I don't see how it'd be difficult to just obfuscate this. If it tries to write a cookie then let it write a cookie, just clear it on the next page reload. I don

I don't see how it'd be difficult to just obfuscate this. If it tries to write a cookie then let it write a cookie, just clear it on the next page reload. I don't see how it should be able to distinguish between an incognito browser and a non-incognito browser that has no history and is navigating to the page in question for the first time. I guess some things around local storage can be used to infer incognito mode, but I think it'd be straightforward to just write all local storage usage to memory instead of disk.