From 800b7b9ed1964c88806f6c30d6404ea4ec288011 Mon Sep 17 00:00:00 2001
From: freenutsxd <freenutsxd@gmail.com>
Date: Sat, 30 May 2026 13:18:17 -0500
Subject: [PATCH 1/3] adds an always open in incognito setting

---
 bbcode/UrlTagView.vue   | 11 +++++++++--
 chat/locales/en_us.json |  2 ++
 electron/Settings.vue   | 19 +++++++++++++++++++
 electron/chat.ts        | 10 ++++++++++
 electron/common.ts      |  1 +
 5 files changed, 41 insertions(+), 2 deletions(-)

diff --git a/bbcode/UrlTagView.vue b/bbcode/UrlTagView.vue
index 22f03d84..33d9104f 100644
--- a/bbcode/UrlTagView.vue
+++ b/bbcode/UrlTagView.vue
@@ -20,6 +20,7 @@
 
 <script lang="ts">
   import Vue from 'vue';
+  import core from '../chat/core';
   import { EventBus } from '../chat/preview/event-bus';
 
   export default Vue.extend({
@@ -57,8 +58,14 @@
         if (e.altKey) {
           this.toggleStickyness();
           e.preventDefault();
-        } else {
-          this.dismiss(true);
+          return;
+        }
+
+        this.dismiss(true);
+
+        if (core.state.generalSettings?.horizonAlwaysOpenIncognito) {
+          e.preventDefault();
+          EventBus.$emit('open-url-incognito', { url: this.url });
         }
       }
     }
diff --git a/chat/locales/en_us.json b/chat/locales/en_us.json
index e3e9eed7..20017437 100644
--- a/chat/locales/en_us.json
+++ b/chat/locales/en_us.json
@@ -652,6 +652,8 @@
   "settings.browserOptionReset": "Reset to default",
   "settings.browserOptionSave": "Save",
   "settings.browserOptionTitle": "Browser Path",
+  "settings.alwaysOpenIncognito": "Always open links in incognito/private mode",
+  "settings.alwaysOpenIncognito.help": "When enabled, left-clicking any URL link in chat opens it in your browser's incognito/private window instead of a normal tab.",
   "settings.cache": "Profile cache",
   "settings.cache.expiryDays": "Maximum age",
   "settings.cache.expiryDays.description": "The amount of days that a profile's data will be kept on your computer. If a profile's data hasn't been used since then, it will be cleared to make space.",
diff --git a/electron/Settings.vue b/electron/Settings.vue
index c3980b0d..1c1da5ca 100644
--- a/electron/Settings.vue
+++ b/electron/Settings.vue
@@ -974,6 +974,25 @@
                     l('settings.browserOptionArgumentsHelp')
                   }}</small>
                 </label>
+
+                <div class="mb-3" v-if="!isMac">
+                  <label class="control-label" for="alwaysOpenIncognito">
+                    <div class="form-check">
+                      <input
+                        class="form-check-input"
+                        type="checkbox"
+                        id="alwaysOpenIncognito"
+                        v-model="settings.horizonAlwaysOpenIncognito"
+                      />
+                      <label class="form-check-label" for="alwaysOpenIncognito">
+                        {{ l('settings.alwaysOpenIncognito') }}
+                      </label>
+                    </div>
+                    <small class="form-text text-muted">{{
+                      l('settings.alwaysOpenIncognito.help')
+                    }}</small>
+                  </label>
+                </div>
                 <h5>
                   {{ l('settings.experimental', l('settings.customCss')) }}
                 </h5>
diff --git a/electron/chat.ts b/electron/chat.ts
index 96b6e699..c4a30711 100644
--- a/electron/chat.ts
+++ b/electron/chat.ts
@@ -334,6 +334,16 @@ function openIncognitoLinux(url: string): void {
 
 const wordPosSearch = new WordPosSearch();
 
+EventBus.$on('open-url-incognito', ({ url }: { url: string }) => {
+  if (process.platform === 'win32') {
+    openIncognitoWindows(url);
+  } else if (process.platform === 'linux') {
+    openIncognitoLinux(url);
+  } else {
+    electron.ipcRenderer.send('open-url-externally', url);
+  }
+});
+
 webContents.on('context-menu', (_, props) => {
   const hasText = props.selectionText.trim().length > 0;
   const can = (type: string) =>
diff --git a/electron/common.ts b/electron/common.ts
index 8d95ba40..5b8edc45 100644
--- a/electron/common.ts
+++ b/electron/common.ts
@@ -50,6 +50,7 @@ export class GeneralSettings {
   risingDisableWindowsHighContrast = false;
   browserPath = '';
   browserArgs = '%s';
+  horizonAlwaysOpenIncognito: boolean = false;
   zoomLevel = 0.0;
   horizonCustomCss: string = '';
   horizonCustomCssEnabled: boolean = false;

From 25777ef0e5f8a74b0c6e5622264cbb8b7997cd07 Mon Sep 17 00:00:00 2001
From: freenutsxd <freenutsxd@gmail.com>
Date: Sat, 30 May 2026 14:01:55 -0500
Subject: [PATCH 2/3] always incognito applies to image gallery + profile
 viewer

---
 chat/locales/en_us.json        |  2 +-
 electron/Index.vue             | 11 ++++++-----
 site/character_page/images.vue | 17 ++++++++++++++++-
 3 files changed, 23 insertions(+), 7 deletions(-)

diff --git a/chat/locales/en_us.json b/chat/locales/en_us.json
index 20017437..ccc5ee39 100644
--- a/chat/locales/en_us.json
+++ b/chat/locales/en_us.json
@@ -653,7 +653,7 @@
   "settings.browserOptionSave": "Save",
   "settings.browserOptionTitle": "Browser Path",
   "settings.alwaysOpenIncognito": "Always open links in incognito/private mode",
-  "settings.alwaysOpenIncognito.help": "When enabled, left-clicking any URL link in chat opens it in your browser's incognito/private window instead of a normal tab.",
+  "settings.alwaysOpenIncognito.help": "When enabled, left-clicking any URL link in chat opens it in your browser's incognito/private window instead of a normal tab. Also applies when opening an image from the profile viewer or the profile itself in your browser.",
   "settings.cache": "Profile cache",
   "settings.cache.expiryDays": "Maximum age",
   "settings.cache.expiryDays.description": "The amount of days that a profile's data will be kept on your computer. If a profile's data hasn't been used since then, it will be cleared to make space.",
diff --git a/electron/Index.vue b/electron/Index.vue
index 56a3ecba..396e8207 100644
--- a/electron/Index.vue
+++ b/electron/Index.vue
@@ -873,11 +873,12 @@
         preview.style.display = 'none';
       },
       async openProfileInBrowser(): Promise<void> {
-        electron.ipcRenderer.send(
-          'open-url-externally',
-          `https://www.f-list.net/c/${this.profileName}`
-        );
-        //await remote.shell.openExternal(`https://www.f-list.net/c/${this.profileName}`);
+        const url = `https://www.f-list.net/c/${this.profileName}`;
+        if (core.state.generalSettings?.horizonAlwaysOpenIncognito) {
+          EventBus.$emit('open-url-incognito', { url });
+        } else {
+          electron.ipcRenderer.send('open-url-externally', url);
+        }
 
         // tslint:disable-next-line: no-any no-unsafe-any
         (this.$refs.profileViewer as any).hide();
diff --git a/site/character_page/images.vue b/site/character_page/images.vue
index 27d00b9b..080ba474 100644
--- a/site/character_page/images.vue
+++ b/site/character_page/images.vue
@@ -31,6 +31,7 @@
               :href="imageUrl(image)"
               target="_blank"
               :title="image.description"
+              @click="openImageRespectingIncognito($event, image)"
               @mouseover.prevent="showHoverPreview(image)"
               @mouseenter.prevent="showHoverPreview(image)"
               @mouseleave.prevent="hideHoverPreview(image)"
@@ -48,7 +49,11 @@
           :key="image.id"
           class="character-image-wrapper"
         >
-          <a :href="imageUrl(image)" target="_blank">
+          <a
+            :href="imageUrl(image)"
+            target="_blank"
+            @click="openImageRespectingIncognito($event, image)"
+          >
             <img :src="imageUrl(image)" class="character-image" />
           </a>
           <div class="image-description" v-if="!!image.description">
@@ -160,6 +165,7 @@
                 :href="imageUrl(previewImage)"
                 class="btn btn-outline-secondary"
                 :title="l('action.openBrowser')"
+                @click.stop="openImageRespectingIncognito($event, previewImage)"
               >
                 <i class="fa-solid fa-fw fa-arrow-up-right-from-square"></i>
               </a>
@@ -516,6 +522,15 @@
     }
   };
 
+  const openImageRespectingIncognito = (
+    e: MouseEvent,
+    image: CharacterImage
+  ): void => {
+    if (!core.state.generalSettings?.horizonAlwaysOpenIncognito) return;
+    e.preventDefault();
+    EventBus.$emit('open-url-incognito', { url: imageUrl(image) });
+  };
+
   const zoomOutClicked = (_e: MouseEvent): void => {
     if (zoomLevel.value <= ZOOM_LEVEL_MIN) return;
     zoomLevel.value = Math.max(

From b2372717be6441d72727efc42abc51973768dfb8 Mon Sep 17 00:00:00 2001
From: freenutsxd <freenutsxd@gmail.com>
Date: Tue, 28 Jul 2026 20:03:40 -0500
Subject: [PATCH 3/3] openIncognito refactor, 'always open in incognito' now
 works globally

---
 bbcode/UrlTagView.vue          |  11 +-
 electron/About.vue             |   4 +-
 electron/Index.vue             |  10 +-
 electron/browser_windows.ts    |   2 +-
 electron/chat.ts               | 261 ++-------------------------------
 electron/main.ts               | 259 +++++++++++++++++++++++++++++++-
 site/character_page/images.vue |  17 +--
 7 files changed, 278 insertions(+), 286 deletions(-)

diff --git a/bbcode/UrlTagView.vue b/bbcode/UrlTagView.vue
index 38faeb99..dd49f231 100644
--- a/bbcode/UrlTagView.vue
+++ b/bbcode/UrlTagView.vue
@@ -20,7 +20,6 @@
 
 <script lang="ts">
   import Vue from 'vue';
-  import core from '../chat/core';
   import { EventBus } from '../chat/preview/event-bus';
 
   export default Vue.extend({
@@ -58,14 +57,8 @@
         if (e.altKey) {
           this.toggleStickyness();
           e.preventDefault();
-          return;
-        }
-
-        this.dismiss(true);
-
-        if (core.state.generalSettings?.horizonAlwaysOpenIncognito) {
-          e.preventDefault();
-          EventBus.$emit('open-url-incognito', { url: this.url });
+        } else {
+          this.dismiss();
         }
       }
     }
diff --git a/electron/About.vue b/electron/About.vue
index a9c845af..3bf7deeb 100644
--- a/electron/About.vue
+++ b/electron/About.vue
@@ -244,7 +244,7 @@
 
 <script lang="ts">
   import * as remote from '@electron/remote';
-  import { clipboard, shell } from 'electron';
+  import { clipboard, ipcRenderer, shell } from 'electron';
   import Vue from 'vue';
   import l, { setLanguage } from '../chat/localize';
   import LocalizedText from '../components/localized_text';
@@ -507,7 +507,7 @@
           url = `${base}?template=bug.yml`;
         }
         try {
-          void shell.openExternal(url);
+          ipcRenderer.send('open-url-externally', url);
         } catch (e) {
           console.warn('Failed to open issue page', e);
         }
diff --git a/electron/Index.vue b/electron/Index.vue
index 40e3b826..cecafd17 100644
--- a/electron/Index.vue
+++ b/electron/Index.vue
@@ -874,12 +874,10 @@
         preview.style.display = 'none';
       },
       async openProfileInBrowser(): Promise<void> {
-        const url = `https://www.f-list.net/c/${this.profileName}`;
-        if (core.state.generalSettings?.horizonAlwaysOpenIncognito) {
-          EventBus.$emit('open-url-incognito', { url });
-        } else {
-          electron.ipcRenderer.send('open-url-externally', url);
-        }
+        electron.ipcRenderer.send(
+          'open-url-externally',
+          `https://www.f-list.net/c/${this.profileName}`
+        );
 
         // tslint:disable-next-line: no-any no-unsafe-any
         (this.$refs.profileViewer as any).hide();
diff --git a/electron/browser_windows.ts b/electron/browser_windows.ts
index abc89d78..d6873b26 100644
--- a/electron/browser_windows.ts
+++ b/electron/browser_windows.ts
@@ -1067,7 +1067,7 @@ export function createAboutWindow(
 
