Even if a Facebook profile is set to private, Google may have cached versions of the user’s profile photos or cover images from a time when their account was public. You can search for the person’s name plus “site:facebook.com” in Google Images to see if any cached images appear. This is completely legal, as you are simply viewing public search records.
In simple terms:
Facebook spends billions of dollars annually on cybersecurity, infrastructure, and privacy controls. The platform’s privacy settings are enforced on the server-side, not the client-side. This means that when a user sets their profile to private, Facebook's central servers strictly restrict the data sent to any browser or app requesting that page, unless the requesting account is on the approved "Friends" list. facebook private profile viewer free repack