Technology

Google finally admits data collection in Chrome's 'incognito' mode

Published

2 years ago

January 20, 2024

Google finally admits data collection in Chrome's 'incognito' mode

Google is finally revealing it is collecting your data if you use Google Chrome, even if you use incognito mode. This comes after the internet giant agreed to settle for $5 billion to avoid a 2020 lawsuit.

The lawsuit claimed Google collected information like your IP address, device data and even browser history — despite incognito mode seemingly offering a private browsing experience. Google claimed it warned users about websites potentially tracking user activity in order to dismiss the lawsuit.

However, a judge ruled that Google never explicitly told users it was tracking them and collecting information. And if users weren’t aware, they couldn’t consent to data collection.

CLICK TO GET KURT’S FREE CYBERGUY NEWSLETTER WITH SECURITY ALERTS, QUICK VIDEO TIPS, TECH REVIEWS, AND EASY HOW-TO’S TO MAKE YOU SMARTER

What’s happened since Google agreed to settle the lawsuit

Google Chrome on smartphone. (Kurt “CyberGuy” Knutsson)

Since Google agreed to settle last month, two major developments have happened: Google has updated its disclaimer in incognito mode, according to MSPowerUser, and lawyers have been working to finalize a settlement.

So far, Google has only updated the disclaimer in its Canary developer tool on Windows, Android and other devices. If you use it and go into incognito mode, you’ll see a message that says:

NEXT-GEN TECH OUTSMARTS DOCTORS WITH MORE ACCURATE DIAGNOSES AND BETTER BEDSIDE MANNER: STUDY

“Others who use this device won’t see your activity, so you can browse more privately. This won’t change how data is collected by websites you visit and the services they use, including Google. Downloads, bookmarks and reading list items will be saved.”

Google Chrome Incognito Mode. (Google)

Lawyers also have until Feb. 24 to present the court with a finalized settlement agreement. Plaintiffs originally wanted $5,000 in damages per user for violating federal wiretapping and California privacy laws.

We reached out to Google, and a spokesperson released this statement to Cyberguy:

“Incognito mode in Chrome will continue to give people the choice to browse the internet without their activity being saved to their browser or device.”

MORE: HOMELAND SECURITY WARNS FEDERAL AGENCIES OF HACKERS TARGETING GOOGLE CHROME AND EXCEL SPREADSHEETS

How to stay private when browsing the internet

Keeping your information private while browsing the internet can be a tough task. However, here are some easy ways to keep your data away from any prying eyes:

Turn off “web & app” activity

“Web & App” Activity is basically Google’s main tool to collect your data. Google assumes you have given them access to your online activity when this setting is on. Google claims it does not sell your personal information to anyone. However, Google may use your activity data to show you personalized ads on Google sites and apps and on sites and apps that partner with Google to show ads.

How to turn “web & app” activity off using a Mac

On the Google Chrome page, click on your icon in the top right corner and select Manage your Google Account, or click on this link
In the top left, click on Data & Privacy
Scroll down and find the box that says History Settings
In the box, the first row says Web & App Activity; Click on the blue check next to the word On
Find the box that says Web & App Activity and click Turn Off on the right
Select Turn off and Delete activity
Click Next in the bottom right
Select any Google products you wish to delete your activity by selecting its respective box to the right, checking it off, or clicking Select All in the top right to delete all activity
Click Next and then Delete once you have confirmed you want to delete. Then tap Got it.

Turning “web & app” activity off using a PC

On the Google Chrome page, go to Activity controls in a web browser. To turn off web and app activity on your PC, you can access your Activity Controls in a web browser. If you’re not signed in to your Google account, you’ll be prompted to do so
Click Turn Off under “Web & App Activity.” You’ll see this option near the top of the page
Scroll down and click the Pause button. You won’t be able to click Pause until you’ve scrolled to the bottom of the page. This pauses your web and search activity until you enable it again. To delete your Web & App Activity history, click Delete old activity under “Setting is Off” and then select a time range. Click Got It when you’re finished to return to the previous screen.

PRINCE HARRY WITHDRAWS LAWSUIT AGAINST UK PUBLISHER THE DAY HE WAS DUE TO PROVIDE DEFENSE OF CLAIMS

How to turn “web & app” activity off using iPhone

On the Google home page, click on your icon in the top right corner
Select Google Account or click on this link
Then tap Data & Privacy near the top of the screen
Scroll down and find the box that says History Settings

Google Account page. (Google)

In the box, the first row says Web & App Activity; Click on the > icon
Find the box that says Web & App Activity and click Turn Off on the right
Select Turn off and Delete activity
Click Next in the bottom right
Select any Google products you wish to delete your activity by selecting its respective box to the right, checking it off, or clicking Select All in the top right to delete all activity
Click Next and then Delete once you have confirmed you want to delete. Then tap Got it.

How to turn “web & app” activity off using Android

Settings may vary depending on your Android phone’s manufacturer.

On the Google home page, click on your icon in the top right corner
Select Google Account, or click on this link
Click on Data & Privacy
Scroll down and find the box that says History Settings
Find the row that says Web & App Activity and click the > icon
Find the box that says Web & App Activity and click Turn Off on the right
Select Turn off and Delete activity
Click Next in the bottom right
Select any Google products you wish to delete your activity by selecting its respective box to the right, checking it off, or clicking Select All in the top right to delete all activity
Click Next and then Delete once you have confirmed you want to delete. Then tap Got it.

Limit data sharing with sites and services

While there are many valid reasons for allowing Google to give third-party apps and services access to your data, it puts your privacy at risk. Google can track whenever you sign in to another app with your Google sign-in and which service.

How to turn off data sharing with sites and services on Mac

On the Google Chrome page, click on your icon in the top right corner and select Manage your Google Account, or click on this link
In the top left, click on Data & Privacy
Scroll down and find the box under the heading Data from apps and services you use
Click on Third-party apps & services
Select any apps you wish to get rid of Google’s connections with
Click the box on the bottom that says Delete all connections you have with [website] and click confirm

Turning off data sharing with sites and services on PC

On the Google Chrome page, click the menu icon (three dots) in the top right corner and select Settings
Then, click Privacy and security

Google Settings page. (Google)

Next, tap Site settings
Here, you can manage how Chrome handles cookies, location, camera, microphone, notifications, and other permissions for different sites
You can also clear your browsing data and disable third-party services from accessing your data

How to turn off data sharing with sites and services on iPhone

On the Google home page, click on your icon in the top right corner and select your
Select Google Account, Or click on this link
Click on Data & Privacy
Scroll down and find the box under the heading Data from apps and services you use
Click on Third-party apps & services
Scroll down and select any apps you wish to get rid of Google’s connections with by clicking on it
Next, scroll down and click the box on the bottom that says Delete all connections you have with [website] and click confirm

How to turn off data sharing with sites and services on Android

Settings may vary depending on your Android phone’s manufacturer.

On the Google home page, click on your icon in the top right corner
Select Google Account, or click on this link
Click on Data & Privacy
Scroll down and find the box under the heading Data from apps and services you use
Click on Third-party apps & services
Select any apps you wish to get rid of Google’s connections with by clicking on it
Click the box on the bottom that says Delete all connections you have with [website] and click confirm

Turn off Location History

Google can track the places you go and collect your location data. However, the tricky thing with this setting is that you must have Web & App activity turned off for your Location History to be fully turned off.

How to turn off Location History on Mac

On the Google Chrome page, click on your icon in the top right corner and select Manage your Google Account, or click on this link
In the top left, click on Data & Privacy
Scroll down and find the box that says History Settings
Click on the row that says Location History
Click on the box that says Turn off
Select Turn off again and then Got it

MORE: HOW TO CHECK THAT YOU’RE NOT ACCIDENTALLY SHARING YOUR LOCATION

How to turn off “web & app” activity using a PC

On the Google Chrome page, go to Activity controls in a web browser. To turn off web and app activity on your PC, you can access your Activity Controls in a web browser. If you’re not signed in to your Google account, you’ll be prompted to do so
Click Turn Off under “Web & App Activity.” You’ll see this option near the top of the page
Scroll down and click the Pause button. You won’t be able to click Pause until you’ve scrolled to the bottom of the page. This pauses your web and search activity until you enable it again. To delete your Web & App Activity history, click Delete old activity under “Setting is Off” and then select a time range. Click Got It when you’re finished to return to the previous screen

How to turn Location History off on iPhone

On the Google home page, click on your icon in the top right corner
Select your Google Account or click on this link
At the top, click on Data & Privacy
Scroll down and find the box that says History Settings
Click on the row that says Location History

Google Location History setting. (Google)

Click on the box that says Turn off
Select Turn off again and then Got it

How to turn off Location History on Android

Settings may vary depending on your Android phone’s manufacturer.

On the Google home page, click on your icon in the top right corner
Select Google Account, or click on this link
Click on Data & Privacy
Scroll down and find the box that says History Settings
Click on the row that says Location History
Click on the box that says Turn off
Select Turn off again and then Got it

Stop targeted ads

Google’s targeted ads can be a bit too specific for comfort, but there is a way to turn them off:

How to stop targeted ads on Mac

On the Google Chrome page, click on your icon in the top right corner and select Manage your Google Account, or click on this link
In the top left, click on Data & Privacy
Find the box that is titled Personalized ads and click on My Ad Center
In the top right corner, click on the box that says Personalized ads, and then click on Turn Off in the bottom right of the next box. Then tap Got it

How to stop targeted ads on iPhone

On the Google home page, click on your icon in the top right corner
Select Google Account, or click on this link
Click on Data & Privacy
Find the box that is titled Personalized Ads and click on My Ad Center
In the top right corner, click where it says On
Then on the bottom right, click where it says Turn Off
Then tap Got it

How to stop targeted ads on Android

On the Google home page, click on your icon in the top right corner
Select Google Account, or click on this link
Click on Data & Privacy
Find the box that is titled Personalized ads and click on My Ad Center
In the top right corner, click where it says ON next to Personalized ads
Scroll down and click Turn Off in the bottom right
Then click Got it

Person on Google home page. (Kurt “CyberGuy” Knutsson)

MORE: WAS YOUR PRIVATE DATA BEING SOLD ON THIS DARK WEB MARKETPLACE

Use a VPN for better privacy

Consider using a VPN to protect against being tracked and to identify your potential location on websites that you visit. Many sites can read your IP address and, depending on their privacy settings, may display the city from which you are corresponding. A VPN will disguise your IP address to show an alternate location. See my expert review of the best VPNs for browsing the web privately on your Windows, Mac, Android & iOS devices.

Kurt’s key takeaways

While it can be exhausting taking so many precautions to protect your data, it really pays off at the end of the day. Taking a few steps can make all the difference. But by not protecting yourself, you are leaving yourself susceptible to data collection, targeted ads and even worse. At the end of the day, protecting your privacy is your responsibility.

How do you protect yourself from data collection? Are you worried about Google collecting your data? Let us know by writing us at Cyberguy.com/Contact

For more of my tech tips & security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you’d like us to cover.

Answers to the most-asked CyberGuy questions:

Kurt “CyberGuy” Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on “FOX & Friends.” Got a tech question? Get Kurt’s CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

Technology

The Game Awards 2025: all the news and announcements

Published

9 hours ago

December 11, 2025

Press Room

The Game Awards 2025: all the news and announcements

The Game Awards are back once again to showcase a metric ton of commercials, provide the gaming public with their monthly dose of Muppets, and validate gamers’ opinions on which title should be named the Game of the Year. I don’t wanna say it’s a foregone conclusion what this year’s GOTY will be — Silksong may surprise us — but it’s pretty obvious that Clair Obscur: Expedition 33 is the frontrunner and for good reason. It’s netted 12 nominations, the most out of this year’s contenders, including all five craft awards (Direction, Art, Music and Score, Narrative, and Audio Design).

On the announcements side, Crystal Dynamics and Amazon Games are planning something related to the Tomb Raider series. Keighley also probably had plans to reveal big news about Resident Evil: Requiem, but unfortunately it got spoiled early thanks to some leaked key art on the PlayStation Store. Here’s all the news, announcements, and trailers from The Game Awards 2025.

Technology

Malicious browser extensions hit 4.3M users

Published

9 hours ago

December 11, 2025

Press Room

Malicious browser extensions hit 4.3M users

NEWYou can now listen to Fox News articles!

A long-running malware campaign quietly evolved over several years and turned trusted Chrome and Edge extensions into spyware. A detailed report from Koi Security reveals that the ShadyPanda operation affected 4.3 million users who downloaded extensions later updated with hidden malicious code.

These extensions began as simple wallpaper or productivity tools that looked harmless. Years later, silent updates added surveillance functions that most users could not detect.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

THIS CHROME VPN EXTENSION SECRETLY SPIES ON YOU

Malicious extensions spread through trusted browsers and quietly collected user data for years. (Kurt “CyberGuy” Knutsson)

How the ShadyPanda campaign unfolded

The operation included 20 malicious Chrome extensions and 125 on the Microsoft Edge Add-ons store. Many first appeared in 2018 with no obvious warning signs. Five years later, the extensions began receiving staged updates that changed their behavior.

Koi Security found that these updates rolled out through each browser’s trusted auto-update system. Users did not need to click anything. No phishing. No fake alerts. Just quiet version bumps that slowly turned safe extensions into powerful tracking tools.

NEW EMAIL SCAM USES HIDDEN CHARACTERS TO SLIP PAST FILTERS

WeTab functions as a sophisticated surveillance platform disguised as a productivity tool. (Koi)

What the extensions were doing behind the scenes

Once activated, the extensions injected tracking code into real links to earn revenue from user purchases. They also hijacked searches, redirected queries and logged data for sale and manipulation. ShadyPanda gathered an unusually broad range of personal information, including browsing history, search terms, cookies, keystrokes, fingerprint data, local storage, and even mouse movement coordinates. As the extensions gained credibility in the stores, the attackers pushed a backdoor update that allowed hourly remote code execution. That gave them full browser control, letting them monitor websites visited and exfiltrate persistent identifiers.

Researchers also discovered that the extensions could launch adversary-in-the-middle attacks. This allowed credential theft, session hijacking and code injection on any website. If users opened developer tools, the extensions switched into harmless mode to avoid detection. Google removed the malicious extensions from the Chrome Web Store. We reached out to the company, and a spokesperson confirmed that none of the extensions listed are currently live on the platform.

Meanwhile, a Microsoft spokesperson told CyberGuy, “We have removed all the extensions identified as malicious on the Edge Add-on store. When we become aware of instances that violate our policies, we take appropriate action that includes, but is not limited to, the removal of prohibited content or termination of our publishing agreement.”

Most of you will not need the full technical IDs used in the ShadyPanda campaign. These indicators of compromise are primarily for security researchers and IT teams. Regular users should focus on checking your installed extensions using the steps in the guide below.

You can review the full list of affected Chrome and Edge extensions to see every ID tied to the ShadyPanda campaign by clicking here and scrolling down to the bottom of the page.

How to check whether your browser contains these extension IDs

Here is an easy, step-by-step way for you to verify if any malicious extension IDs are installed.

For Google Chrome

Open Chrome.

Type chrome://extensions into the address bar.

Press Enter.

Look for each extension’s ID.

Click Details under any extension.

Scroll down to the Extension ID section.

Compare the ID with the lists above.

If you find a match, remove the extension immediately.

For Microsoft Edge

Open Edge.

Type edge://extensions into the address bar.

Press Enter.

Click Details under each extension.

Scroll to find the Extension ID.

If an ID appears in the lists, remove the extension and restart the browser.

183 MILLION EMAIL PASSWORDS LEAKED: CHECK YOURS NOW

Simple security steps can block hidden threats and help keep your browsing safer. (Kurt “CyberGuy” Knutsson)

How to protect your browser from malicious extensions

You can take a few quick actions that help lock down your browser and protect your data.

1) Remove suspicious extensions

Before removing anything, check your installed extensions against the IDs listed in the section above. Most of the malicious extensions were wallpaper or productivity tools. Three of the most mentioned are Clean Master, WeTab and Infinity V Plus. If you installed any of these or anything that looks similar, delete them now.

2) Reset your passwords

These extensions have access to sensitive data. Resetting your passwords protects you from possible misuse. A password manager makes the process easier and creates strong passwords for each account.

Next, see if your email has been exposed in past breaches. Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.

Check out the best expert-reviewed password managers of 2025 at Cyberguy.com.

3) Use a data removal service to reduce tracking

ShadyPanda collected browsing activity, identifiers and behavioral signals that can be matched with data already held by brokers. A data removal service helps you reclaim your privacy by scanning people-search sites and broker databases to locate your exposed information and remove it. This limits how much of your digital footprint can be linked, sold or used for targeted scams.

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

4) Install strong antivirus software

An antivirus may not have caught this specific threat due to the way it operated. Still, it can block other malware, scan for spyware and flag unsafe sites. Many antivirus tools include cloud backup and VPN options to add more protection.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.

5) Limit your extensions

Each extension adds risk. Stick with known developers and search for recent reviews. If an extension asks for permissions it should not need, walk away.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Kurt’s key takeaways

ShadyPanda ran for years without raising alarms and proved how creative attackers can be. A trusted extension can shift into spyware through a silent update, which makes it even more important to stay alert to changes in browser behavior. You protect yourself by installing fewer extensions, checking them from time to time and watching for anything that feels out of place. Small steps help lower your exposure and reduce the chances that hidden code can track what you do online.

Have you ever found an extension on your browser that you didn’t remember installing or one that started acting in strange ways? How did you handle it? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alert, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

Kurt “CyberGuy” Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on “FOX & Friends.” Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

Technology

The Game Awards are losing their luster

Published

21 hours ago

December 11, 2025

Press Room

It’s Game Awards season, y’all. That special time of the year when we gather together to celebrate video games and the people who make them… by watching expensive commercials briefly punctuated by the odd awards speech or musical performance. For better or worse, The Game Awards is the biggest night on the video game event calendar. But with the way things have been going, lately it’s been more “worse” than it has been “better.”