   // Handle external links
   about.webContents.setWindowOpenHandler(({ url }) => {
-    electron.shell.openExternal(url);
+    openURLExternally(url);
     return { action: 'deny' };
   });
 
diff --git a/electron/chat.ts b/electron/chat.ts
index c4a30711..713a498c 100644
--- a/electron/chat.ts
+++ b/electron/chat.ts
@@ -47,10 +47,9 @@ const webContents = remote.getCurrentWebContents();
 require('@electron/remote/main').enable(webContents);
 
 import Axios from 'axios';
-import { exec, execFileSync, execSync, spawn } from 'child_process';
+import { exec } from 'child_process';
 import * as path from 'path';
 import * as qs from 'querystring';
-import * as fs from 'fs';
 import { getKey } from '../chat/common';
 import { EventBus } from '../chat/preview/event-bus';
 import { init as initCore } from '../chat/core';
@@ -108,242 +107,8 @@ if (process.env.NODE_ENV === 'production') {
     console.log(`%c${l('consoleWarning.body')}`, 'font-size: 16pt; color:red');
   });
 }
-let browser: string | undefined;
-let executablePath: string | undefined;
-
-function openIncognitoWindows(url: string): void {
-  if (settings.browserPath && settings.browserPath.length > 0) {
-    executablePath = settings.browserPath;
-    log.debug('incognito.open.customPath', executablePath);
-  } else if (executablePath === undefined) {
-    //Default to Edge path
-    executablePath =
-      'C:\\Program Files\\Microsoft\\Edge\\Application\\msedge.exe';
-    if (browser === undefined)
-      try {
-        //tslint:disable-next-line:max-line-length
-        browser = execSync(
-          `FOR /F "skip=2 tokens=3" %A IN ('REG QUERY HKCU\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\http\\UserChoice /v ProgId') DO @(echo %A)`
-        )
-          .toString()
-          .trim();
-      } catch (e) {
-        console.error(e);
-      }
-
-    log.debug('incognito.open.win32.ProgId', browser);
-
-    try {
-      let ftypeAssocmd = execSync(`ftype ${browser}`).toString().trim();
-      log.verbose('incognito.open.win32.ftype', ftypeAssocmd);
-      let match = ftypeAssocmd.match(/"([^"]+\.exe)"/);
-      if (match?.[1]) executablePath = match?.[1];
-    } catch (e) {
-      log.error('incognito.open.win32.ftype.error', e);
-
-      // Fallback: Query registry directly for modern ProgIds (like Vivaldi)
-      try {
-        const regQuery = execSync(
-          `REG QUERY "HKEY_CLASSES_ROOT\\${browser}\\shell\\open\\command" /ve`,
-          { encoding: 'utf8' }
-        ).toString();
-        const regMatch = regQuery.match(/"([^"]+\.exe)"/);
-        if (regMatch?.[1]) {
-          executablePath = regMatch[1];
-          log.debug('incognito.open.win32.registry.fallback', executablePath);
-        }
-      } catch (regError) {
-        log.error('incognito.open.win32.registry.error', regError);
-      }
-    }
-
-    log.debug('incognito.open.exePath', executablePath);
-  }
-  //"Everything is chrome in the future!" -🧽
-  let incognitoArg: string = '-incognito';
-
-  switch (path.basename(executablePath).toLowerCase()) {
-    case 'chrome.exe':
-    case 'chromeapp.exe':
-    case 'brave.exe':
-    case 'vivaldi.exe':
-      incognitoArg = '-incognito';
-      break;
-    case 'msedge.exe':
-      incognitoArg = '-inprivate';
-      break;
-    case 'firefox.exe':
-    case 'floorp.exe':
-    case 'librewolf.exe':
-    case 'waterfox.exe':
-    case 'palemoon.exe':
-    case 'zen.exe':
-      incognitoArg = '-private-window';
-      break;
-    case 'opera.exe':
-      incognitoArg = '-private';
-      break;
-  }
-
-  spawn(executablePath, [incognitoArg, url]);
-}
-
-// --- Linux incognito helpers ------------------------------------------------
-// Resolve an executable to an absolute path using PATH; Otherwise, return the
-// original command.
-function resolveExecutable(cmd: string): string {
-  if (path.isAbsolute(cmd)) return cmd;
-  try {
-    const resolved = execFileSync('which', [cmd], { encoding: 'utf8' })
-      .trim()
-      .split('\n')[0];
-    if (resolved) return resolved;
-  } catch {
-    // Ignore: we'll try spawn with the raw token. Oh god.
-  }
-  return cmd;
-}
-
