Skip to main content

Website evidence · pilot dataset

Does ca.gov fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 5 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-22T14:16:31.526896Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleCalifornia State Portal | CA.gov

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • Inline caller recorded
canvas.getContext1 calls

Frame: https://www.ca.gov/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language2 calls

Frame: https://www.ca.gov/

  • https://www.googletagmanager.com/gtag/js
navigator.userAgent66 calls

Frame: https://www.ca.gov/

  • https://www.googletagmanager.com/gtag/js
screen.height2 calls

Frame: https://www.ca.gov/

  • https://www.googletagmanager.com/gtag/js
screen.width2 calls

Frame: https://www.ca.gov/

  • https://www.googletagmanager.com/gtag/js
Providers, script signatures, and DNS 2 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Analyticswww.google-analytics.com
  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 23 requests
Captured scripts
5
Instrumented frames
2
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • fonts.gstatic.com
  • www.google-analytics.com
  • www.googletagmanager.com
Other recorded API calls 2
  • document.cookie.read21 calls
  • document.cookie.write6 calls
Source record and integrity
Original source
results/headful/ca-gov-20261022T141631.json
Original file SHA-256
06ea1b71f4b68870f9541a2636af056f4648d0a1c1c0b0559dd3093a74a5c7dd

Run ID: headful-06ea1b71f4b6. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-21T22:56:13.813857Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleCalifornia State Portal | CA.gov

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • Inline caller recorded
canvas.getContext1 calls

Frame: https://www.ca.gov/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language2 calls

Frame: https://www.ca.gov/

  • https://www.googletagmanager.com/gtag/js
navigator.userAgent66 calls

Frame: https://www.ca.gov/

  • https://www.googletagmanager.com/gtag/js
screen.height2 calls

Frame: https://www.ca.gov/

  • https://www.googletagmanager.com/gtag/js
screen.width2 calls

Frame: https://www.ca.gov/

  • https://www.googletagmanager.com/gtag/js
Providers, script signatures, and DNS 2 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Analyticswww.google-analytics.com
  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 23 requests
Captured scripts
5
Instrumented frames
2
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • fonts.gstatic.com
  • www.google-analytics.com
  • www.googletagmanager.com
Other recorded API calls 2
  • document.cookie.read21 calls
  • document.cookie.write6 calls
Source record and integrity
Original source
results/headful/ca-gov-20261021T225613.json
Original file SHA-256
56b5fbf03ce9ea11c69325a6372a1810be6c4ea779fe632cf2519bc1360d3d7b

Run ID: headful-56b5fbf03ce9. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T14:16:30.655219Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/ca-gov-20261022T141630.json
Original file SHA-256
bc0a04b12e4a17a62b6f6d67ecce459683cdfe9511d8eb4ab323a5fcd1cb84d8

Run ID: headful-bc0a04b12e4a. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-22T17:46:21.659424Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleCalifornia State Portal | CA.gov

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • Inline caller recorded
canvas.getContext1 calls

Frame: https://www.ca.gov/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language2 calls

Frame: https://www.ca.gov/

  • https://www.googletagmanager.com/gtag/js
navigator.userAgent64 calls

Frame: https://www.ca.gov/

  • https://www.googletagmanager.com/gtag/js
screen.height2 calls

Frame: https://www.ca.gov/

  • https://www.googletagmanager.com/gtag/js
screen.width2 calls

Frame: https://www.ca.gov/

  • https://www.googletagmanager.com/gtag/js
Providers, script signatures, and DNS 2 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Analyticswww.google-analytics.com
  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 23 requests
Captured scripts
5
Instrumented frames
2
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • fonts.gstatic.com
  • www.google-analytics.com
  • www.googletagmanager.com
Other recorded API calls 2
  • document.cookie.read21 calls
  • document.cookie.write6 calls
Source record and integrity
Original source
results/headless/ca-gov-20261022T174621.json
Original file SHA-256
fd916d62be28417c215669dd6c82905fbdd2575dcc77c8e6b16427a8f19347d6

Run ID: research-fd916d62be28. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (1)

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-21T21:14:19.884334Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/ca-gov-20261021T211419.json
Original file SHA-256
7ebc0b83956cbe8068d9f3da77e430cf0daae767898f98da9d3d08a347565bb7

Run ID: research-7ebc0b83956c. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →