Skip to main content

The 5-minute Browser Exposure Check

Online privacy checklist for your team

Could your browser profiles, VPN habits, or signed-in accounts connect sensitive research to you or your organization? Review 13 everyday privacy practices, identify gaps to discuss, and download a PDF with practical next steps.

A free privacy self-assessment for people and teams doing sensitive work online. You answer the questions; this checklist does not scan your device or test your fingerprint.

Start the free privacy checklist

What you will review

Browser privacy, VPN use, and account separation

Browser profiles and tracking

Review personal logins, installed extensions, and whether you have checked for repeatable browser signals. Learn why browser fingerprinting matters even without a stored cookie.

What a VPN does—and what remains

Check the assumptions behind private windows, changing networks, and using the same laptop in different places. A new IP does not necessarily separate browser or account activity.

A workflow your team can repeat

Review research profiles, onboarding, privacy training, and boundaries between matters or investigations. Get recommendations tied to your answers, with links to relevant guides.

You will leave with a count of practices to review, a browser/network/workflow breakdown, and a PDF of your answers and next steps. No email gate or account is required.

Your self-assessment

Start your privacy self-assessment

0 of 13 answered

Choose Yes or No for every question. Each Yes adds one flag to review. Where a question includes “never checked” or “do not know,” uncertainty counts as a flag.

01 / 03

Your browser

Start with the identity your browser brings to the work.

Do you use the same browser profile for sensitive research and everyday browsing?

A profile can carry accounts, cookies, history, and extensions between tasks.

Have you signed into personal accounts during sensitive work without deliberate account or profile separation?

A personal login can connect research to you, even when the network address changes.

Do you do sensitive research with browser extensions installed?

Some extensions expose resources or change a page in detectable ways. Our LinkedIn research examines extension scanning. Read the LinkedIn case →

Does your browser present a repeatable fingerprint across visits—or have you never checked?

If you do not know, answer Yes. This flags a measurement gap; it does not mean we tested your browser.

02 / 03

Your network

A new network address changes one part of the picture.

Do you rely on a VPN or private windows to keep research activity unlinkable?

A VPN changes the IP a site sees. Private windows isolate some browsing data; they do not hide your IP. Neither, by itself, removes a browser fingerprint.

Do you move the same research laptop between home, office, and travel without reviewing its privacy setup?

Moving a device does not reset its accounts, extensions, or device traits.

When you switch networks, do you assume a new IP also changes how websites recognize the machine?

Browser and device traits can remain repeatable across different network exits.

Do you lack visibility into the request, TLS, and network signals your setup exposes?

A browser-side check cannot show every signal that reaches a server.

03 / 03

Your workflow

Make privacy a practice your team can explain and repeat.

Does your team lack a shared, reviewed setup for sensitive research?

A managed baseline helps control variation. Matching laptops alone does not guarantee anonymity.

Is there no written rule for which profile touches which matter, source, or investigation?

A boundary is easier to maintain when people know where it belongs and why it matters.

Do new staff get a laptop and VPN login without a prepared research setup?

Privacy settings, approved tools, and account boundaries need an owner.

Are privacy training and attribution awareness missing from onboarding?

People need to understand what a policy protects, not just which settings to use.

If a source’s safety depended on unlinkable browsing, would you be nervous relying on your current setup?

Uncertainty is a reason to review the workflow before the stakes rise.

Who this helps

A privacy checklist for sensitive research at work

Use the questions on your own, with an IT or security lead, or as voluntary pre-work for an employee privacy workshop. They are especially relevant when separate browsing sessions, accounts, or research tasks should not be casually connected.

This focuses on operational online privacy. It is not a compliance assessment, a complete security checklist, or a guarantee of anonymity.

What the bands mean

A starting point, not a verdict.

0–3 flags

Tight

You report fewer gaps. The next useful step is to confirm your assumptions with evidence from the environment your team actually uses.

4–8 flags

Exposed in places

Your answers point to several places worth reviewing. Start with account boundaries and everyday practices, then measure what remains recognizable.

9–13 flags

Your browser is doing the talking

Your answers flag gaps across the setup or workflow. Start with a practical scoping conversation and agree on the changes your team can maintain.

Use this as privacy workshop pre-work. Participants can keep their results private and discuss patterns voluntarily. The check does not inspect your browser, make network probes, or store answers between visits.

Before you interpret the result

Questions about the online privacy checklist

Is this a browser privacy test or fingerprint scanner?

No. It is a questionnaire about your practices. It does not read your browser fingerprint, check for IP or DNS leaks, or calculate how uniquely identifiable you are. For direct signal inspection, explore the browser fingerprinting tests and demos; each explains its own limits.

Does a VPN make my browsing private?

A VPN usually changes the public IP a destination sees. Signed-in accounts, stored identifiers, and many browser signals can still connect activity. Read what a VPN changes and what can remain before treating a changed IP as a separate identity.

Can I use this for employee privacy training?

Yes. Ask participants to review the questions and choose which themes they want to discuss. They can keep their answers and PDF private. For guided practice in browser choice, VPN hygiene, and account management, explore privacy training for organizations.

What should I do after a privacy self-assessment?

Review the suggested starting points, decide which practices need an owner, and document what to check next. If you need evidence about actual browser exposure, a browser fingerprinting audit can compare agreed environments and controls. A low questionnaire score does not verify that you are anonymous.