-const LINUX_INCOGNITO_FLAGS: Record<string, string> = {
-  // Chromium family
-  chrome: '--incognito',
-  'google-chrome': '--incognito',
-  'google-chrome-stable': '--incognito',
-  'google-chrome-beta': '--incognito',
-  'google-chrome-unstable': '--incognito',
-  chromium: '--incognito',
-  'chromium-browser': '--incognito',
-  brave: '--incognito',
-  'brave-browser': '--incognito',
-  vivaldi: '--incognito',
-  'vivaldi-stable': '--incognito',
-  'vivaldi-snapshot': '--incognito',
-
-  // why is edge on linux lol
-  'microsoft-edge': '--inprivate',
-  'microsoft-edge-stable': '--inprivate',
-  'microsoft-edge-beta': '--inprivate',
-  'microsoft-edge-dev': '--inprivate',
-
-  // Firefox family (default behaviour, kept explicit)
-  firefox: '-private-window',
-  'firefox-bin': '-private-window',
-  'firefox-esr': '-private-window',
-  librewolf: '-private-window',
-  waterfox: '-private-window',
-  palemoon: '-private-window',
-  zen: '-private-window',
-  icecat: '-private-window',
-  floorp: '-private-window',
-
-  // Opera
-  opera: '--private',
-  'opera-beta': '--private',
-  'opera-developer': '--private'
-};
-
-function extractExecCommand(desktopFilePath: string): string | undefined {
-  try {
-    const desktopFile = fs.readFileSync(desktopFilePath, { encoding: 'utf8' });
-    const match = desktopFile.match(/^\s*Exec\s*=\s*(.+)$/m);
-    if (!match) return undefined;
-
-    // Remove desktop entry field codes (%u, %U, etc.) per spec.
-    const execValue = match[1].replace(/%[a-zA-Z]/g, '').trim();
-    const tokens = execValue.match(/(?:[^\s"']+|"[^"]*"|'[^']*')+/g) ?? [];
-
-    return tokens.find(
-      token =>
-        token !== 'env' &&
-        !/^[A-Za-z_][A-Za-z0-9_]*=/.test(token) &&
-        token.length > 0
-    );
-  } catch (err) {
-    log.error('incognito.open.linux.exec.read.error', desktopFilePath, err);
-    return undefined;
-  }
-}
-
-function openIncognitoLinux(url: string): void {
-  let desktopId: string | undefined;
-  try {
-    desktopId = execFileSync('xdg-settings', ['get', 'default-web-browser'], {
-      encoding: 'utf8'
-    }).trim();
-  } catch (err) {
-    log.error('incognito.open.linux.desktopId.error', err);
-  }
-
-  // & oh my god.
-  const candidatePaths =
-    desktopId === undefined
-      ? []
-      : [
-          // user locations because these files take priority in freedesktop spec
-          path.join(
-            remote.app.getPath('home'),
-            '.local/share/applications',
-            desktopId
-          ),
-          path.join(
-            remote.app.getPath('home'),
-            '.local/share/flatpak/exports/share/applications',
-            desktopId
-          ),
-          // system locations
-          path.join('/usr/local/share/applications', desktopId),
-          path.join('/usr/share/applications', desktopId),
-
-          // flatpak and snap system locations (???)
-          path.join(
-            '/usr/local/share/flatpak/exports/share/applications',
-            desktopId
-          ),
-          path.join('/var/lib/flatpak/exports/share/applications', desktopId),
-          // ? does snap live here or am i fucking pedantic
-          path.join('/var/lib/snapd/desktop/applications', desktopId)
-        ];
-  // okay we're out of hell.
-  const desktopFilePath = candidatePaths.find(p => fs.existsSync(p));
-  let browserCommand = desktopFilePath
-    ? extractExecCommand(desktopFilePath)
-    : undefined;
-
-  if (!browserCommand) {
-    log.warn(
-      'incognito.open.linux.fallback',
-      desktopId,
-      desktopFilePath ?? 'no desktop file found'
-    );
-
-    // ! Last resort:
-    // ! We are in hell. Hope that god has given us Firefox.
-    browserCommand = 'firefox';
-  }
-
-  const resolvedCommand = resolveExecutable(browserCommand);
-
-  log.debug('incognito.open.linux.browserCommand', resolvedCommand);
-
-  const incognitoArg =
-    LINUX_INCOGNITO_FLAGS[path.basename(browserCommand).toLowerCase()] ??
-    '-private-window'; // again, we pray to god we have firefox. :)
-
-  spawn(resolvedCommand, [incognitoArg, url]);
-}
-
 const wordPosSearch = new WordPosSearch();
 
