If you use Safari on your Mac for your private browsing needs, you might want to stop. MacIssues points out that all those URLs you visit in private mode are still saved in a database file that anyone with your computer can look at.


Safari saves all the favicon images and URLs you visit in the ~/Library/Safari/WebpageIcons.db file. You can open that file with any SQLite browser. Once you do, you'll find a full list of all the URLs you've ever visited in Safari, private mode or otherwise, in the PageURL table. Obviously it takes a bit of work to get to this file so nobody's going to see it by accident, but if you're worried about anyone snooping in on your personal computer, it's probably best not to use Safari for your private browsing. For now, you can simply delete the Webpageicon.db file to get rid of that entire history.

Safari bug saves Web page URLs in Private Mode | MacIssues