This is what every website sees about you.

Without asking. Without a cookie banner. Without you clicking anything. Every one of the panels below was filled in by your own browser, silently, the moment this page loaded — exactly the way a Meta Pixel or Google tracker would do it.

We are not recording any of this. Every value below is computed in your browser and never sent to our server. No analytics event, no Matomo hit, no logging. Open DevTools → Network and verify.

Your browser fingerprint

Computing a composite hash from the signals below…

Hash:

Studies (Panopticlick, AmIUnique) find that >80% of browsers are unique across the web based on these signals alone. Combined with your IP address and browsing history, you are trivially identifiable without a single cookie.

Your device

Screen resolution
Viewport
Pixel density
Colour depth
CPU cores
Device memory
Touch support
Battery

Your software

Operating system
Browser
Rendering engine
Languages
Installed plugins
User-Agent string

Your location & network

Timezone
UTC offset
Your local time
Locale
Connection type
"Do Not Track" signal

Your graphics & fingerprint

GPU (WebGL renderer)
Canvas fingerprint
Audio fingerprint
Detected fonts (sample)

Your storage & referral

Cookies enabled
localStorage
sessionStorage
IndexedDB
Previous page (referrer)

The cookies a typical site sets on you.

Below is a representative cookie jar captured from a mainstream retail homepage — a mid-sized e-commerce site running the normal stack of analytics, advertising and session tools. The site name is redacted; every cookie name, domain, expiry and value format is real and taken directly from a live page load.

… and this is what session recorders capture.

Hotjar, Microsoft Clarity, FullStory and Mouseflow record exactly this — mouse movements, clicks, scrolls, and often form inputs — then ship the replay to their servers. Move your cursor around the box below to see your last 5 seconds of activity.

Mouse path
Click
Idle pause
Movements: 0 Clicks: 0 Scroll depth: 0% Time on page: 0s

Again, we are not saving any of this. It's drawn to a canvas that exists only in your tab, and it disappears the moment you leave. A real session recorder would be uploading this to a vendor server right now.

Why “anonymous” isn't.

Fingerprints are stickier than cookies

You can delete cookies. You can't change your GPU, your fonts, your CPU count, your screen, or your timezone with a button. The signals above identify your browser even after you clear everything.

One site is every site

The Meta Pixel on a skincare shop is the same Meta Pixel on a news site, a recipe blog, and a symptom checker. Your fingerprint links the visits into a single timeline attached to one persistent ID.

Search = identity

Logged-in Google searches are tied to your Google account. "Anonymous" search interests are fed into the same ad-targeting profile used across ~2 million sites in the Google Display Network.

EU courts agree

The Schrems II ruling, the German Google Fonts case, and multiple DPA findings treat browser fingerprints + IP as personal data under GDPR. Consent banners don't fix this.

Now imagine this running on every site a customer visits.

That's the web most ethical brands quietly participate in. It doesn't have to be. Read the full write-up, or get your own site audited and rebuilt on a genuinely privacy-first stack.