Could a browser or app create history automatically?¶

Yes. Redirects, embedded web views, adverts, preloading, tab restoration, background refresh and account sync can record URLs without conscious navigation.

Find the actual mechanism¶

Examine record type, originating app, foreground and screen state, redirects, typed input, clicks and downloads. Provider and device records may distinguish automatic load from deliberate interaction.

Keep automation evidence-based¶

A recorded URL can show content loaded or became available without proving it was seen or understood. Conversely, automation should not be invoked without a supported trigger.

Private browsing changes local retention but does not remove the wider evidence trail.