Skip to main content

Website evidence · pilot dataset

Does chatgpt.com fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 6 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T14:19:34.628473Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleChatGPT: Chat, Work, Create & Code with AI

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://chatgpt.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 16 requests
Captured scripts
0
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

    Other recorded API calls 1
    • document.cookie.read2 calls
    Source record and integrity
    Original source
    results/headful/chatgpt-com-20261022T141934.json
    Original file SHA-256
    036ec39233e70b68d9cbfed31a02e376f6d12fc5f467dd516188378e90839f28

    Run ID: headful-036ec39233e7. The JSON contains sanitized observations, not the original private scan payload.

    Other scan attempts (2)

    Visitor setup

    Navigation failed

    Navigation failed

    Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
    Measurement
    Navigation failed
    Page context
    Page not measured
    Scan time
    2026-10-20T05:59:58.823859Z
    Browser / scanner
    156.0.8078.4 / 0.3
    Navigation failed — no usable scan result

    Navigation or page loading failed in this browser setup. The record does not establish why it failed.

    Source record and integrity
    Original source
    results/headful/chatgpt-com-20261020T055958.json
    Original file SHA-256
    2fa215dfe8fd9b1a8a3e2748d8a3d6e7d4e68429669ca22d6732d2e09c5a998a

    Run ID: headful-2fa215dfe8fd. The JSON contains sanitized observations, not the original private scan payload.

    Visitor setup

    Scanner error

    Scanner error

    Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
    Measurement
    Scanner error
    Page context
    Page not measured
    Scan time
    2026-10-22T14:19:33.981544Z
    Browser / scanner
    156.0.8078.4 / 0.4
    Scanner error — no usable scan result

    The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

    Source record and integrity
    Original source
    results/headful/chatgpt-com-20261022T141933.json
    Original file SHA-256
    ed96784baeb0ec2865ca9c3003e65da27ad94083a1e3bde68a4d5393508912e2

    Run ID: headful-ed96784baeb0. The JSON contains sanitized observations, not the original private scan payload.

    Research setup

    Signals observed

    1 of 5 signal families observed

    Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
    Measurement
    Measured
    Page context
    Page document
    Scan time
    2026-10-22T21:23:00.608490Z
    Browser / scanner
    156.0.8078.4 / 0.4

    Captured titleChatGPT: Chat, Work, Create & Code with AI

    CanvasDraws text and reads canvas output.1 API entries

    Observed requires a text-drawing API and a canvas readback API. Guide ↗

    canvas.getContext1 calls

    Frame: https://chatgpt.com/

    • Inline caller recorded
    WebGLQueries the graphics environment.0 API entries

    Observed requires at least three distinct WebGL probing APIs. Guide ↗

    No matching API call was captured.

    AudioRenders or reads audio samples.0 API entries

    Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

    No matching API call was captured.

    FontsMeasures text repeatedly.0 API entries

    Observed requires at least ten text-measurement calls. Guide ↗

    No matching API call was captured.

    DeviceReads browser and display properties.10 API entries

    Observed requires at least three distinct browser, screen, or window properties. Guide ↗

    navigator.hardwareConcurrency1 calls

    Frame: https://chatgpt.com/

    • https://chatgpt.com/unauth-mweb/assets/sentinel-BMukFG1t.jsline 1 · col 9602
    navigator.language1 calls

    Frame: https://chatgpt.com/

    • https://chatgpt.com/unauth-mweb/assets/sentinel-BMukFG1t.jsline 1 · col 9430
    navigator.languages1 calls

    Frame: https://chatgpt.com/

    • https://chatgpt.com/unauth-mweb/assets/sentinel-BMukFG1t.jsline 1 · col 9449
    navigator.maxTouchPoints3 calls

    Frame: https://chatgpt.com/

    • https://chatgpt.com/unauth-mweb/assets/a-CsvGAuGf.jsline 1 · col 331
    navigator.platform7 calls

    Frame: https://chatgpt.com/

    • https://chatgpt.com/unauth-mweb/assets/a-CsvGAuGf.jsline 1 · col 305
    • https://chatgpt.com/unauth-mweb/assets/a-UBuTNoeb.jsline 1 · col 673
    • https://chatgpt.com/unauth-mweb/assets/native-telemetry-CEgFfkBl.jsline 1 · col 928
    • https://chatgpt.com/unauth-mweb/assets/octane-shell-shared-QopyKrnE.jsline 1 · col 77082
    navigator.userAgent15 calls

    Frame: https://chatgpt.com/

    • https://chatgpt.com/unauth-mweb/assets/a-JddWuP4i.jsline 1 · col 3713
    • https://chatgpt.com/unauth-mweb/assets/native-telemetry-CEgFfkBl.jsline 1 · col 837
    • https://chatgpt.com/unauth-mweb/assets/native-telemetry-CEgFfkBl.jsline 1 · col 893
    • https://chatgpt.com/unauth-mweb/assets/octane-home-client-BQrlsQEm.jsline 1 · col 21263
    • https://chatgpt.com/unauth-mweb/assets/octane-shell-shared-QopyKrnE.jsline 1 · col 210368
    navigator.webdriver2 calls

    Frame: https://chatgpt.com/

    • https://chatgpt.com/unauth-mweb/assets/conversation-observer-DnkU0Cuh.jsline 1 · col 2119
    • https://chatgpt.com/unauth-mweb/assets/native-desktop-one-tap-1jwYBPDi.jsline 1 · col 2113
    screen.height2 calls

    Frame: https://chatgpt.com/

    • https://chatgpt.com/unauth-mweb/assets/a-BRQFP-RZ.jsline 1 · col 700
    • https://chatgpt.com/unauth-mweb/assets/sentinel-BMukFG1t.jsline 1 · col 9211
    screen.width2 calls

    Frame: https://chatgpt.com/

    • https://chatgpt.com/unauth-mweb/assets/a-BRQFP-RZ.jsline 1 · col 743
    • https://chatgpt.com/unauth-mweb/assets/sentinel-BMukFG1t.jsline 1 · col 9198
    window.devicePixelRatio1 calls

    Frame: https://chatgpt.com/

    • https://chatgpt.com/unauth-mweb/assets/a-BRQFP-RZ.jsline 1 · col 648
    Providers, script signatures, and DNS 0 provider labels

    Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

    No provider or DNS evidence in this record.

    Network and worker observations 269 requests
    Captured scripts
    254
    Instrumented frames
    1
    Google Ads observed
    No
    Transmission evidence
    Not validated

    Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

    Third-party hosts

      Other recorded API calls 1
      • document.cookie.read54 calls
      Source record and integrity
      Original source
      results/headless/chatgpt-com-20261022T212300.json
      Original file SHA-256
      80b9b49377db10423cde4be0e25736800ada41bddc8b3928e1363162d70ea648

      Run ID: research-80b9b49377db. The JSON contains sanitized observations, not the original private scan payload.

      Other scan attempts (2)

      Research setup

      Not observed

      0 of 5 signal families observed

      Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
      Measurement
      Measured
      Page context
      Page document
      Scan time
      2026-10-20T05:42:02.237406Z
      Browser / scanner
      156.0.8078.4 / 0.3

      Captured titleChatGPT: Chat, Work, Create & Code with AI

      CanvasDraws text and reads canvas output.1 API entries

      Observed requires a text-drawing API and a canvas readback API. Guide ↗

      canvas.getContext1 calls

      Frame: https://chatgpt.com/

      • Inline caller recorded
      WebGLQueries the graphics environment.0 API entries

      Observed requires at least three distinct WebGL probing APIs. Guide ↗

      No matching API call was captured.

      AudioRenders or reads audio samples.0 API entries

      Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

      No matching API call was captured.

      FontsMeasures text repeatedly.0 API entries

      Observed requires at least ten text-measurement calls. Guide ↗

      No matching API call was captured.

      DeviceReads browser and display properties.0 API entries

      Observed requires at least three distinct browser, screen, or window properties. Guide ↗

      No matching API call was captured.

      Providers, script signatures, and DNS 0 provider labels

      Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

      No provider or DNS evidence in this record.

      Network and worker observations 17 requests
      Captured scripts
      0
      Instrumented frames
      1
      Google Ads observed
      No
      Transmission evidence
      Not validated

      Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

      Third-party hosts

        Other recorded API calls 1
        • document.cookie.read2 calls
        Source record and integrity
        Original source
        results/headless/chatgpt-com-20261020T054202.json
        Original file SHA-256
        27b8eb7d9148f83ddf39e52b21b233d91f3cd966196b7f995d48af48e8f642aa

        Run ID: research-27b8eb7d9148. The JSON contains sanitized observations, not the original private scan payload.

        Research setup

        Navigation failed

        Navigation failed

        Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
        Measurement
        Navigation failed
        Page context
        Page not measured
        Scan time
        2026-10-22T17:48:47.369343Z
        Browser / scanner
        156.0.8078.4 / 0.4
        Navigation failed — no usable scan result

        Navigation or page loading failed in this browser setup. The record does not establish why it failed.

        Source record and integrity
        Original source
        results/headless/chatgpt-com-20261022T174847.json
        Original file SHA-256
        7d846255d20bf1a197d9ac9d96dc1420a37bdebf63235ac0e8d3b0dab06ab407

        Run ID: research-7d846255d20b. The JSON contains sanitized observations, not the original private scan payload.

        Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

        Read the sanitized JSON →