When users browse in incognito mode, Chrome bypasses extensions. You should disallow incognito mode for managed Google domains.
- In the Google Admin console, go to Devices > Chrome > Settings > Users & browsers.
- On the left, select the organization that contains the desired users or enrolled browsers. To select all users and browsers, select the top-level organization. Otherwise, select a child.
- In User & Browser Settings, under Security, set Incognito mode to Disallow incognito mode.
- Click Save.