-EventBus.$on('open-url-incognito', ({ url }: { url: string }) => {
-  if (process.platform === 'win32') {
-    openIncognitoWindows(url);
-  } else if (process.platform === 'linux') {
-    openIncognitoLinux(url);
-  } else {
-    electron.ipcRenderer.send('open-url-externally', url);
-  }
-});
-
 webContents.on('context-menu', (_, props) => {
   const hasText = props.selectionText.trim().length > 0;
   const can = (type: string) =>
@@ -409,7 +174,12 @@ webContents.on('context-menu', (_, props) => {
       id: 'openLink',
       label: l('action.openBrowser'),
       click(): void {
-        electron.ipcRenderer.send('open-url-externally', props.linkURL);
+        // explicit opt-out. always a normal window, even with always-incognito on
+        electron.ipcRenderer.send(
+          'open-url-externally',
+          props.linkURL,
+          'normal'
+        );
       }
     });
     menuTemplate.push({
@@ -422,19 +192,16 @@ webContents.on('context-menu', (_, props) => {
       }
     });
 
-    if (process.platform === 'win32')
-      menuTemplate.push({
-        id: 'incognito',
-        label: l('action.incognito'),
-        click: () => openIncognitoWindows(props.linkURL)
-      });
-    else if (process.platform === 'linux')
+    if (process.platform === 'win32' || process.platform === 'linux')
       menuTemplate.push({
         id: 'incognito',
         label: l('action.incognito'),
-        click: () => {
-          openIncognitoLinux(props.linkURL);
-        }
+        click: () =>
+          electron.ipcRenderer.send(
+            'open-url-externally',
+            props.linkURL,
+            'incognito'
+          )
       });
   } else if (hasText)
     menuTemplate.push({
diff --git a/electron/main.ts b/electron/main.ts
index 86b996b5..8ef8c15d 100644
--- a/electron/main.ts
+++ b/electron/main.ts
@@ -43,7 +43,7 @@ import * as electron from 'electron';
 import log from 'electron-log'; //tslint:disable-line:match-default-export-name
 import * as fs from 'fs';
 import * as path from 'path';
-import { execFile } from 'child_process';
+import { execFile, execFileSync, execSync, spawn } from 'child_process';
 // import * as url from 'url';
 import l from '../chat/localize';
 import { defaultHost, GeneralSettings } from './common';
@@ -671,7 +671,253 @@ function normalizeUrl(linkUrl: string): string {
   return encodeURI(linkUrl).replace(/%25([0-9a-f]{2})/gi, '%$1');
 }
 
