Privacy Policy

Summary

This site is an educational tool. It demonstrates the browser signals that any website can read. Almost everything you see on the dashboard is computed locally in your browser and is never transmitted anywhere. We do not sell personal data, and we do not run user accounts, newsletters or trackers beyond what is described below.

Data processed in your browser only

The fingerprint dashboard reads values through standard web APIs — user agent, screen metrics, GPU/WebGL strings, canvas and audio hashes, installed font hints, permission states, hardware concurrency, timezone, language and pointer/behaviour metrics. These are rendered on-screen and discarded when you close the tab. They are only sent anywhere if you explicitly press Export JSON or Download report, which saves the file to your own device.

Data processed on our server

• IP address and approximate location. When the network card loads, your public IP is resolved server-side to country, region, city, ASN and ISP through third-party geolocation providers. This is used to render the result and to compute an educational IP fraud score.
• Demo signup flows. The /register and /msflow demos store irreversible hashes (SHA-256) of the email, name and password you type, together with a device fingerprint hash, so the duplicate-account detection lesson can work. Plaintext credentials are never stored, and these demos are not real accounts.
• Operational logs. Standard request logs (IP, timestamp, user agent, path) are generated by our hosting provider for security and abuse prevention.

Do not enter real personal data or real passwords into the demo flows. They exist purely to illustrate anti-fraud logic.

Local storage

A small identity ledger is kept in your browser’s localStorage so the duplicate-signup demo can recognise a returning device. Clearing your browser storage removes it completely.

Advertising and cookies

This site displays advertising served by Google AdSense. Google and its partners may use cookies or device identifiers to serve and measure ads, including personalised ads based on your prior visits to this and other websites.

• Google’s use of advertising cookies is described in the Google Advertising policies.
• You can opt out of personalised advertising at Google Ads Settings or via aboutads.info.
• Third-party vendors may place cookies on your device when ads are shown. We do not control those cookies.

Visitors from the EEA, UK and Switzerland are shown a consent choice for personalised advertising where required by Google’s EU user consent policy.

Third-party services

• Google AdSense — advertising delivery and measurement.
• IP geolocation providers (ipwho.is, freeipapi.com, ipapi.co) — network attribution.
• Our hosting and database provider — page delivery and demo-flow storage.

Your rights

Depending on where you live, you may have the right to access, correct or delete data relating to you, or to object to certain processing. Because we store only irreversible hashes from the demo flows, we may need additional information to locate a record. Send requests to the address on the contact page and we will respond within 30 days.

Children

This site is not directed at children under 13, and we do not knowingly collect data from them.

Changes

We may update this policy as the site evolves. Material changes will be reflected in the “last updated” date above.