Two readings of your browser: what every site sees silently, and the raw network attack surface you unlock yourself.
Traceability level
…
We work this out silently from your graphics, your sound and your installed fonts — the same tricks trackers use. The technical fingerprints are on the expert tab.
Hardware & OS
Interface & sensors
Behavioural leaks (live)
How to improve it
You cannot be invisible, but you can blend in. A few habits make you much harder to single out:
- Use a mainstream browser with its default settings and keep it up to date — looking like everyone else is what protects you.
- For strong protection, consider a privacy-first browser like the Tor Browser (the strongest) or Brave, which actively fight fingerprinting.
- Keep only the extensions you truly need: every extra one adds a tell-tale trait that makes you easier to recognise.
- Turn on tracking and third-party-cookie protection in your browser’s privacy settings, or add a reputable content blocker.
- A VPN hides your IP, but WebRTC can still leak your real local address — check the expert tab and disable WebRTC if you rely on a VPN.
- Resist exotic tweaks (rare fonts, custom user-agents, unusual settings): paradoxically, they make you MORE unique, not less.
Expert mode is locked
This tab makes real requests that leave your device: your IP to Cloudflare and ipapi.co, STUN for WebRTC, and probes of localhost and login services. Nothing runs until you allow it.
Raw fingerprints (SHA-256)
Network & attack surface
Localhost port scan
- localhost:3000
- localhost:5432
- localhost:8080
- localhost:8123
XS-Leaks (login state)
- GitHub
Live log
How it works
This scanner has two tabs. “What sites see” runs the moment you arrive and makes no external request: it reads the hardware, sensors and behaviour any website can read silently, and estimates how traceable you are. “Raw telemetry & network” stays locked until you click to allow it, because it makes real requests that leave your device — resolving your IP, leaking your local IP through WebRTC, knocking on localhost ports and timing login endpoints. Hover any “i” to see why that piece of data matters for your privacy. Nothing you see is uploaded or stored by this tool.
Questions
Does the passive tab send anything over the network?
No. “What sites see” reads only what is already on your device and makes no external request; its test asserts that nothing leaves the origin.
What exactly does the expert tab send, and when?
Only after you click to unlock it. It sends your IP to Cloudflare and ipapi.co, uses a Google STUN server for WebRTC, and makes requests to localhost and to login pages. It never sends any content you type or paste.
Why does the autofill or clipboard trap never show the full value?
Because it could be a real saved password. We only show that it happened and the length, masked, to prove the leak without exposing your secret — and it stays on this page.
Why is my WebRTC local IP hidden or my port scan empty?
Modern browsers hide the local IP behind an mDNS name, and may ask permission or block requests to localhost. An empty result means your browser is protecting you, which is good.
Is the traceability level exact?
It is an estimate. It adds up how rare each signal is, based on public fingerprinting research; it is a guide to how identifiable you are, not a precise probability.
How do I reduce my fingerprint?
Use a mainstream browser with its default settings, keep it updated, and consider the Tor Browser for strong anti-fingerprinting. Paradoxically, unusual tweaks and some extensions can make you more identifiable, not less.