Deep dives, hands-on guides, and weekly updates on browser fingerprinting, anti-tracking, Tor, VPNs, and what your browser is actually leaking.
They all promise to hide your IP, but they protect against very different threats. Here is what a VPN, Tor and a proxy each actually do, who you are trusting in each case, and how to pick based on what you are defending against.
Browser fingerprinting builds a near-unique ID from dozens of harmless-looking signals your browser exposes. It survives cleared cookies and incognito. Here is how it works, why it is hard to stop, and the defences that actually move the needle.
The fonts on your computer form a surprisingly unique signature. Office, Adobe, language packs and OS updates all leave traces a website can read in milliseconds. Here is how font enumeration works and how to shut it down.
Every request your browser sends includes a User-Agent string, and increasingly a set of Client Hints, describing your browser, OS and device. Here is what they reveal, how UA reduction and Sec-CH-UA work, and why spoofing usually backfires.
Cookies are only one of a dozen places a tracker can stash an identifier in your browser. This is a complete map of client-side storage and persistence vectors, how each survives a partial wipe, and how to actually clear or partition all of them.
Third-party cookies are being retired, but the ad industry did not give up tracking, it rebuilt it inside the browser. Here is how Topics API, FedCM, CHIPS and Attribution Reporting actually work in 2026, what each leaks, and what a privacy-conscious user should turn off.
Every website you open starts with a DNS lookup that, by default, is sent in plaintext to your ISP. This guide explains DoH, DoT, DNSCrypt and ECH, exactly how DNS leaks happen even on a VPN, how to test for them, and how to configure resolvers without trading one watcher for another.
WebGL fingerprinting reads your GPU model, capabilities, and pixel-level render output to identify your browser across sessions, VPN switches, and private mode. Here is exactly how the attack works in code, the entropy it actually adds, and which browser and extension defences hold up in 2026.
An honest 2026 comparison of the three most-recommended privacy VPNs: NordVPN, ProtonVPN, and Mullvad. Jurisdiction, audit history, RAM-only servers, MultiHop, open-source apps, anonymous signup, cash payment, real-world recommendations, and a side-by-side feature table.
Cookies and JavaScript get the attention, but your first encrypted handshake already identifies you. Learn how the TLS ClientHello produces JA3 and JA4 fingerprints, why CDNs and anti-bot systems rely on them, and what actually reduces your exposure.
WebRTC can leak your real IP even when you are connected to a VPN. This guide shows the exact way to disable or restrict WebRTC in Firefox, Chrome, Brave, Safari, Mullvad Browser, LibreWolf, Tor Browser, and on mobile - with sample leak-attack code and a leak-test table.
Your timezone, language headers and locale settings leak constantly through ordinary APIs, and a mismatch with your IP location is itself a red flag. This article quantifies their entropy, explains why a German VPN exit with en-US and New York time looks suspicious, and covers realistic defences.
Audio fingerprinting uses the Web Audio API to hash a silently rendered waveform — producing a stable browser ID that survives private mode, cleared cookies, and VPN switches. How the attack works, who deploys it, and which browsers defend by default.
Brave, LibreWolf, and Mullvad Browser each take a different approach to privacy. A side-by-side 2026 comparison of engines, fingerprint protection, telemetry, mobile support, and which one fits which threat model.
Your screen dimensions, CPU core count, device memory, GPU model and input capabilities are all readable from JavaScript without a permission prompt, and they barely change. This article explains how these stable hardware signals combine into a durable identifier and what browsers do to blunt them.
Most marketing email and a surprising amount of personal mail watch when you open it, from where, and on what device. Here is exactly how open and click tracking work, what leaks, and how to shut it down without breaking your inbox.
Incognito mode is the most misunderstood privacy feature in your browser. It does one narrow job well and nothing else. Here is precisely what private browsing hides, what it leaves fully exposed, and when it actually helps.
A prioritised, no-nonsense checklist for reducing your browser tracking and fingerprinting exposure in 2026, ordered from highest impact to lowest, including the popular tweaks that do nothing and the trade-off between blending in and locking down.
Cookies are easy to block; fingerprinting is not. Here is how sites identify you from your browser's hardware and settings, which defenses actually help, and the trade-offs between hardened browsers, Tor, and everyday tweaks.
Tor and VPNs solve different problems and are not interchangeable. This guide gives you the actual answer for specific use cases — torrenting, censorship circumvention, ad-tracker avoidance, streaming geo-unblock, whistleblowing — with the trade-offs spelled out.
WebRTC silently exposes your private network IPs to every website you visit, even behind a VPN. Here is what is leaking, why it survives VPN tunnels, and the actual browser-by-browser fix for Firefox, Chrome, Brave, Safari and LibreWolf.
Canvas fingerprinting is how websites re-identify your browser without cookies — surviving private mode, VPN switches, and IP rotation. Here is how it works, why your incognito window is no defence, and how privacyscore.dev tells the difference between a leaky browser and a hardened one.