Correct.
Privatemode correctly distinguish[1][2].
But with Tinfoil it appears to be a fundamental architectural limitation that they cannot.[3]
[1] https://www.privatemode.ai/pricing [2] https://www.privatemode.ai/blog/secure-prompt-caching [3] https://docs.tinfoil.sh/resources/caching