If you ask Apple, switching on “Private Browsing” in OS X Safari should keep everything you do online free from prying eyes. Not only does “Private Browsing” mode prevent websites from tracking your behavior, it also precludes Safari from remembering what pages you’ve visited. In other words, “Private Browsing” should keep your search history completely, well, private.

Or so you thought.

Don’t Miss: PC makers are already mocking Apple’s new MacBook

In a bug originally discovered by MacIssues, it appears that Safari, even in Private browsing mode, is actually logging all the sites you’re visiting and keeping them in a file anyone with access to your computer can retrieve with only a minimal amount work.

As it turns out, Safari, no matter what browsing mode you’re in, saves all website Favicon images in a file located here: ~/Library/Safari/WebpageIcons.db file. This database file can be opened by any SQLite browser, including the one built into OS X’s Terminal app.

Once opened, users are presented with a full list of all the URLs they’ve visited, including those that were opened up while browsing in Private mode. While users can certainly trash the WebpageIcons.db file if they wish to get rid of any trace of their browsing history, Chrome for OS X might remain a safer bet in the interim.

A life long Mac user and Apple enthusiast, Yoni Heisler has been writing about Apple and the tech industry at large for over 6 years. His writing has appeared in Edible Apple, Network World, MacLife, Macworld UK, and most recently, TUAW. When not writing about and analyzing the latest happenings with Apple, Yoni enjoys catching Improv shows in Chicago, playing soccer, and cultivating new TV show addictions, the most recent examples being The Walking Dead and Broad City.