Fingerprint bench · client-side only
Every measurement a website can take from your browser, run live and shown back to you. This is the same class of signals the tracking and anti-fraud scripts collect — surfaced instead of hidden.
1 Hardware & environment cross-engine · links you across different browsers
…
2 Engine × hardware canvas · audio · math · codecs — links within one engine family
…
3 Browser build which browser & version — not who you are
…
4 Session theme · quota · timing · IP — resets constantly
…
Mostly local. Every fingerprinting probe runs in your browser and its results stay here: nothing a probe measures is ever uploaded. What does leave the page, so you can check it: on load, GlassBox asks three public IP-intelligence APIs (ipwho.is, ipapi.is, geojs.io) and two STUN servers (Google, Cloudflare) about your address, network and VPN status; turn Geo off in the toolbar and that stops, including anything still in flight. The login check loads one image from each service it tests, only when you press its button. Two page-view counters run, neither of which sees anything a probe measures: a first-party one (/_hb/s.js, same origin, no cookies, records the page path and referrer; opt out here) and Cloudflare Web Analytics, which the host injects (cookie-free, page views and load timings). View source to confirm all of it.