Private browsing isn't as private as most people think. Here’s what it actually hides and what it still exposes.