Specification for "private mode" browsing