Why is this a surprising thing? The only thing incognito mode does is that your browser doesn't remember what you surfed on the internet, pretty much everything else is fair game. Your ISPs know what you're upto, adtech is so advanced that they can still track you purely based on your IP, all the websites pretty much know who you are (if you've visited them before) even if you don't log in, why is it so surprising?