-export function openURLExternally(linkUrl: string): void {
+let browser: string | undefined;
+let executablePath: string | undefined;
+
+function openIncognitoWindows(url: string): void {
+  if (settings.browserPath && settings.browserPath.length > 0) {
+    executablePath = settings.browserPath;
+    log.debug('incognito.open.customPath', executablePath);
+  } else if (executablePath === undefined) {
+    //Default to Edge path
+    executablePath =
+      'C:\\Program Files\\Microsoft\\Edge\\Application\\msedge.exe';
+    if (browser === undefined)
+      try {
+        //tslint:disable-next-line:max-line-length
+        browser = execSync(
+          `FOR /F "skip=2 tokens=3" %A IN ('REG QUERY HKCU\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\http\\UserChoice /v ProgId') DO @(echo %A)`
+        )
+          .toString()
+          .trim();
+      } catch (e) {
+        console.error(e);
+      }
+
+    log.debug('incognito.open.win32.ProgId', browser);
+
+    try {
+      let ftypeAssocmd = execSync(`ftype ${browser}`).toString().trim();
+      log.verbose('incognito.open.win32.ftype', ftypeAssocmd);
+      let match = ftypeAssocmd.match(/"([^"]+\.exe)"/);
+      if (match?.[1]) executablePath = match?.[1];
+    } catch (e) {
+      log.error('incognito.open.win32.ftype.error', e);
+
+      // Fallback: Query registry directly for modern ProgIds (like Vivaldi)
+      try {
+        const regQuery = execSync(
+          `REG QUERY "HKEY_CLASSES_ROOT\\${browser}\\shell\\open\\command" /ve`,
+          { encoding: 'utf8' }
+        ).toString();
+        const regMatch = regQuery.match(/"([^"]+\.exe)"/);
+        if (regMatch?.[1]) {
+          executablePath = regMatch[1];
+          log.debug('incognito.open.win32.registry.fallback', executablePath);
+        }
+      } catch (regError) {
+        log.error('incognito.open.win32.registry.error', regError);
+      }
+    }
+
+    log.debug('incognito.open.exePath', executablePath);
+  }
+  //"Everything is chrome in the future!" -🧽
+  let incognitoArg: string = '-incognito';
+
+  switch (path.basename(executablePath).toLowerCase()) {
+    case 'chrome.exe':
+    case 'chromeapp.exe':
+    case 'brave.exe':
+    case 'vivaldi.exe':
+      incognitoArg = '-incognito';
+      break;
+    case 'msedge.exe':
+      incognitoArg = '-inprivate';
+      break;
+    case 'firefox.exe':
+    case 'floorp.exe':
+    case 'librewolf.exe':
+    case 'waterfox.exe':
+    case 'palemoon.exe':
+    case 'zen.exe':
+      incognitoArg = '-private-window';
+      break;
+    case 'opera.exe':
+      incognitoArg = '-private';
+      break;
+  }
+
+  spawn(executablePath, [incognitoArg, url]);
+}
+
+// --- Linux incognito helpers ------------------------------------------------
+// Resolve an executable to an absolute path using PATH; Otherwise, return the
+// original command.
+function resolveExecutable(cmd: string): string {
+  if (path.isAbsolute(cmd)) return cmd;
+  try {
+    const resolved = execFileSync('which', [cmd], { encoding: 'utf8' })
+      .trim()
+      .split('\n')[0];
+    if (resolved) return resolved;
+  } catch {
+    // Ignore: we'll try spawn with the raw token. Oh god.
+  }
+  return cmd;
+}
+
+const LINUX_INCOGNITO_FLAGS: Record<string, string> = {
+  // Chromium family
+  chrome: '--incognito',
+  'google-chrome': '--incognito',
+  'google-chrome-stable': '--incognito',
+  'google-chrome-beta': '--incognito',
+  'google-chrome-unstable': '--incognito',
+  chromium: '--incognito',
+  'chromium-browser': '--incognito',
+  brave: '--incognito',
+  'brave-browser': '--incognito',
+  vivaldi: '--incognito',
+  'vivaldi-stable': '--incognito',
+  'vivaldi-snapshot': '--incognito',
+
+  // why is edge on linux lol
+  'microsoft-edge': '--inprivate',
+  'microsoft-edge-stable': '--inprivate',
+  'microsoft-edge-beta': '--inprivate',
+  'microsoft-edge-dev': '--inprivate',
+
+  // Firefox family (default behaviour, kept explicit)
+  firefox: '-private-window',
+  'firefox-bin': '-private-window',
+  'firefox-esr': '-private-window',
+  librewolf: '-private-window',
+  waterfox: '-private-window',
+  palemoon: '-private-window',
+  zen: '-private-window',
+  icecat: '-private-window',
+  floorp: '-private-window',
+
+  // Opera
+  opera: '--private',
+  'opera-beta': '--private',
+  'opera-developer': '--private'
+};
+
+function extractExecCommand(desktopFilePath: string): string | undefined {
+  try {
+    const desktopFile = fs.readFileSync(desktopFilePath, { encoding: 'utf8' });
+    const match = desktopFile.match(/^\s*Exec\s*=\s*(.+)$/m);
+    if (!match) return undefined;
+
+    // Remove desktop entry field codes (%u, %U, etc.) per spec.
+    const execValue = match[1].replace(/%[a-zA-Z]/g, '').trim();
+    const tokens = execValue.match(/(?:[^\s"']+|"[^"]*"|'[^']*')+/g) ?? [];
+
+    return tokens.find(
+      token =>
+        token !== 'env' &&
+        !/^[A-Za-z_][A-Za-z0-9_]*=/.test(token) &&
+        token.length > 0
+    );
+  } catch (err) {
+    log.error('incognito.open.linux.exec.read.error', desktopFilePath, err);
+    return undefined;
+  }
+}
+
+function openIncognitoLinux(url: string): void {
+  let desktopId: string | undefined;
+  try {
+    desktopId = execFileSync('xdg-settings', ['get', 'default-web-browser'], {
+      encoding: 'utf8'
+    }).trim();
+  } catch (err) {
+    log.error('incognito.open.linux.desktopId.error', err);
+  }
+
+  // & oh my god.
+  const candidatePaths =
+    desktopId === undefined
+      ? []
+      : [
+          // user locations because these files take priority in freedesktop spec
+          path.join(
+            electron.app.getPath('home'),
+            '.local/share/applications',
+            desktopId
+          ),
+          path.join(
+            electron.app.getPath('home'),
+            '.local/share/flatpak/exports/share/applications',
+            desktopId
+          ),
+          // system locations
+          path.join('/usr/local/share/applications', desktopId),
+          path.join('/usr/share/applications', desktopId),
+
+          // flatpak and snap system locations (???)
+          path.join(
+            '/usr/local/share/flatpak/exports/share/applications',
+            desktopId
+          ),
+          path.join('/var/lib/flatpak/exports/share/applications', desktopId),
+          // ? does snap live here or am i fucking pedantic
+          path.join('/var/lib/snapd/desktop/applications', desktopId)
+        ];
+  // okay we're out of hell.
+  const desktopFilePath = candidatePaths.find(p => fs.existsSync(p));
+  let browserCommand = desktopFilePath
+    ? extractExecCommand(desktopFilePath)
+    : undefined;
+
+  if (!browserCommand) {
+    log.warn(
+      'incognito.open.linux.fallback',
+      desktopId,
+      desktopFilePath ?? 'no desktop file found'
+    );
+
+    // ! Last resort:
+    // ! We are in hell. Hope that god has given us Firefox.
+    browserCommand = 'firefox';
+  }
+
+  const resolvedCommand = resolveExecutable(browserCommand);
+
+  log.debug('incognito.open.linux.browserCommand', resolvedCommand);
+
+  const incognitoArg =
+    LINUX_INCOGNITO_FLAGS[path.basename(browserCommand).toLowerCase()] ??
+    '-private-window'; // again, we pray to god we have firefox. :)
+
+  spawn(resolvedCommand, [incognitoArg, url]);
+}
+
+export type ExternalOpenMode = 'auto' | 'normal' | 'incognito';
+
+export function openURLExternally(
+  linkUrl: string,
+  mode: ExternalOpenMode = 'auto'
+): void {
+  const wantsIncognito =
+    mode === 'incognito' ||
+    (mode === 'auto' && settings.horizonAlwaysOpenIncognito);
+
+  // A private-window flag is meaningless for mailto: and friends, and macOS has
+  // no incognito path -- both fall through to the normal open below.
+  if (wantsIncognito && isWebUrl(linkUrl)) {
+    if (process.platform === 'win32') {
+      openIncognitoWindows(linkUrl);
+      return;
+    }
+    if (process.platform === 'linux') {
+      openIncognitoLinux(linkUrl);
+      return;
+    }
+  }
+
   const browserPath = resolveCustomBrowser();
 
   // No custom browser, or not a web link: let the OS handle it.
@@ -1576,9 +1822,12 @@ async function onReady(): Promise<void> {
     }
   );
 
-  electron.ipcMain.on('open-url-externally', (_e, _url: string) => {
-    openURLExternally(_url);
-  });
+  electron.ipcMain.on(
+    'open-url-externally',
+    (_e, _url: string, mode: ExternalOpenMode = 'auto') => {
+      openURLExternally(_url, mode);
+    }
+  );
 
   setMainWindow(
     browserWindows.createMainWindow(
diff --git a/site/character_page/images.vue b/site/character_page/images.vue
index b2f87077..367df0cd 100644
--- a/site/character_page/images.vue
+++ b/site/character_page/images.vue
@@ -31,7 +31,6 @@
               :href="imageUrl(image)"
               target="_blank"
               :title="image.description"
-              @click="openImageRespectingIncognito($event, image)"
               @mouseover.prevent="showHoverPreview(image)"
               @mouseenter.prevent="showHoverPreview(image)"
               @mouseleave.prevent="hideHoverPreview(image)"
@@ -49,11 +48,7 @@
           :key="image.id"
           class="character-image-wrapper"
         >
-          <a
-            :href="imageUrl(image)"
-            target="_blank"
-            @click="openImageRespectingIncognito($event, image)"
-          >
+          <a :href="imageUrl(image)" target="_blank">
             <img :src="imageUrl(image)" class="character-image" />
           </a>
           <div class="image-description" v-if="!!image.description">
@@ -165,7 +160,6 @@
                 :href="imageUrl(previewImage)"
                 class="btn btn-outline-secondary"
                 :title="l('action.openBrowser')"
-                @click.stop="openImageRespectingIncognito($event, previewImage)"
               >
                 <i class="fa-solid fa-fw fa-arrow-up-right-from-square"></i>
               </a>
@@ -532,15 +526,6 @@
     }
   };
 
-  const openImageRespectingIncognito = (
-    e: MouseEvent,
-    image: CharacterImage
-  ): void => {
-    if (!core.state.generalSettings?.horizonAlwaysOpenIncognito) return;
-    e.preventDefault();
-    EventBus.$emit('open-url-incognito', { url: imageUrl(image) });
-  };
-
   const zoomOutClicked = (_e: MouseEvent): void => {
     const min = getZoomMin();
     if (zoomLevel.value <= min) return;