Skip to main content

Website evidence · pilot dataset

Does bbc.com fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 4 source records are included in the JSON. 2 older runs have no recorded timestamp; missing provenance stays unknown. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Earlier measurement shown. Review the scan time and subsequent attempts below.

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleBBC Home - Breaking News, World News, US News, Sports, Business, Innovation, Climate, Culture, Travel, Video & Audio

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.12 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory3 calls
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610120101/pubads_impl.js
navigator.language9 calls
  • https://cdn.cxense.com/cx.jsline 6 · col 101004
  • https://cdn.cxense.com/cx.jsline 6 · col 101024
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 270588
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 317551
  • https://scripts.webcontentassessor.com/scripts/[redacted]line 1 · col 44600
navigator.maxTouchPoints4 calls
  • https://cdn.cxense.com/cx.jsline 6 · col 11847
  • https://gn-web-assets.api.bbc.com/ngas/latest/dotcom-ads.jsline 1 · col 50099
  • https://gn-web-assets.api.bbc.com/ngas/latest/dotcom-bootstrap.jsline 1 · col 55182
  • https://gn-web-assets.api.bbc.com/ngas/latest/dotcom-preroll.jsline 1 · col 11942
navigator.platform8 calls
  • https://cdn.cxense.com/cx.jsline 6 · col 11828
  • https://cdn.tinypass.com/api/tinypass.min.jsline 1 · col 459621
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 317585
  • https://static.bbci.co.uk/frameworks/requirejs/0.13.0/sharedmodules/require.jsline 1 · col 598
  • https://static.chartbeat.com/js/chartbeat.jsline 8 · col 69
navigator.plugins4 calls
  • https://static.chartbeat.com/js/chartbeat.jsline 8 · col 144
navigator.userAgent135 calls
  • https://cdn.optimizely.com/public/4621041136/s/bbcx_prod.jsline 2 · col 107689
  • https://cdn.optimizely.com/public/4621041136/s/bbcx_prod.jsline 2 · col 285988
  • https://cdn.tinypass.com/api/tinypass.min.jsline 1 · col 93261
  • https://emp.bbci.co.uk/emp/bump-4/bump-4.jsline 1 · col 11127
  • https://static.files.bbci.co.uk/bbcdotcom/web/[redacted-id]/_next/static/chunks/0a--~b-snp6to.jsline 22 · col 21737
screen.availHeight3 calls
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610120101/pubads_impl.js
screen.availWidth3 calls
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610120101/pubads_impl.js
screen.colorDepth9 calls
  • https://cdn.cxense.com/cx.jsline 6 · col 100944
  • https://cdn.cxense.com/cx.jsline 6 · col 100973
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610120101/pubads_impl.js
  • https://static.chartbeat.com/js/chartbeat.jsline 8 · col 128
screen.height17 calls
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 270409
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 317521
  • https://scripts.webcontentassessor.com/scripts/[redacted]line 1 · col 45403
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610120101/pubads_impl.js
  • https://static.chartbeat.com/js/chartbeat.jsline 8 · col 119
screen.width17 calls
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 270345
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 317502
  • https://scripts.webcontentassessor.com/scripts/[redacted]line 1 · col 45358
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610120101/pubads_impl.js
  • https://static.chartbeat.com/js/chartbeat.jsline 8 · col 111
window.devicePixelRatio6 calls
  • https://cdn.cxense.com/cx.jsline 6 · col 100855
  • https://cdn.cxense.com/cx.jsline 6 · col 100886
  • https://scripts.webcontentassessor.com/scripts/[redacted]line 1 · col 45433
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610120101/pubads_impl.js
Providers, script signatures, and DNS 7 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Chartbeat (analytics)static.chartbeat.com
  • Cxense (Piano DMP)cdn.cxense.com, comcluster.cxense.com, id.cxense.com
  • Google Adscm.g.doubleclick.net, f3111be55b561e6305a2bc92118ffd51.safeframe.googlesyndication.com, pagead2.googlesyndication.com, securepubads.g.doubleclick.net
  • Optimizely (A/B testing)a4621041136.cdn.optimizely.com, cdn.optimizely.com, logx.optimizely.com
  • Permutive (audience platform)api.permutive.app, cdn.permutive.app
  • Piano (paywall/analytics)buy-eu.piano.io, c2-eu.piano.io, cdn.tinypass.com
  • The Media Trust (client-side security monitoring)scripts.webcontentassessor.com

Static script signatures

  • https://cdn.tinypass.com/api/tinypass.min.jsreCAPTCHA · 0 API patterns
Network and worker observations 287 requests
Captured scripts
27
Instrumented frames
Not recorded
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • a4621041136.cdn.optimizely.com
  • api.permutive.app
  • buy-eu.piano.io
  • c2-eu.piano.io
  • cdn.cxense.com
  • cdn.optimizely.com
  • cdn.permutive.app
  • cdn.privacy-mgmt.com
  • cdn.speedcurve.com
  • cdn.tinypass.com
  • cm.g.doubleclick.net
  • comcluster.cxense.com
  • emp.bbci.co.uk
  • ep1.adtrafficquality.google
  • f3111be55b561e6305a2bc92118ffd51.safeframe.googlesyndication.com
  • federated-id.live.api.bbc.co.uk
  • ichef.bbci.co.uk
  • id.cxense.com
  • logx.optimizely.com
  • mybbc-analytics.files.bbci.co.uk
  • pagead2.googlesyndication.com
  • ping.chartbeat.net
  • pub.doubleverify.com
  • rm-script.dotmetrics.net
  • sb.scorecardresearch.com
  • scripts.webcontentassessor.com
  • secure-us.imrworldwide.com
  • securepubads.g.doubleclick.net
  • static.bbci.co.uk
  • static.chartbeat.com
  • static.files.bbci.co.uk
  • uk-script.dotmetrics.net
  • web-cdn.api.bbci.co.uk
  • www.bbc.co.uk
Other recorded API calls 2
  • document.cookie.read1194 calls
  • document.cookie.write89 calls
Source record and integrity
Original source
results/headful/bbc-com.json
Original file SHA-256
01a090e9a93a4eb1f017c8e230f497ad93360bbe6d75153836b6199e4c1a387a

Run ID: headful-01a090e9a93a. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (1)

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-19T05:44:44.117660Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/bbc-com-20261019T054444.json
Original file SHA-256
ad085455a816db515ec445c2e005415a4a422942cd824efa51666dad0a196413

Run ID: headful-ad085455a816. The JSON contains sanitized observations, not the original private scan payload.

Earlier measurement shown. Review the scan time and subsequent attempts below.

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleBBC Home - Breaking News, World News, US News, Sports, Business, Innovation, Climate, Culture, Travel, Video & Audio

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.9 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language7 calls
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 270588
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 317551
  • https://scripts.webcontentassessor.com/scripts/[redacted]line 1 · col 44600
navigator.maxTouchPoints4 calls
  • https://cdn.cxense.com/cx.jsline 6 · col 11847
  • https://gn-web-assets.api.bbc.com/ngas/latest/dotcom-ads.jsline 1 · col 50099
  • https://gn-web-assets.api.bbc.com/ngas/latest/dotcom-bootstrap.jsline 1 · col 55182
  • https://gn-web-assets.api.bbc.com/ngas/latest/dotcom-preroll.jsline 1 · col 11942
navigator.platform8 calls
  • https://cdn.cxense.com/cx.jsline 6 · col 11828
  • https://cdn.tinypass.com/api/tinypass.min.jsline 1 · col 459621
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 317585
  • https://static.bbci.co.uk/frameworks/requirejs/0.13.0/sharedmodules/require.jsline 1 · col 598
  • https://static.chartbeat.com/js/chartbeat.jsline 8 · col 69
navigator.plugins4 calls
  • https://static.chartbeat.com/js/chartbeat.jsline 8 · col 144
navigator.userAgent118 calls
  • https://cdn.optimizely.com/public/4621041136/s/bbcx_prod.jsline 2 · col 107689
  • https://cdn.optimizely.com/public/4621041136/s/bbcx_prod.jsline 2 · col 285988
  • https://cdn.tinypass.com/api/tinypass.min.jsline 1 · col 93261
  • https://emp.bbci.co.uk/emp/bump-4/bump-4.jsline 1 · col 11127
  • https://static.files.bbci.co.uk/bbcdotcom/web/[redacted-id]/_next/static/chunks/0a--~b-snp6to.jsline 22 · col 21737
screen.colorDepth4 calls
  • https://static.chartbeat.com/js/chartbeat.jsline 8 · col 128
screen.height13 calls
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 270409
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 317521
  • https://scripts.webcontentassessor.com/scripts/[redacted]line 1 · col 45403
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610130101/pubads_impl.js
  • https://static.chartbeat.com/js/chartbeat.jsline 8 · col 119
screen.width13 calls
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 270345
  • https://mybbc-analytics.files.bbci.co.uk/echo-client-js/echo-2.6.0-avi.min.jsline 2 · col 317502
  • https://scripts.webcontentassessor.com/scripts/[redacted]line 1 · col 45358
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610130101/pubads_impl.js
  • https://static.chartbeat.com/js/chartbeat.jsline 8 · col 111
window.devicePixelRatio1 calls
  • https://scripts.webcontentassessor.com/scripts/[redacted]line 1 · col 45433
Providers, script signatures, and DNS 7 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Chartbeat (analytics)static.chartbeat.com
  • Cxense (Piano DMP)cdn.cxense.com
  • Google Adspagead2.googlesyndication.com, securepubads.g.doubleclick.net
  • Optimizely (A/B testing)a4621041136.cdn.optimizely.com, cdn.optimizely.com, logx.optimizely.com
  • Permutive (audience platform)cdn.permutive.app
  • Piano (paywall/analytics)c2-eu.piano.io, cdn.tinypass.com
  • The Media Trust (client-side security monitoring)scripts.webcontentassessor.com
Network and worker observations 156 requests
Captured scripts
0
Instrumented frames
Not recorded
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • a4621041136.cdn.optimizely.com
  • c2-eu.piano.io
  • cdn.cxense.com
  • cdn.optimizely.com
  • cdn.permutive.app
  • cdn.privacy-mgmt.com
  • cdn.speedcurve.com
  • cdn.tinypass.com
  • emp.bbci.co.uk
  • federated-id.live.api.bbc.co.uk
  • ichef.bbci.co.uk
  • logx.optimizely.com
  • mybbc-analytics.files.bbci.co.uk
  • pagead2.googlesyndication.com
  • ping.chartbeat.net
  • pub.doubleverify.com
  • rm-script.dotmetrics.net
  • sb.scorecardresearch.com
  • scripts.webcontentassessor.com
  • secure-us.imrworldwide.com
  • securepubads.g.doubleclick.net
  • static.bbci.co.uk
  • static.chartbeat.com
  • static.files.bbci.co.uk
  • uk-script.dotmetrics.net
  • web-cdn.api.bbci.co.uk
  • www.bbc.co.uk
Other recorded API calls 2
  • document.cookie.read971 calls
  • document.cookie.write72 calls
Source record and integrity
Original source
results/headless/bbc-com.json
Original file SHA-256
51cf5127e213f32630b46065790fceedea3300e00461d52ccce0e4b99b13eab6

The research mode is inferred from the archive folder because this legacy record has no mode field.

Run ID: research-51cf5127e213. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (1)

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-19T05:43:35.519503Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/bbc-com-20261019T054335.json
Original file SHA-256
6eccb307e0212d9246d2eee67173c140002fbf7b12a7fb8ce7ad07e26b0d6309

Run ID: research-6eccb307e021. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →