Privacy Audit: What This Page Can Learn About You
Eleven checks, run entirely inside your browser. Nothing is uploaded, and no third-party service is contacted — you can verify that in your network tab.
Ready
The audit starts automatically when this section comes into view.
Results are not stored. Reload the page and nothing about this run remains.
Check results
Select any row to see what the finding means and what fixes it.
What this audit covers, and what it cannot
The checks above fall into three groups. Address exposure covers your IP address and WebRTC candidates — the identifiers that say where you are connecting from. Fingerprint surfaces cover canvas, GPU, audio, fonts and hardware traits, which together form a profile that survives clearing your cookies. Declared signals cover Do Not Track and Global Privacy Control, the requests your browser makes on your behalf.
Two limits are worth stating plainly. This page cannot test whether your DNS queries leak, because that requires watching which resolver asks an authoritative nameserver for a unique hostname — server infrastructure a page cannot substitute for. It also cannot compare your IPv4 and IPv6 addresses independently, which needs separate single-stack hostnames. When we can measure those honestly, they will appear here as checks rather than as guesses.
A VPN addresses the first group: SecureVPN replaces the address and location every site sees. For the fingerprint group, the fixes listed beside each result are what actually help. You can re-run this audit after any change to see the score move, and compare against your current IP address and location.
Domande frequenti
What does this privacy audit actually test?
It runs eleven checks in your own browser: WebRTC address candidates, browser timezone against the location implied by your IP address, Do Not Track and Global Privacy Control signals, canvas rendering fingerprint, GPU renderer string, audio stack fingerprint, installed font detection, hardware and screen traits, cookie and web storage footprint, and the browser identity you broadcast on every request.
Is my data sent anywhere when I run the audit?
No. Every check runs locally in the page and the results stay in your browser. The audit contacts no third-party service, and we store no audit results on our servers. The only server-supplied values are your connection IP address and the approximate location derived from it, which your browser already reveals to every site you open.
What is a WebRTC leak?
WebRTC is the browser technology behind video calls. To connect peers it gathers candidate network addresses, and a page can read them with JavaScript. If a candidate contains your real public address, sites can see it even when your traffic appears to be proxied. Modern browsers replace local candidates with randomised .local names, which the audit reports as protected.
Why does a timezone mismatch matter?
If your browser reports one timezone while your IP address belongs to another region, that gap is a strong signal that you are using a VPN or proxy. Fraud systems and streaming services check for exactly this inconsistency.
What is browser fingerprinting?
Fingerprinting combines individually harmless traits — your GPU model, installed fonts, screen size, how your device renders a canvas image — into a profile distinctive enough to recognise you again. Because it needs no cookie, clearing cookies does not reset it.
How is the score calculated?
Each scored check carries a weight shown on its row. A protected result keeps its full weight, a partial exposure keeps half, and a readable result keeps none. The score is the percentage of available weight your browser retained, so you can add the rows up yourself.
Will a VPN fix everything this audit finds?
No, and we would rather say so plainly. A VPN replaces the IP address and location that every site sees, and it resolves the address exposure this audit reports. It does not change your canvas, GPU, font or hardware fingerprint — those are properties of your device and browser, and the fixes listed next to each check are what address them.