Scary

Welp, my user agent switcher is successfully purporting to be a different operating system.

I wonder, do phones have 6dof tracking (space + rotation) or 3dof tracking (just rotations)
because if it's 3dof I'm calling bullshit on some of this.

I have 7 3dof fullbody trackers for vrchat (cough cough !VRChat@sh.itjust.works cough cough) and they're so damn inconsistent and need to constantly be ready to be calibrated to line up with what your body is actually doing. Having 1 3dof device can definitely detect walking or swinging, no shot it can tell if you're in bed or on a couch

Well. That's horrifying. Thanks, I guess.

Very well done site!

It shows me the time for Reykjavik after identifying the city and country correctly.

Only 50% correct in my case (similar to Browserleaks), correct the OS, Screenresolution, Country but wrong site, wrong even the ISP

So uh... By using fennec and sometimes a VPN. Am I making myself more unique and fingerprint able?

Should I be using something that sends randomised bogus data instead?

Here I thought I was private but some of these 1% figures makes it look like I'm very unique and easily tracked.

The only thing in there I find surprising is the battery info. I'm not sure what legitimate use a website would have for that one. And perhaps that the gyro isn't behind a permission. There's pages that use it for 360 video for example, but you should have to allow that one.

Your IP address is a fundamental part of communication over the Internet, obviously the servers you speak to are going to need to know where to send their replies. There are ways to mask that ofc; proxies, vpns, etc.

Timezone+Language are needed for localization.

Display information and preferences, to render things correctly/as desired. Desktop web pages look like crap on a mobile display (and what type of mobile? Tablet, or phone?), plus they can't (well, shouldn't) show things in darkMode unless you tell them that's what you want...

Cookies: it does say 0mb stored by others for me, but that's not entirely true. Sites are typically given independent storage so they can't read eachothers cookies, but they can work together to have one site read its own cookies and pass that on to the site you're currently visiting, on request, all embedded in the original page you were viewing. Just because they can't read eachothers storage directly doesn't necessarily mean thay can't get the data. 10gb per site seems like an absurdly high limit for this though. You could store whole movies in that space.

Visibility is one I've known but never really liked. The only 'legitimate' use for that I've seen is pausing media when it leaves your screen (or waiting to start media until its entered view), but half the time that's undesirable anyway. Why should a site know if, when, and how long I've looked at a particular portion of the page?

How many points of identification are needed to positively ID you? Something like 35 IIRC according to Cover Your Tracks/EFF? Might be remembering wrong 🤔

Ty for sharing

My jaw dropped when I read the what angle my device is being held at, how many times I scrolled and tapped, what my position is!!!

How is this even legal?!

I always thought they just took my location, my device name etc. I had no idea it's this deep.