Skip to main content

Website evidence · pilot dataset

Does paypal.com fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 6 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T20:56:13.822151Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titlePay, Send and Save Money with PayPal | PayPal US

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.paypal.com/us/home

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 39 requests
Captured scripts
1
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • www.paypalobjects.com
Source record and integrity
Original source
results/headful/paypal-com-20261022T205613.json
Original file SHA-256
1bc7afe25350f53deddd16d5515afcf3b6ffcc6e5dacca74c1d8e62fe34ccd0c

Run ID: headful-1bc7afe25350. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-21T22:49:18.997807Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/paypal-com-20261021T224918.json
Original file SHA-256
ef12ec8f00e9a1679ee821bf50d3b77cc95dd324b39a5d5808cef0fbdf55640d

Run ID: headful-ef12ec8f00e9. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T15:21:57.722773Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/paypal-com-20261022T152157.json
Original file SHA-256
478f4e11883f1e6bba093abb27159a4bb1ea1320978dbd5a6e332369ecc033bd

Run ID: headful-478f4e11883f. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T23:11:29.612553Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titlePay, Send and Save Money with PayPal | PayPal US

CanvasDraws text and reads canvas output.6 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 829 · col 387
canvas.getContext1 calls
  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 829 · col 387
canvas.getContext1 calls

Frame: https://www.paypal.com/us/home

  • Inline caller recorded
canvas.getContext2 calls

Frame: https://www.paypalobjects.com/web/res/482/[redacted-id]/recaptcha/grcenterprise_v3.html

  • Inline caller recorded
  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 346 · col 83
canvas.getContext1 calls

Frame: https://www.recaptcha.net/recaptcha/enterprise/anchor

  • Inline caller recorded
canvas.getContext2 calls

Frame: https://www.recaptcha.net/recaptcha/enterprise/bframe

  • Inline caller recorded
  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 346 · col 83
WebGLQueries the graphics environment.6 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webglrenderingcontext.getExtension1 calls

Frame: https://www.paypalobjects.com/web/res/482/[redacted-id]/recaptcha/grcenterprise_v3.html

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 346 · col 83
webglrenderingcontext.getExtension1 calls

Frame: https://www.recaptcha.net/recaptcha/enterprise/bframe

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 346 · col 83
webglrenderingcontext.getParameter2 calls

Frame: https://www.paypalobjects.com/web/res/482/[redacted-id]/recaptcha/grcenterprise_v3.html

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 346 · col 83
webglrenderingcontext.getParameter2 calls

Frame: https://www.recaptcha.net/recaptcha/enterprise/bframe

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 346 · col 83
webglrenderingcontext.getSupportedExtensions1 calls

Frame: https://www.paypalobjects.com/web/res/482/[redacted-id]/recaptcha/grcenterprise_v3.html

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 346 · col 83
webglrenderingcontext.getSupportedExtensions1 calls

Frame: https://www.recaptcha.net/recaptcha/enterprise/bframe

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 346 · col 83
AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.20 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory1 calls

Frame: https://www.paypalobjects.com/web/res/482/[redacted-id]/recaptcha/grcenterprise_v3.html

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 339 · col 312
navigator.deviceMemory1 calls

Frame: https://www.recaptcha.net/recaptcha/enterprise/bframe

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 339 · col 312
navigator.getBattery1 calls

Frame: https://www.paypalobjects.com/web/res/482/[redacted-id]/recaptcha/grcenterprise_v3.html

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 346 · col 83
navigator.getBattery1 calls

Frame: https://www.recaptcha.net/recaptcha/enterprise/bframe

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 346 · col 83
navigator.hardwareConcurrency1 calls

Frame: https://www.paypalobjects.com/web/res/482/[redacted-id]/recaptcha/grcenterprise_v3.html

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 339 · col 312
navigator.hardwareConcurrency1 calls

Frame: https://www.recaptcha.net/recaptcha/enterprise/bframe

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 339 · col 312
navigator.language1 calls

Frame: https://www.paypal.com/us/home

  • https://www.paypalobjects.com/pa/js/min/pa.jsline 2 · col 48465
navigator.userAgent38 calls

Frame: https://www.paypal.com/us/home

  • https://www.paypalobjects.com/martech/tm/paypal/3pjs/adobe/alloy.min.jsline 3 · col 42269
  • https://www.paypalobjects.com/pa/js/min/pa.jsline 2 · col 22382
  • https://www.paypalobjects.com/ppcmsnodeweb/pp-com-components-pds60/axios-DOGj7BWV-rwkU29nV.jsline 2 · col 324
  • https://www.paypalobjects.com/ppcmsnodeweb/pp-com-components-pds60/datadog-DNPX-sGw.jsline 1 · col 5611
  • https://www.paypalobjects.com/ppcmsnodeweb/pp-com-components-pds60/layout-Jit1g2EZ-WnbuwgJW.jsline 1 · col 38104
navigator.userAgent34 calls

Frame: https://www.paypalobjects.com/web/res/482/[redacted-id]/recaptcha/grcenterprise_v3.html

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 339 · col 312
  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 535 · col 495
navigator.userAgent25 calls

Frame: https://www.recaptcha.net/recaptcha/enterprise/anchor

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 535 · col 495
navigator.userAgent26 calls

Frame: https://www.recaptcha.net/recaptcha/enterprise/bframe

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 339 · col 312
  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 535 · col 495
navigator.webdriver1 calls

Frame: https://www.paypalobjects.com/web/res/482/[redacted-id]/recaptcha/grcenterprise_v3.html

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 339 · col 312
navigator.webdriver1 calls

Frame: https://www.recaptcha.net/recaptcha/enterprise/bframe

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 339 · col 312
screen.availHeight1 calls

Frame: https://www.paypalobjects.com/web/res/482/[redacted-id]/recaptcha/grcenterprise_v3.html

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 1199 · col 469
screen.colorDepth1 calls

Frame: https://www.paypal.com/us/home

  • https://www.paypalobjects.com/pa/js/min/pa.jsline 2 · col 10670
screen.height3 calls

Frame: https://www.paypal.com/us/home

  • https://www.paypalobjects.com/martech/tm/paypal/3pjs/adobe/alloy.min.jsline 3 · col 26000
  • https://www.paypalobjects.com/pa/js/min/pa.jsline 2 · col 10725
  • https://www.paypalobjects.com/pa/js/min/pa.jsline 2 · col 10836
screen.height1 calls

Frame: https://www.paypalobjects.com/web/res/482/[redacted-id]/recaptcha/grcenterprise_v3.html

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 1199 · col 469
screen.width3 calls

Frame: https://www.paypal.com/us/home

  • https://www.paypalobjects.com/martech/tm/paypal/3pjs/adobe/alloy.min.jsline 3 · col 25991
  • https://www.paypalobjects.com/pa/js/min/pa.jsline 2 · col 10710
  • https://www.paypalobjects.com/pa/js/min/pa.jsline 2 · col 10821
screen.width1 calls

Frame: https://www.paypalobjects.com/web/res/482/[redacted-id]/recaptcha/grcenterprise_v3.html

  • https://www.gstatic.com/recaptcha/releases/[redacted-id]/recaptcha__en.jsline 1199 · col 469
window.devicePixelRatio1 calls

Frame: https://www.paypal.com/us/home

  • https://www.paypalobjects.com/pa/js/min/pa.jsline 2 · col 10795
Providers, script signatures, and DNS 1 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 157 requests
Captured scripts
63
Instrumented frames
6
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • browser-intake-us5-datadoghq.com
  • fonts.gstatic.com
  • paypalobjects.com
  • www.googletagmanager.com
  • www.gstatic.com
  • www.paypalobjects.com
  • www.recaptcha.net
Other recorded API calls 3
  • document.cookie.read277 calls
  • document.cookie.read3 calls
  • document.cookie.write12 calls
Source record and integrity
Original source
results/headless/paypal-com-20261022T231129.json
Original file SHA-256
b5d3e52dc709440bab977ff743e50fd4bb43060754a8be9a2df63d2a19282a95

Run ID: research-b5d3e52dc709. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-21T21:08:36.227799Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/paypal-com-20261021T210836.json
Original file SHA-256
0494d87f7446e2c12af3375fee6a2ca8c98e2f818880c7fbb55f04cedfcb6e29

Run ID: research-0494d87f7446. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T18:46:14.293553Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/paypal-com-20261022T184614.json
Original file SHA-256
6deb7f0ca0f42e435f6fd8a88650776d26178fcda99f312d71347f6a7aad73a5

Run ID: research-6deb7f0ca0f4. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →