Skip to main content

Website evidence · pilot dataset

Does chewy.com fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 6 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T14:20:20.333936Z
Browser / scanner
156.0.8078.4 / 0.4
CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://chewy.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 2 requests
Captured scripts
0
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

    Source record and integrity
    Original source
    results/headful/chewy-com-20261022T142020.json
    Original file SHA-256
    17fcf5e68d16f1f8aec34f857f5684b5434b576f3c3fee4c68b34856530862d2

    Run ID: headful-17fcf5e68d16. The JSON contains sanitized observations, not the original private scan payload.

    Other scan attempts (2)

    Visitor setup

    Draw + readback

    5 of 5 signal families observed

    Canvas: ObservedWebGL: ObservedAudio: ObservedFonts: ObservedDevice: Observed
    Measurement
    Measured
    Page context
    Page document
    Scan time
    2026-10-21T22:41:07.693052Z
    Browser / scanner
    156.0.8078.4 / 0.3
    CanvasDraws text and reads canvas output.6 API entries

    Observed requires a text-drawing API and a canvas readback API. Guide ↗

    canvas.getContext1 calls
    • Inline caller recorded
    canvas.getContext17 calls

    Frame: https://www.chewy.com/

    • Inline caller recorded
    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    canvas.toDataURL80 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    canvas2d.fillText72 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    canvas2d.getImageData7 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    canvas2d.measureText10 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    WebGLQueries the graphics environment.4 API entries

    Observed requires at least three distinct WebGL probing APIs. Guide ↗

    webgl2renderingcontext.getExtension4 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    webgl2renderingcontext.getParameter19 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    webglrenderingcontext.getExtension1 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    webglrenderingcontext.getParameter44 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    AudioRenders or reads audio samples.4 API entries

    Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

    audio.createDynamicsCompressor1 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    audio.createOscillator1 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    audiobuffer.getChannelData1 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    offlineaudio.startRendering1 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    FontsMeasures text repeatedly.1 API entries

    Observed requires at least ten text-measurement calls. Guide ↗

    canvas2d.measureText10 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    DeviceReads browser and display properties.19 API entries

    Observed requires at least three distinct browser, screen, or window properties. Guide ↗

    navigator.deviceMemory4 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    navigator.doNotTrack1 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    navigator.getBattery2 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    navigator.hardwareConcurrency10 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    navigator.language5 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    navigator.languages9 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    navigator.maxTouchPoints6 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    navigator.mimeTypes5 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    navigator.platform14 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    navigator.plugins11 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    navigator.userAgent30 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    navigator.webdriver6 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    screen.availHeight2 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    screen.availWidth2 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    screen.colorDepth4 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    screen.height5 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    screen.pixelDepth1 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    screen.width5 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    window.devicePixelRatio9 calls

    Frame: https://www.chewy.com/

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    Scripts with both text drawing and canvas readback 1

    These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

    • https://www.chewy.com/[redacted]/[redacted]/ips.js
    Providers, script signatures, and DNS 0 provider labels

    Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

    No provider or DNS evidence in this record.

    Network and worker observations 8 requests
    Captured scripts
    2
    Instrumented frames
    2
    Google Ads observed
    No
    Transmission evidence
    Not validated

    Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

    Third-party hosts

    • cloudflare.com
    • reporting.cdndex.io
    Other recorded API calls 1
    • webrtc.RTCPeerConnection2 calls
    Source record and integrity
    Original source
    results/headful/chewy-com-20261021T224107.json
    Original file SHA-256
    d44d2527dc2d0a2c75e7fb7d970495865e647b60c4c80c057911695a360d13a3

    Run ID: headful-d44d2527dc2d. The JSON contains sanitized observations, not the original private scan payload.

    Visitor setup

    Scanner error

    Scanner error

    Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
    Measurement
    Scanner error
    Page context
    Page not measured
    Scan time
    2026-10-22T14:20:19.818727Z
    Browser / scanner
    156.0.8078.4 / 0.4
    Scanner error — no usable scan result

    The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

    Source record and integrity
    Original source
    results/headful/chewy-com-20261022T142019.json
    Original file SHA-256
    82052e3e8ca92df18fcb4971f2790b43fa0030ae1cda2549da48157411b727fe

    Run ID: headful-82052e3e8ca9. The JSON contains sanitized observations, not the original private scan payload.

    Research setup

    Signals observed

    1 of 5 signal families observed

    Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
    Measurement
    Measured
    Page context
    Page document
    Scan time
    2026-10-22T21:23:30.144192Z
    Browser / scanner
    156.0.8078.4 / 0.4

    Captured title403 error - No treats beyond this point - Chewy

    CanvasDraws text and reads canvas output.1 API entries

    Observed requires a text-drawing API and a canvas readback API. Guide ↗

    canvas.getContext1 calls

    Frame: https://chewy.com/

    • Inline caller recorded
    WebGLQueries the graphics environment.0 API entries

    Observed requires at least three distinct WebGL probing APIs. Guide ↗

    No matching API call was captured.

    AudioRenders or reads audio samples.0 API entries

    Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

    No matching API call was captured.

    FontsMeasures text repeatedly.0 API entries

    Observed requires at least ten text-measurement calls. Guide ↗

    No matching API call was captured.

    DeviceReads browser and display properties.6 API entries

    Observed requires at least three distinct browser, screen, or window properties. Guide ↗

    navigator.doNotTrack6 calls

    Frame: https://chewy.com/

    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 77 · col 41
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 77 · col 71
    navigator.getBattery1 calls

    Frame: https://chewy.com/

    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 380 · col 62
    navigator.userAgent39 calls

    Frame: https://chewy.com/

    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 20 · col 393
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 21 · col 263
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 21 · col 306
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 35 · col 244
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 57 · col 491
    screen.height10 calls

    Frame: https://chewy.com/

    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 142 · col 449
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 383 · col 223
    screen.width10 calls

    Frame: https://chewy.com/

    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 142 · col 430
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 383 · col 155
    window.devicePixelRatio7 calls

    Frame: https://chewy.com/

    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 383 · col 467
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 821 · col 17
    Providers, script signatures, and DNS 0 provider labels

    Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

    No provider or DNS evidence in this record.

    Network and worker observations 15 requests
    Captured scripts
    3
    Instrumented frames
    1
    Google Ads observed
    No
    Transmission evidence
    Not validated

    Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

    Third-party hosts

    • bf20861wzf.bf.dynatrace.com
    • js-cdn.dynatrace.com
    Other recorded API calls 2
    • document.cookie.read111 calls
    • document.cookie.write26 calls
    Source record and integrity
    Original source
    results/headless/chewy-com-20261022T212330.json
    Original file SHA-256
    22971fc8b5c943c543a65f420403c56ea43319fe4f161000661d44e6cfc95db8

    Run ID: research-22971fc8b5c9. The JSON contains sanitized observations, not the original private scan payload.

    Other scan attempts (2)

    Research setup

    Signals observed

    1 of 5 signal families observed

    Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
    Measurement
    Measured
    Page context
    Page document
    Scan time
    2026-10-21T21:01:16.285660Z
    Browser / scanner
    156.0.8078.4 / 0.3

    Captured title403 error - No treats beyond this point - Chewy

    CanvasDraws text and reads canvas output.1 API entries

    Observed requires a text-drawing API and a canvas readback API. Guide ↗

    canvas.getContext1 calls

    Frame: https://chewy.com/

    • Inline caller recorded
    WebGLQueries the graphics environment.0 API entries

    Observed requires at least three distinct WebGL probing APIs. Guide ↗

    No matching API call was captured.

    AudioRenders or reads audio samples.0 API entries

    Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

    No matching API call was captured.

    FontsMeasures text repeatedly.0 API entries

    Observed requires at least ten text-measurement calls. Guide ↗

    No matching API call was captured.

    DeviceReads browser and display properties.6 API entries

    Observed requires at least three distinct browser, screen, or window properties. Guide ↗

    navigator.doNotTrack6 calls

    Frame: https://chewy.com/

    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 77 · col 41
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 77 · col 71
    navigator.getBattery1 calls

    Frame: https://chewy.com/

    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 380 · col 62
    navigator.userAgent34 calls

    Frame: https://chewy.com/

    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 20 · col 393
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 21 · col 263
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 21 · col 306
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 35 · col 244
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 57 · col 491
    screen.height12 calls

    Frame: https://chewy.com/

    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 142 · col 449
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 383 · col 223
    screen.width12 calls

    Frame: https://chewy.com/

    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 142 · col 430
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 383 · col 155
    window.devicePixelRatio9 calls

    Frame: https://chewy.com/

    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 383 · col 467
    • https://js-cdn.dynatrace.com/jstag/1624d0f62e6/bf20861wzf/7077613abb396c51_complete.jsline 821 · col 17
    Providers, script signatures, and DNS 0 provider labels

    Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

    No provider or DNS evidence in this record.

    Network and worker observations 13 requests
    Captured scripts
    3
    Instrumented frames
    1
    Google Ads observed
    No
    Transmission evidence
    Not validated

    Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

    Third-party hosts

    • bf20861wzf.bf.dynatrace.com
    • js-cdn.dynatrace.com
    Other recorded API calls 2
    • document.cookie.read97 calls
    • document.cookie.write18 calls
    Source record and integrity
    Original source
    results/headless/chewy-com-20261021T210116.json
    Original file SHA-256
    7a0632e23f519285ed066dacb7a681e804118aaa99c58ea5cee4718d41c477dd

    Run ID: research-7a0632e23f51. The JSON contains sanitized observations, not the original private scan payload.

    Research setup

    Navigation failed

    Navigation failed

    Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
    Measurement
    Navigation failed
    Page context
    Page not measured
    Scan time
    2026-10-22T17:49:28.396761Z
    Browser / scanner
    156.0.8078.4 / 0.4
    Navigation failed — no usable scan result

    Navigation or page loading failed in this browser setup. The record does not establish why it failed.

    Source record and integrity
    Original source
    results/headless/chewy-com-20261022T174928.json
    Original file SHA-256
    6c1d7ececc8ac98c9e743188d6ba38c7a03acc5a35c62048d3a403b0b786b63e

    Run ID: research-6c1d7ececc8a. The JSON contains sanitized observations, not the original private scan payload.

    Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

    Read the sanitized JSON →