online activity hidden.
Table of Contents
- What Did Google Actually Track During Incognito Mode?
- How the Settlement Changes Google’s Behavior and What It Requires
- Who Qualifies as a Class Member and What Do They Need to Do?
- The No-Payout Structure: Understanding Why This Settlement Differs From Others
- Limitations of the Settlement and What It Doesn’t Address
- The Lawsuit Timeline and Path to Settlement
- What This Settlement Means for Privacy Law and Future Tech Company Accountability
- Conclusion
What Did Google Actually Track During Incognito Mode?
google‘s tracking during Incognito browsing operated through multiple channels, not just one monitoring system. While users believed they were protected from data collection when using Incognito, Google Analytics was still recording page visits, Google Ad Manager was still collecting ad impression data, and third-party plugins embedded on websites were still transmitting information back to Google’s servers. The company also collected data from apps installed on users’ devices. Importantly, users didn’t have to click on Google ads or interact with Google services directly for tracking to occur—the mere act of visiting websites that contained Google tracking code meant their activity was logged.
The scope of this tracking was massive. Google maintained detailed browsing histories for millions of users over an eight-year period, from June 2016 through 2024. These records included information about what websites users visited, how long they spent on each site, what they searched for, and what pages they viewed—all supposedly under the cover of privacy. A typical example: a user researching a medical condition in Incognito would later see targeted ads for related treatments across the internet, proving that Google’s tracking extended far beyond what users realized their “private” mode was protecting against.
How the Settlement Changes Google’s Behavior and What It Requires
The settlement imposes three major requirements on Google. First, the company must delete the billions of browsing records it collected from Incognito sessions dating back to 2016. This represents an unprecedented data destruction order affecting hundreds of millions of user sessions. Second, Google must maintain technical protections that block third-party cookies by default in Incognito mode for at least five years. Third, Google must improve its disclosures—meaning the company must be more transparent in its user interface about what Incognito mode actually protects and what it doesn’t.
However, the settlement has important limitations that are worth understanding. Google is not paying direct monetary compensation to class members through a claims process. Instead, individuals harmed by Google’s tracking can pursue separate damages through state court proceedings, which is a significant disadvantage for most users who lack the resources or knowledge to file individual lawsuits. Additionally, the settlement doesn’t prevent Google from collecting data in other ways—it specifically addresses Incognito mode but doesn’t fundamentally change how Google tracks regular, non-incognito browsing. The five-year cookie-blocking requirement also means that after 2029, Google could theoretically revert to its previous practices unless the courts intervene again.
Who Qualifies as a Class Member and What Do They Need to Do?
The class includes millions of Chrome users who accessed Incognito mode at any point between June 1, 2016 and the settlement date. Class notices began being sent to potential members in May and June 2024, typically via email or postal mail. Unlike settlements where class members can submit claims to receive a payout, this settlement doesn’t offer a cash payment—the primary benefits are the data deletion and the forced changes to Google’s practices going forward.
Class members had specific deadlines to opt out of the settlement or file objections. By late 2024, opt-out and objection periods had passed for most claimants, meaning that unless someone took action during those windows, they remain bound by the settlement. The final approval hearing was expected to occur sometime between late 2024 and mid-2025. If you believe you qualify as a class member and missed the deadline windows, legal options may still exist through individual lawsuits in state courts, though these would require hiring an attorney and would be pursued outside the class action framework.
The No-Payout Structure: Understanding Why This Settlement Differs From Others
This settlement is unusual because it provides no monetary compensation to the class. Instead of a typical settlement where a company pays a fund that gets distributed to harmed individuals, Google is paying through behavioral change—data deletion and technological safeguards. This approach was controversial among some consumer advocates who argued that it leaves Google without real financial consequences for tracking millions of users for nearly a decade. However, the judge apparently determined that forcing Google to delete the data and implement protections was more valuable to consumers than a cash payout would be.
