TL;DR
Get wellness gear delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
A report on royfish.dev argues that browser and device fingerprinting can help distinguish users even when cookies are cleared or browsing takes place in private mode. The report frames fingerprinting as a renewed privacy concern amid changes to Google’s plans for third-party cookies, but the material does not establish how widely advertisers currently use the technique or quantify its effects.
A report published on royfish.dev warns that websites and advertising services can use a browser’s technical characteristics to distinguish users, even when they clear cookies, use a VPN or switch to private browsing. The account presents browser fingerprinting as a privacy concern alongside the unresolved debate over third-party cookies, though it does not document the scale of current advertising use.
Fingerprinting combines information revealed when a browser connects to a website with measurements gathered when code runs on a device. A connection can expose details such as the browser, operating system, language settings and IP address. The report says websites may also measure characteristics of the device and software environment, including graphics processing, screen resolution, installed fonts and audio processing.
Any one signal may be shared by many people. The report’s central point is that combining several signals can narrow the group of devices that look alike, potentially making a user recognizable within a particular service’s audience. It says a fingerprint does not need to be unique worldwide to help distinguish visitors in a smaller sample. The source does not provide independent testing, user counts or a measured rate of successful identification.
The report also argues that clearing cookies or using a VPN may not change a fingerprint enough to prevent recognition. Those steps can affect some data, such as stored cookies or an IP address, but fingerprinting can draw on other signals. The degree of consistency depends on the browser, device and website code; the report does not establish that every site uses these techniques or that identification is guaranteed.
The privacy stakes arise because fingerprinting may work without a persistent cookie stored in a browser. That complicates familiar approaches to limiting tracking: deleting cookies or opening a private window does not necessarily make a device appear unrelated if other characteristics remain similar. The report says users may encounter a consistent identifier across visits, but offers no test results to establish how often that happens in practice.
The report also raises a broader concern about how browsing information may be used. It describes advertising as one possible use and warns that data associated with accounts could reveal personal information, depending on what a service collects and shares under its privacy policy. Those are risks and scenarios presented by the author, not evidence that a particular company has sold specific account data or that governments have bought it.
For readers, the distinction matters: cookie controls can address one tracking method without addressing every way a site might recognize a browser. At the same time, fingerprinting should not be treated as proof that every website knows a visitor’s identity. A technical profile may distinguish a device without establishing the name of the person using it.
browser fingerprinting protection software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
The report places fingerprinting in the history of efforts to restrict third-party cookies. It says Safari and Firefox began blocking them before Google pledged in 2020 to phase them out in Chrome. Google later developed Privacy Sandbox, a set of proposals intended to support advertising while reducing reliance on third-party cookies.
According to the report, Google eventually decided not to deprecate third-party cookies, and its Privacy Sandbox proposals faced adoption and antitrust concerns. The source does not provide dates, company statements or regulatory findings to substantiate those characterizations. Its account is therefore best read as the author’s summary of the policy debate, rather than a complete record of Google’s decisions or the positions of regulators.
In describing possible defenses, the report distinguishes between adding variation to browser signals and making browsers more alike. It calls the first approach “farbling” and says Brave uses it to make fingerprints less consistent. It says Tor and Mullvad Browser aim to make users’ browser environments more uniform. These are descriptions in the source; the report does not compare their effectiveness or claim that any browser prevents all tracking.
““The fingerprint doesn’t need to be truly, globally unique – it just needs to be unique enough to tell people apart in your sample size.””
— royfish.dev report
As an affiliate, we earn on qualifying purchases.
Fingerprinting’s Reach Remains Unclear
The report does not establish how many websites or advertisers use fingerprinting, which specific companies deploy it, or how often it successfully links activity across sites. It also gives no independent measurements of how unique particular device combinations are, or how much browser protections reduce that uniqueness.
Nor does the material show that a fingerprint identifies a person by name. Recognition of a device or browser is distinct from knowing who is using it. Whether a service can connect a technical profile to an account or other personal data depends on its own systems and practices, which are not documented in the report.
The source makes claims about Google’s cookie policy and Privacy Sandbox without providing primary documents or detailed timelines. Those points should be checked against company announcements and regulatory records before drawing conclusions about the status of particular products or legal disputes.
As an affiliate, we earn on qualifying purchases.
Evidence Needed on Ad Use
The next useful developments would be independent measurements of fingerprinting in active websites and advertising systems, with clear methods and dates. Such research could show which signals are collected, how often identifiers persist after browser or network changes, and how results vary by device and browser.
Readers following Google’s cookie policy should consult current company announcements and relevant regulatory updates, since the report does not give a publication date or a complete account of the latest status. Browser makers may also publish changes to tracking protections; claims about those protections should be compared with testing rather than assumed to prevent every form of fingerprinting.
For now, the report’s message is narrower than a claim that tracking is universal: cookie deletion alone may not address every identification method, while the prevalence and real-world impact of fingerprinting remain unquantified in the supplied material.
As an affiliate, we earn on qualifying purchases.
Key Questions
What is browser fingerprinting?
Browser fingerprinting is the use of information about a browser, device and software environment to distinguish one visitor from others. Signals can include language settings, screen details, fonts and hardware characteristics.
Does clearing cookies stop fingerprinting?
Not necessarily. Clearing cookies removes stored cookie data, but a site may still observe other browser or device signals. The report does not show how reliably those signals identify users across websites.
Does a VPN prevent a browser fingerprint?
A VPN can change the IP address a website sees, but it does not necessarily change other signals, such as screen or software characteristics. The report does not claim that a VPN either prevents or guarantees fingerprint-based recognition.
Can a fingerprint reveal a person’s identity?
A fingerprint can help distinguish a browser or device, but that is not the same as identifying a person by name. Linking a profile to an individual would depend on other information held by a website or service.
Which browsers does the report describe as limiting fingerprinting?
The report describes Brave as adding variation to fingerprint signals and says Tor Browser and Mullvad Browser aim to make browser environments more uniform. It does not provide comparative tests or claim that these approaches block all tracking.
Source: hn
Fall Picks
fall essentials
As an affiliate, we earn on qualifying purchases.
