can websites see my browsing history can websites see my search history can a website owner see my browsing history

Can websites see my browsing history? What sites really see

Adrian Maverick · · 7 min read

Short answer: no, a website cannot read your browser history or see your other tabs. It sees your visit: your IP address, your device and browser, what you do on its pages, and usually which site sent you. The feeling that it knows where you have been comes from ad companies whose code sits on many sites.

So the site you are on is rarely the one watching your whole history. The company whose tracking script it loaded might be.

What a website can see when you visit

Every site you open learns a fair amount about this one visit:

  • Your IP address, which gives away your rough location and your internet provider.
  • Your browser and device: browser version, operating system, screen size, language, time zone.
  • Everything you do on its pages: what you click, what you type into its search box, how far you scroll, how long you stay.
  • Its own cookies, so it recognizes you when you come back, and your account if you sign in.
  • Where you came from, in a limited form (more on that below).

What it does not get is a list of the other sites you have visited. Browsers do not offer any way for a page to read your history.

Could websites ever read your history?

They used to, by a trick. Browsers color links you have already visited differently, using the CSS :visited style. A page could fill itself with links to popular sites and check, with a little JavaScript, which ones the browser had painted as visited. MDN describes how this let websites "uncover a user's browsing history and figure out what sites the user had visited," and how browsers responded by telling "little white lies" to pages: the functions that report a link's style now answer as if every link were unvisited, and only a few color styles can be applied to visited links at all (MDN).

Those fixes slowed the attacks without ending them. In April 2025 Google announced a structural fix: from Chrome 136, visited-link history is partitioned. A link shows as visited only on the site where you clicked it. Chrome now stores each visited link with the link URL, the top-level site and the frame origin, so your history "is no longer a global list that any site can query" (Chrome for Developers).

Can websites see what other tabs you have open?

No. A page cannot list or read your other tabs. The one related signal it gets is about itself: the Page Visibility API tells a page when its own tab becomes hidden, for example when you switch tabs or minimize the window. MDN notes that pages only become hidden "when the user switches tabs or minimizes the browser window containing the tab" (MDN). A site can know you looked away. It cannot know where you went.

Can a website see which site I came from?

Partly. When you click a link, your browser sends a Referer header to the next site. The default rule in current browsers is strict-origin-when-cross-origin. For a link from one site to another, it sends only the origin, for example https://www.reddit.com/, and not the page path or query string. Sending the full address is reserved for links within the same site (MDN). So a site you land on from a search can usually tell which search engine sent you, not what you searched.

So how do ads follow me from site to site?

Through third parties. A typical page loads code from other companies: ad networks, analytics tools, social buttons, embedded videos. Each of those companies sees your visit to that page. When the same company's code sits on thousands of sites, it sees you on all of them.

The scale is large. Researchers who disclosed a Meta and Yandex tracking technique in June 2025 cited HTTP Archive data showing the Meta Pixel on 2.4 million websites (Local Mess). Every one of those sites tells Meta that someone loaded the page, and with cookies, who.

Third-party cookies are how those companies recognize you between sites. What your browser does with them, as of October 2026:

Browser Third-party cookies by default
Chrome A setting you choose. Google said in October 2025 that Chrome will "maintain our current approach to offering users third-party cookie choice" (Privacy Sandbox). In Incognito, "third-party cookies are blocked by default" (Chrome Help).
Safari Blocked. Apple's WebKit team announced on March 24, 2020 that "Cookies for cross-site resources are now blocked by default across the board" (WebKit).
Firefox Partitioned per site. "From Firefox 103, State Partitioning is turned on by default," which gives every website you visit its own partitioned storage, so a tracker embedded on two sites gets two separate cookie jars (MDN).

Blocking third-party cookies does not end tracking. Companies also match you by sign-in, email address and device fingerprint. It does cut the easiest link between sites.

Can a website owner see my browsing history?

No. Whoever runs a site sees what its own logs and analytics record about visits to that site. They cannot see what you did before you arrived, apart from the referring origin, or what you do after you leave. If their site loads a big ad network's code, the ad network sees more than the owner does.

Can websites see my search history?

Not your Google or Bing history. A site sees what you type into its own search box. It also sees which search engine sent you, from the referrer, but not your query. Your search history lives with the search engine and in your browser, and neither shares it with the sites you visit.

The things that can see your whole history

If a website cannot, what can? Three things sit above the page:

  1. Your browser extensions. An extension with the history permission triggers Chrome's warning "Read and change your browsing history on all signed-in devices," and one with access to every site shows "Read and change all your data on all websites" (Chrome for Developers). Review what yours are allowed to do.
  2. Your browser account. If you sync history to Google, Apple or Microsoft, that company holds it.
  3. The network. Your internet provider and the Wi-Fi owner see the site names you connect to, as we explain in can my internet provider see what I search.

See which companies a page reports to

You can check any site yourself on a computer in about a minute.

  1. Open the site in Chrome, Edge or Firefox.
  2. Press F12 (or right-click and choose Inspect) and open the Network tab.
  3. Reload the page.
  4. Look at the domain column. Anything that is not the site's own domain is a third party that just learned you were there.

Try it on a news site and on a small blog, and compare. A tracker blocker in your browser, or a browser that blocks known trackers by default, cuts most of that list.

Your inbox has the same trackers

Marketing emails carry tracking pixels, tiny images that report when and where you open a message, the same idea as the scripts above. We explain how they work in what is a tracking pixel. In Secria Mail, tracking pixels are removed automatically and senders never see your IP address.

FAQ

Can websites see my history in incognito mode? No, for the same reason they cannot in a normal window. Incognito changes what your browser saves, not what a site can read. Sites and their trackers still see your visit.

Can a website tell if I visited another site? Not by reading your history. Older tricks with visited-link colors are blocked in modern browsers, and Chrome 136 partitioned visited-link history so links only show as visited where you clicked them. Ad networks present on both sites can connect the two visits.

Can websites see my IP address? Yes, every site you connect to sees it. A VPN replaces it with the VPN server's address.

Can websites see my other open tabs? No. A page can tell only whether its own tab is visible or hidden.

A website sees its own visit and little else. The trackers it carries see much more, and blocking them is the change that matters most.

Secria fact-checks every post against primary sources. Spotted something wrong or out of date? Email hq@secria.me and we will correct it.