Browser privacy check

Run a browser privacy check when you want the report. It can read fingerprint surfaces, canvas, WebGL, audio, and WebRTC candidates. The scan does not start on page load. The site-seen IP stays off until you turn it on.

No account
No fingerprint tracking
Local-first probes
Scan results are not uploaded

When does the browser privacy check read your browser?

It can read fingerprint surfaces, canvas, WebGL, audio, and WebRTC candidates. The scan does not start on page load. The site-seen IP stays off until you turn it on. Low, moderate, or high is an exposure reading of this scan. It is not a score out of 100 and not a promise that you are anonymous.

RFC 8828: WebRTC IP Address Handling Requirements

Last updated 2026-10-12

Scan browser

Include site-seen public IPOff by default. When enabled, a scan makes one same-origin request so this site can report the IP address on that request.

Nothing is read until you start the scan. This page load does not draw a canvas, open WebRTC, or ask the server for an address.

What it tests

The scan reads APIs this page can already see: user agent, language, time zone, screen, CPU threads, storage capability, GPC, canvas, WebGL, audio, a short font probe, and WebRTC candidates.

The site-seen IP check is off by default. If you enable it, the page makes one same-origin request to /api/network-info. That response contains the address on that HTTP request. It is not stored.

Why it matters

A tracker can recognize a browser again after cookies are cleared, if the same surfaces stay stable.

File metadata is a different layer. Clean the file and still check the browser if both worry you.

How the test works

Each detector times out on its own. Unsupported APIs, timeouts, browser blocks, and disabled checks are reported separately.

WebRTC *.local names are mDNS masks, not LAN addresses. Two canvas draws are compared so a randomized canvas is not labeled stable.

What the result means

Low, moderate, or high is an exposure reading of this scan. It is not a score out of 100 and not a promise that you are anonymous.

Unavailable rows mean the browser did not offer the API, or the probe could not finish.

How to reduce exposure

Use the browser’s own tracking protection, resist fingerprinting where it exists, and check WebRTC again after a VPN connects.

Then keep the first scan and run a second one. The comparison stays in this tab.

Questions

Does this browser privacy check include WebRTC?

Yes, after you press Scan. The check can gather WebRTC candidates along with canvas, WebGL, and audio. The WebRTC leak test page is where host, reflexive, and mDNS names are explained. The site-seen IP stays off until you turn it on. The scan does not start when the page opens.

Does the scan run when the page opens?

No. Canvas, WebRTC, and the address request start from the button.

Will a VPN fix the fingerprint?

A VPN can change the address. It usually does not change canvas, WebGL, fonts, or screen size.

Is the digest unique in the world?

No. It is a local summary of the signals this scan actually read.