WHAT.WE.KNOW_

Passive surveillance demo // every byte your browser leaks on page load

LIVE SESSION

collecting...

⚠ THIS IS A DEMONSTRATION OF EVERYTHING YOUR BROWSER KNOWS ABOUT YOU. ALMOST ALL OF IT IS ACCESSIBLE TO ANY WEBSITE WITHOUT ASKING PERMISSION. SOME POINTS ARE EDUCATED GUESSES, NOT GROUND TRUTH. NOTHING IS SENT ANYWHERE — THIS PAGE RUNS LOCALLY IN YOUR BROWSER. VIEW SOURCE TO VERIFY.

network identity

[01]

ip addressresolving...

country—

region—

city—

postal—

isp—

asn—

approx lat,lng—

precise geolocation

[02]

statusawaiting consent

latitude—

longitude—

accuracy—

altitude—

heading—

speed—

temporal

[03]

local time—

utc—

timezone—

utc offset—

date—

locale—

epoch ms—

on this page for0s

hardware

[04]

platform—

cpu cores—

device memory—

max touch points—

touch device—

device pixel ratio—

gpu vendor—

gpu renderer—

display

[05]

screen—

available—

color depth—

window inner—

window outer—

orientation—

page focus—

page visible—

browser & os

[06]

browser—

version—

engine—

os—

language—

all languages—

vendor—

user agent—

connection

[07]

online—

connection type—

effective type—

downlink (mbps)—

rtt (ms)—

data saver—

wi-fi speed test

[08]

0.0Mbps

initializing

↓ download—

↑ upload—

ping—

jitter—

test servercloudflare

battery

[09]

level—

charging—

time to full—

time to empty—

api support—

user preferences

[10]

color scheme—

reduced motion—

contrast—

forced colors—

hover capable—

pointer type—

do not track—

cookies enabled—

media & permissions

[11]

video inputs—

audio inputs—

audio outputs—

tts voices—

camera perm—

microphone perm—

notification perm—

clipboard perm—

fingerprint vectors

[12]

canvas hashcomputing...

audio context—

webgl hash—

installed fontsscanning...

webdriver—

pdf viewer—

live behavior

[13]

mouse x,y0, 0

scroll position0

scroll %0%

clicks0

keystrokes0

mouse distance0 px

idle for0s

referrer—

webrtc ip leaks

[14]

webrtc support—

local ipv4scanning...

local ipv6—

mdns hostname—

public ip (stun)—

candidates found0

vpn warning—

storage

[15]

quota—

used—

localstorage—

sessionstorage—

indexeddb—

cache api—

persistent—

own cookies—

api support matrix

[16]

codec support

[17]

h.264—

h.265 (hevc)—

vp9—

av1—

vp8—

aac—

mp3—

opus—

flac—

display quality

[18]

color gamut—

dynamic range—

refresh ratemeasuring...

inverted colors—

monochrome—

update freq—

webgl2—

webgpu—

webxr (vr/ar)—

sensors & motion

[19]

motion api—

orientation api—

accel (x,y,z)—

rotation rate—

tilt α β γ—

ambient lightunsupported

proximityunsupported

advanced fingerprints

[20]

math precision hash—

clientrects hash—

timer precisionmeasuring...

tts voices hash—

tts voice count—

plugins—

mime types—

js heap (mb)—

privacy signals

[21]

global privacy ctrl—

do not track—

adblock detectedtesting...

user activated—

storage access—

ua brands—

ua mobile—

ua arch—

ua model—

bluetooth & wireless

[22]

bluetooth api—

bluetooth radiochecking...

webusb api—

webmidi api—

midi inputs—

midi outputs—

gamepadnone connected

nfc support—

page & document

[23]

protocol—

hostname—

port—

path—

history length—

secure context—

cross-origin isolated—

frames in page—

document charset—

last modified—

plugins & mime types

[24]

plugin count—

mime type count—

social login probes

[25]

githubprobing...

spotify—

twitter/x—

facebook—

google—

reddit—

most modern sites block this via CORS/CORP. "blocked" = the protection is working.

local network scan

[26]

pings common router/device IPs via timing. https pages can't scan http targets so this is best-effort.

https page—

statusidle

image exif analyzer

[27]

drop a JPEG from your phone — exif metadata often contains camera model, timestamp, and GPS coordinates the photo was taken at.

⬇ drop image here or click to select

live performance

[28]

0FPS

avg frame time— ms

max frame time— ms

jank frames (>33ms)0

long tasks (>50ms)0

first paint—

first contentful—

js heap (live)—

connected peripherals

[29]

browsers require you to manually authorize each USB/HID/Serial device. without permission only counts of cameras/mics/speakers leak. click the buttons below to try the device pickers — each opens your browser's native picker.

cameras detected—

microphones detected—

speakers detected—

media namesneed camera/mic permission

previously authorized USB0

previously authorized HID0

previously authorized serial0