A computing device comprising: one or more sensors configured to provide sensor data including user-activity related information; one or more processors; and computer storage memory having computer-executable instructions stored thereon which, when executed by the processor, implement a method for controlling user privacy in an in-private mode, IPM, of operation the computing device, the method comprising: receiving an indication to begin an IPM session and user settings information corresponding to the IPM session; allocating a portion of computer system resources on the computing device to provide an IPM session environment, the portion of resources including a portion of computer system memory being configured for storing data contents including user-activity data generated during the IPM operation; determining a configuration for an IPM quarantine to be installed on the user device, wherein the IPM quarantine is configured to run as a virtual machine on the user device, wherein the virtual machine is configured to be isolated from an operating environment that supports the normal mode of operation on the user device, wherein the configuration comprises a set of user settings based on sensitivity levels configured by the user to determine which user-activity data is kept private; copying one or more applications and services within the IPM session environment to the IPM quarantine; and modifying, in the IPM quarantine, according to the set of user settings, the user-activity data to be utilized by the set of one or more applications copied into the IPM quarantine, wherein the user-activity data is provided to the IPM quarantine from the sensor; receiving an indication to end the IPM session; and upon receiving the indication to end the IPM session: deleting the virtual machine including the data contents of the computer memory configured for storing the user-activity data generated during the IPM session thereby removing the IPM quarantine.. one or more sensors configured to provide sensor data including user-activity related information; one or more processors; and computer storage memory having computer-executable instructions stored thereon which, when executed by the processor, implement a method for controlling user privacy in an in-private mode, IPM, of operation the computing device, the method comprising: receiving an indication to begin an IPM session and user settings information corresponding to the IPM session; allocating a portion of computer system resources on the computing device to provide an IPM session environment, the portion of resources including a portion of computer system memory being configured for storing data contents including user-activity data generated during the IPM operation; determining a configuration for an IPM quarantine to be installed on the user device, wherein the IPM quarantine is configured to run as a virtual machine on the user device, wherein the virtual machine is configured to be isolated from an operating environment that supports the normal mode of operation on the user device, wherein the configuration comprises a set of user settings based on sensitivity levels configured by the user to determine which user-activity data is kept private; copying one or more applications and services within the IPM session environment to the IPM quarantine; and modifying, in the IPM quarantine, according to the set of user settings, the user-activity data to be utilized by the set of one or more applications copied into the IPM quarantine, wherein the user-activity data is provided to the IPM quarantine from the sensor; receiving an indication to end the IPM session; and receiving an indication to begin an IPM session and user settings information corresponding to the IPM session; allocating a portion of computer system resources on the computing device to provide an IPM session environment, the portion of resources including a portion of computer system memory being configured for storing data contents including user-activity data generated during the IPM operation; determining a configuration for an IPM quarantine to be installed on the user device, wherein the IPM quarantine is configured to run as a virtual machine on the user device, wherein the virtual machine is configured to be isolated from an operating environment that supports the normal mode of operation on the user device, wherein the configuration comprises a set of user settings based on sensitivity levels configured by the user to determine which user-activity data is kept private; copying one or more applications and services within the IPM session environment to the IPM quarantine; and modifying, in the IPM quarantine, according to the set of user settings, the user-activity data to be utilized by the set of one or more applications copied into the IPM quarantine, wherein the user-activity data is provided to the IPM quarantine from the sensor; receiving an indication to end the IPM session; and upon receiving the indication to end the IPM session: deleting the virtual machine including the data contents of the computer memory configured for storing the user-activity data generated during the IPM session thereby removing the IPM quarantine..