What You Reveal reads your browser the way tracking scripts do and shows the results:
15 groups of signals that any website can collect without asking.
Privacy mode: Tor, VPN, private browsing, WebRTC leaks, canvas protection, ad blocking, Global Privacy Control
Network: public IPv4/IPv6, approximate location, ISP, latency
Device: CPU cores, memory, battery, storage, paired USB/HID/serial devices
Screen: resolution, color gamut, HDR, accessibility preferences
User-Agent Client Hints and navigator APIs
Locale (Intl) fingerprint and installed fonts
WebGL renderer and digital identity hashes (canvas, audio, emoji, voices)
Media devices, codecs and DRM
Permissions, clipboard access and automation (bot) detection
Frequently asked questions
What is browser fingerprinting?
Browser fingerprinting identifies a browser by combining details it reveals to every website: screen size, installed fonts, graphics card, language, time zone, how it draws canvas images and more. A fingerprint is not stored on your device, so clearing cookies does not reset it, and a private window usually leaves it unchanged.
How does canvas fingerprinting work?
A script draws text and shapes on an invisible canvas and hashes the resulting pixels. Fonts, anti-aliasing, graphics drivers and the operating system all change the pixels slightly, so the hash differs between devices but stays the same on one device.
Can a VPN protect against browser fingerprinting?
A VPN hides your IP address and location, but your fonts, graphics card, screen and browser settings stay visible. Against fingerprinting you need a browser that standardizes or randomizes those values, such as Tor Browser, Mullvad Browser, Brave, or Firefox with strict Enhanced Tracking Protection.
How is the privacy score calculated?
The score starts at 30 and adds points for protections this page can observe: an ad or tracker blocker (+15), canvas fingerprinting protection (+15), WebRTC exposing no extra IP address (+15), Global Privacy Control (+10), a VPN or hosting network (+10), Tor (+10), private browsing (+5) and the Brave browser (+5). A WebRTC IP leak (-15) and browser automation (-10) subtract points. Defaults are never penalized, and the result is capped to 0-100.
Is my data stored or transmitted?
Fingerprint values are computed in your browser and never sent anywhere, and the downloadable report is created locally. To show your public IP address, location, VPN and Tor status, the page asks ipify, ipapi.co (with geojs.io as a fallback), the Tor Project's Onionoo service and a Cloudflare STUN server. Like any server you connect to, they see your IP address.
How can I protect against browser fingerprinting?
Use a browser with fingerprinting protection (Tor Browser, Mullvad Browser, Brave, or Firefox with Enhanced Tracking Protection set to Strict), block tracking scripts with a content blocker such as uBlock Origin, and avoid rare fonts and extensions that make your browser stand out. Global Privacy Control does not stop fingerprinting, but it legally opts you out of data sales in places that recognize it.