What gets read
A script can ask for canvas pixels, WebGL vendor and renderer when the browser allows it, a short audio graph, font widths, screen size, canvas behavior, and the clock zone.
Run it on the fingerprint test. The digest stays in the tab. It is not uploaded.
Why cookies are the wrong mental model
Clearing cookies drops site storage. It does not reset the GPU, the screen, or the installed font set.
Incognito mostly starts a fresh storage jar. See what private mode does not reset.
What a VPN does not touch
A VPN can change the address the site sees. The drawing and the hardware strings usually stay.
That split is why an IP change and a fingerprint change are different jobs. A VPN is not a fingerprint shield.
Common questions
Is the digest my permanent ID?
No. It is a local summary of this scan. Refreshing the page drops it. We do not store it.
Does a missing API mean I am anonymous?
No. It means that API was not exposed. Other surfaces can still be stable.