Skip to main content

Website evidence · pilot dataset

Does icloud.com fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 7 source records are included in the JSON. 2 older runs have no recorded timestamp; missing provenance stays unknown. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-22T14:56:35.394882Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleiCloud

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext2 calls

Frame: https://www.icloud.com/

  • Inline caller recorded
  • https://www.icloud.com/line 1 · col 29075
canvas.toDataURL1 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 29095
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language2 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 10314
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 854190
navigator.maxTouchPoints1 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 9888
navigator.userAgent11 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 9759
  • https://www.icloud.com/line 1 · col 25670
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 12280
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 539476
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 1116797
window.devicePixelRatio3 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 1768
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 2188
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 454408
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 22 requests
Captured scripts
1
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • appleid.cdn-apple.com
  • www.apple.com
Other recorded API calls 2
  • document.cookie.read54 calls
  • document.cookie.write2 calls
Source record and integrity
Original source
results/headful/icloud-com-20261022T145635.json
Original file SHA-256
ff8ccab7d4d6b2feb6124452adf10db99a90f96a6033749da1846355e910c64e

Run ID: headful-ff8ccab7d4d6. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (3)

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleiCloud

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext2 calls
  • Inline caller recorded
  • https://www.icloud.com/line 1 · col 29075
canvas.toDataURL1 calls
  • https://www.icloud.com/line 1 · col 29095
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language2 calls
  • https://www.icloud.com/line 1 · col 10314
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 854190
navigator.maxTouchPoints1 calls
  • https://www.icloud.com/line 1 · col 9888
navigator.userAgent11 calls
  • https://www.icloud.com/line 1 · col 9759
  • https://www.icloud.com/line 1 · col 25670
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 12280
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 539476
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 1116797
window.devicePixelRatio5 calls
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 1768
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 2188
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 454408
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 31 requests
Captured scripts
4
Instrumented frames
Not recorded
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • appleid.cdn-apple.com
  • www.apple.com
Other recorded API calls 2
  • document.cookie.read48 calls
  • document.cookie.write2 calls
Source record and integrity
Original source
results/headful/icloud-com.json
Original file SHA-256
6312ec2e68e64258be67df4347360290a1d97f52b9a2faec055bdf7737b0ab45

Run ID: headful-6312ec2e68e6. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-19T06:00:01.295669Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleiCloud

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext2 calls

Frame: https://www.icloud.com/

  • Inline caller recorded
  • https://www.icloud.com/line 1 · col 29075
canvas.toDataURL1 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 29095
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language2 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 10314
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 854190
navigator.maxTouchPoints1 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 9888
navigator.userAgent11 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 9759
  • https://www.icloud.com/line 1 · col 25670
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 12280
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 539476
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 1116797
window.devicePixelRatio3 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 1768
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 2188
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 454408
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 31 requests
Captured scripts
4
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • appleid.cdn-apple.com
  • www.apple.com
Other recorded API calls 2
  • document.cookie.read48 calls
  • document.cookie.write2 calls
Source record and integrity
Original source
results/headful/icloud-com-20261019T060001.json
Original file SHA-256
28fc9e4c550befe5e1dba04ba5cbaf0772818e731e90688e278fafb79f41cc9b

Run ID: headful-28fc9e4c550b. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T14:56:33.651422Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/icloud-com-20261022T145633.json
Original file SHA-256
f29eb71d329c41334f30ea4ff5810d25bdcbcd11588673b250c27fc7b5344152

Run ID: headful-f29eb71d329c. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-22T18:17:57.586915Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleiCloud

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext2 calls

Frame: https://www.icloud.com/

  • Inline caller recorded
  • https://www.icloud.com/line 1 · col 29075
canvas.toDataURL1 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 29095
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language2 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 10314
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 854190
navigator.maxTouchPoints1 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 9888
navigator.userAgent11 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 9759
  • https://www.icloud.com/line 1 · col 25670
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 12280
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 539476
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 1116797
window.devicePixelRatio3 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 1768
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 2188
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 454408
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 30 requests
Captured scripts
4
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • appleid.cdn-apple.com
  • www.apple.com
Other recorded API calls 2
  • document.cookie.read54 calls
  • document.cookie.write2 calls
Source record and integrity
Original source
results/headless/icloud-com-20261022T181757.json
Original file SHA-256
c7dd0b922f451795f1b502aabcf59a45ae7f753c99e5747f3ba783a9e763017e

Run ID: research-c7dd0b922f45. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleiCloud

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext2 calls
  • Inline caller recorded
  • https://www.icloud.com/line 1 · col 29075
canvas.toDataURL1 calls
  • https://www.icloud.com/line 1 · col 29095
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language2 calls
  • https://www.icloud.com/line 1 · col 10314
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 854190
navigator.maxTouchPoints1 calls
  • https://www.icloud.com/line 1 · col 9888
navigator.userAgent11 calls
  • https://www.icloud.com/line 1 · col 9759
  • https://www.icloud.com/line 1 · col 25670
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 12280
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 539476
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 1116797
window.devicePixelRatio5 calls
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 1768
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 2188
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 454408
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 30 requests
Captured scripts
4
Instrumented frames
Not recorded
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • appleid.cdn-apple.com
  • www.apple.com
Other recorded API calls 2
  • document.cookie.read48 calls
  • document.cookie.write2 calls
Source record and integrity
Original source
results/headless/icloud-com.json
Original file SHA-256
d0522fa3f59775c4d249993560c1e1412a89495b7293ea8b74260110dc4adbeb

The research mode is inferred from the archive folder because this legacy record has no mode field.

Run ID: research-d0522fa3f597. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-19T05:48:40.300386Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleiCloud

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext2 calls

Frame: https://www.icloud.com/

  • Inline caller recorded
  • https://www.icloud.com/line 1 · col 29075
canvas.toDataURL1 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 29095
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language2 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 10314
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 854190
navigator.maxTouchPoints1 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 9888
navigator.userAgent11 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/line 1 · col 9759
  • https://www.icloud.com/line 1 · col 25670
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 12280
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 539476
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 1116797
window.devicePixelRatio5 calls

Frame: https://www.icloud.com/

  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 1768
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 12 · col 2188
  • https://www.icloud.com/system/icloud.com/2638Build27/en-us/main.jsline 19 · col 454408
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 30 requests
Captured scripts
4
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • appleid.cdn-apple.com
  • www.apple.com
Other recorded API calls 2
  • document.cookie.read48 calls
  • document.cookie.write2 calls
Source record and integrity
Original source
results/headless/icloud-com-20261019T054840.json
Original file SHA-256
1c5fb4f2befd7e10067584a47f5b9a60a217e5058d0defc7fec31010a63852ef

Run ID: research-1c5fb4f2befd. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →