Incognito Mode
Off-the-record sessions, visibly off
A counterpart to AI Memory. Incognito sessions write nothing to long-term memory, surface a persistent visual indicator, and stay clearly separate from the user's history. The mode is one move to enter, one move to leave, and unmissable while it is on.
Framing
The problem
Memory-aware AI quietly persists everything; users have no clean way to talk to it without leaving a trail.
The pattern
Provide an explicit mode where the session writes no memory, with a persistent banner that makes the mode unmissable.
Why chat breaks here
Default chat blurs the line between exploration and persisted history; users do not know what will resurface.
Risks
Misleading "incognito" labels can imply more privacy than the system delivers (e.g., still logging to telemetry).
Avoid when
The product has no long-term memory to begin with; the mode adds no real distinction.
Use when
Memory-aware AI is the default and users need a clean way to explore without persistence.
DOPE evaluation
- Directability
- Toggle mode any time; existing context is dropped, future writes are blocked
- Observability
- Persistent banner makes the mode visible at all times
- Predictability
- Nothing in the session is written to memory or surfaces in future sessions
- Explainability
- The mode declares exactly what is and is not retained — no ambiguity
In the wild
- ChatGPT Temporary Chat (OpenAI) — "Temporary" pill button top-right; banner across the chat window confirming memory off and no training. Available on free + paid. 30-day safety retention disclosed. Flagship.
- Claude Incognito Mode (Anthropic) — Ghost icon in upper-right of new-chat surface; black border + "Incognito chat" label in upper-left while active. Free for all tiers (Sept 2025).
- Gemini Temporary Chat (Google) — Temporary Chat icon next to "New Chat"; banner above chat window. 72-hour retention disclosed. Web first, mobile rolling out — completes the ChatGPT/Claude/Gemini incognito-as-baseline trio.
FAQ
When should I use the Incognito Mode pattern?
Memory-aware AI is the default and users need a clean way to explore without persistence.
When should I avoid the Incognito Mode pattern?
The product has no long-term memory to begin with; the mode adds no real distinction.
What problem does Incognito Mode solve?
Memory-aware AI quietly persists everything; users have no clean way to talk to it without leaving a trail.
Why is chat the wrong fit for this?
Default chat blurs the line between exploration and persisted history; users do not know what will resurface.
Related patterns
- Alternative to: AI Memory — Memory-on as default vs memory-off as deliberate choice. Incognito is the explicit opposite move, with a banner.
- Often paired with: Data Ownership — Incognito prevents writes; Data Ownership lets you reclaim what was written. Two ends of the same control surface.
- Often paired with: Consent — Consent governs durable permissions; Incognito suspends them per session. Layered control.