add note about private browsing behavior