What we can and can't see
A privacy site that tracked you would be absurd. So this one doesn't. Here's the honest, technical version — including the part most sites leave out.
What this site does not have
- No analytics. No Google Analytics, no Plausible, no Fathom, no beacon of any kind.
- No cookies. Not one, not even "essential" ones. There's nothing to consent to, which is why you got no banner.
- No local storage. Nothing is written to your device — no
localStorage, no fingerprinting, no session IDs. - No third-party requests. Every icon, font instruction, style, and script comes from this domain. Fonts are the ones already on your computer. Nothing is fetched from a CDN, so no other company learns you were here.
- No forms. Nowhere to type an email address, so we can't collect one. A privacy site with a "check if you've been breached" box would be collecting exactly what it warns you against.
- No ads, no affiliates, no payment from anyone we mention. Why.
- No referrer leakage. Outbound links are
noreferrer, so the site you click through to isn't told you came from a page about being doxxed.
You can verify all of this. Open your browser's network tab and reload — every request should point at goincognito.org and nothing else. Or read the source; it's static HTML with one small script that draws the loading bar.
What is unavoidably visible
Here's the part that "we don't track you!" sites usually skip. Any web server sees a request in order to answer it. That means the host serving this site briefly handles your IP address, your browser's user-agent string, and which page you asked for. This is how the internet works; it isn't a choice a site can opt out of.
What a site chooses is what it does with that. Here, the answer is: aggregate counts, nothing else.
We want one number: how many people came. Total page views, per day. Not who, not from where, not what you read, not whether you came back. There is no profile because there is nothing to build one from — no cookie, no ID, no log we keep.
Concretely: counting happens on the server, from request totals, and we keep no per-visitor records. Your hosting provider handles the raw connection as a technical necessity, the same way your internet provider does — so if you don't want them to know you visited, that's what Tor or a VPN is for. We won't pretend a promise on this page substitutes for that.
The honest limits
- Your browser history is yours to clear. This site can't do it. Step 8 of the emergency steps shows how.
- The "Leave this site" button replaces the page so the back button won't return here. It does not erase the visit from history.
- Your network still sees the domain you connected to — your provider, your employer, or whoever runs the Wi-Fi. Encrypted DNS and a VPN change that; nothing on our end can.
- A shared or monitored device is the one situation this page can't help with. If someone has installed monitoring software, assume they can see everything, and use a device they don't control.
If we ever change this
Any change to what's collected gets written here, dated, with the old version still readable. A privacy policy you can't diff isn't worth much.