Between host and industry hypeman Geoff Keighley’s two video game vanity projects, The Game Awards is older and ostensibly more mature than Summer Game Fest. Conceived in 2014 as a way to celebrate both the people who make and play games, the show has always been part awards ceremony, part commercial product. That idea has been executed with varying degrees of success. (Remember the Schick Hydrobot?) But for the last few years, it’s felt like the awards part was increasingly getting in the way of the commercial part.

Alas, poor Hydrobot, we knew him well.

Photo by John Sciulli/Getty Images for Schick

That was felt most acutely during the 2023 Game Awards. Developers accepting statues were often drowned out by music or cut off by teleprompters asking them to “please wrap it up” after their roughly 30 seconds of allotted time. Muppets and Death Stranding director Hideo Kojima, though, had no such time limits enforced on them, with Aftermath calculating that 13 acceptance speeches could have fit inside the five minutes Kojima took to explain his game / not-game OD.

2023 was also the first full year into the now endemic video game labor crisis that saw developers laid off by the tens of thousands while studios of popular games got shut down. That crisis went by that year’s game awards with no acknowledgement, angering developers further. “I’m incredibly disappointed in Geoff Keighley for his silence on the state of the industry this year,” Monomi Park senior environment artist Dillon Sommerville told The Verge in 2023.

How to watch The Game Awards

On Thursday, December 11th at 5PM PT / 8PM ET the TGAs will be streamed on Twitch and YouTube. This year, Keighley has also signed a deal to beam the show live via Prime Video where it’ll be free to watch for Prime subscribers.

Keighley, perhaps responding to the bad optics, acknowledged the continuing labor issue in 2024. The Game Awards also introduced a new category, Game Changer, with its inaugural award going to Amir Satvat, a business development director at Tencent who created a resource to help laid-off developers find jobs.

But in the months since the 2024 awards, Keighley has once again been accused of poor treatment of the people he’s supposed to be celebrating. In 2020, The Game Awards announced a new initiative called The Future Class, designed to celebrate game makers, “who represent the bright, bold and inclusive future of video games.” Inductees are honored during the broadcast and provided with networking opportunities, mentorship programs, and other resources throughout the following year. However, there have been reports alleging that Keighley has ignored Future Class concerns and that resources from the program have been materially lacking.

In 2023, the Future Class wrote an open letter to The Game Awards and Keighley demanding recognition of the war in Gaza. This wasn’t without precedent. In 2022, the awards show acknowledged the war in Ukraine. But Keighley didn’t respond to the letter, nor has he mentioned the Future Class that much either. The Game Awards hasn’t named a Future Class in the last two years and won’t be naming anymore according to Future Class organizer Emily Weir. “At this time, we are not planning a new Future Class for this year and do not have any active programming plans for Future Class,” she said in a statement to Game Developer.

Gif of a curly haired man named Pedro Eustache playing an alto flute

Pedro Eustache, affectionately known as Flute Guy, has confirmed he will be performing at The Game Awards.

Gif: The Game Awards

Like a lot of diversity and inclusion-minded programs, Future Class got started in the wake of George Floyd’s murder in 2020. But as diversity, equity, and inclusion (DEI) have become publicly verboten in the rise of the Trump Administration and the online right, many companies, including game publishers, have diminished or jettisoned their DEI programs. While there has been no explicitly stated reason for the seeming shut down of the Future Class, it seems like The Game Awards is just doing what it always does — whatever’s popular at the time.

For as much as The Game Awards has lost the veneer of respectability among some of the people whose work it’s meant to celebrate, rest assured, it ain’t going anywhere. The Game Awards broadcast nets millions of viewers with a record-breaking 154 million livestreams in 2024. That’s a lot of eyeballs that developers pay a lot of money to get in front of. And even for those who don’t buy airtime, having your game featured at all during the presentation can net a big boost in sales. After Balatro was nominated for and won multiple awards last year including best debut indie, its publisher PlayStack shouted out the awards specifically for contributing to a huge increase in players.

More generally, the awards also provide a nice focal point for the disparate online gaming communities to gather around… and bitch about. E3 is long gone, and the other big events (not also run by Keighley) are the publisher-specific direct livestreams. With everything so fractured now, yelling with your friends or colleagues about how Hades was robbed for game of the year (an event I will never get over) is fun and something TGAs are singularly suited to provide. It is not the Oscars of gaming — DICE, the BAFTAs, and the International Game Development Awards (IGDA) pretty well take care of that. But if you want popularity, production values, and Flute Guy, there’s nothing like The Game Awards — even though some of the shine is starting to wear off.

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.