Vancouver PD site adds 'Quick Escape' button that erases itself from browser history

The Vancouver Police Department’s website includes a ‘Quick Escape’ feature that lets a visitor bail out instantly and, critically, removes the page from the browser’s back-button history so there’s no lingering trace of the visit. It’s the kind of safety affordance normally associated with domestic-violence and abuse-support sites: someone researching how to report a crime may be doing so on a device an abuser can access, and a stray entry in browsing history can put them at risk.

The detail drawing attention is the implementation. Rather than just redirecting away, the button manipulates session history so the escaped page can’t be recovered by pressing back—a small but deliberate use of browser history APIs to protect the user rather than track them. For a government agency, baking this into an official portal is a notable design choice.

The broader point is that threat modeling for a public-facing site sometimes means designing against a household adversary, not just a network one. A police reporting page treating browsing history as sensitive data is a reminder that privacy engineering isn’t only about servers and encryption—sometimes the most consequential attacker is a person with physical access to the same device.