Looks like it occurs in private windows as well. In the past, twitter set cookies to distinguish between visitors who never had an account, and visitors who have an account but are logged out. Publicly visible posts were displayed to no-account visitors, but blocked from logged-out visitors.