The practical tradeoff is significant. Many class members might have preferred a smaller cash payment now over promised future protections that could change. Individuals who believe they suffered particular harm—whether through identity theft, unauthorized account access, or serious privacy violations resulting from the tracking—do have the option to pursue individual damages claims in state court. This route is available to class members but requires more effort and legal expense than passively benefiting from a class settlement payout would have required.
Limitations of the Settlement and What It Doesn’t Address
One critical limitation is scope: this settlement addresses only Incognito mode, not Google’s tracking practices in regular browsing mode. Millions of users who use Chrome’s standard (non-incognito) browsing still have their activity tracked by Google through the same mechanisms that operated during Incognito sessions. The settlement doesn’t change that reality. Additionally, the cookie-blocking requirement expires after five years, creating a built-in sunset clause that could allow Google to resume certain tracking practices without a new court order.
Consumer advocates have warned that Google could theoretically use that five-year window to develop alternative tracking methods that don’t rely on cookies but achieve similar results. Another warning worth noting: the settlement covers only data collected through Google-owned tracking systems. It doesn’t address tracking by third parties, other tech companies, or government entities that may have purchased or accessed data about users’ browsing habits. The dark web market for browsing data and the prevalence of data brokers means that even with Google’s deletion of its records, information about your past Incognito sessions could exist elsewhere. Finally, users who agreed to Google’s various terms of service during the class period may find that other provisions in those agreements still allow different forms of data collection, so this settlement should not be viewed as Google’s admission that data collection is wrong—only that tracking Incognito mode specifically violated the law.
The Lawsuit Timeline and Path to Settlement
The lawsuit began as class claims filed in 2020 in federal court in San Jose, California, under Judge Yvonne Gonzalez Rogers. The case remained in litigation for several years as both sides engaged in discovery and legal arguments over whether Google had indeed violated privacy laws. By December 2023, Google and the plaintiffs reached a settlement agreement, signaling that the company decided it was better to agree to data deletion and protections than to continue fighting the case through trial or appeals.
Preliminary approval came in April 2024, which meant the judge found the settlement terms reasonable enough to move forward with notifying the class. The months from May through late 2024 saw class members receiving notices and having opportunities to opt out or object. The final approval hearing was scheduled for later in the process, with a final decision expected between late 2024 and mid-2025.
What This Settlement Means for Privacy Law and Future Tech Company Accountability
The Google Incognito settlement has set an important precedent in consumer privacy litigation. By forcing one of the world’s largest tech companies to delete billions of records and commit to specific technical protections, the courts have signaled that companies cannot simply collect data first and ask permission later. The settlement also demonstrated that even when a company argues its practices are disclosed in terms of service, courts may still find those practices unlawful if they contradict a specific feature’s stated purpose—in this case, a mode explicitly labeled “private.” Looking ahead, this settlement may embolden similar litigation against other tech companies and platforms.
The case raises questions about whether other browsers, apps, and services are making similar claims about privacy that don’t hold up to legal scrutiny. It also shows that while federal privacy legislation remains limited in the United States, state privacy laws and existing legal theories (like consumer fraud and unjust enrichment) can be effective tools for holding corporations accountable. However, the lack of direct cash compensation may also discourage some future cases if consumers decide the benefits aren’t worth the effort to join a class action.
Conclusion
Google tracked users’ Incognito browsing activity through multiple systems for nearly a decade, collecting data that contradicted the company’s own representation of what the feature protected. The settlement reached in this case requires Google to delete that data, maintain cookie-blocking protections for five years, and improve its disclosures about privacy—but provides no direct monetary compensation to harmed users. While unusual in structure, the settlement represents a significant forced change to how one of the world’s most powerful tech companies operates.
If you used Chrome’s Incognito mode between June 2016 and 2024, you are likely a class member in this settlement. Watch for official class notices and be aware of any deadlines for opting out or objecting. If the settlement’s approach doesn’t adequately address your concerns or if you believe you suffered specific harm from the tracking, speak with an attorney about pursuing an individual claim in state court. The broader takeaway is that “private” doesn’t mean what many users assume it means, and even marketed privacy features may face legal challenges if the company’s actual practices don’t match the promise.