Skip to main content

Website evidence · pilot dataset

Does youtu.be fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. One browser setup is unmeasured or missing. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 4 source records are included in the JSON. 2 older runs have no recorded timestamp; missing provenance stays unknown. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Earlier measurement shown. Review the scan time and subsequent attempts below.

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-19T06:19:46.273662Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleYouTube

CanvasDraws text and reads canvas output.3 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAIACEBK/d=1/br=1/[redacted-id]/[redacted-id]
canvas.getContext1 calls

Frame: https://accounts.google.com/ServiceLogin

  • Inline caller recorded
canvas.getContext3 calls

Frame: https://www.youtube.com/

  • Inline caller recorded
  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
WebGLQueries the graphics environment.2 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webglrenderingcontext.getExtension1 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
webglrenderingcontext.getParameter1 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

fonts.load2 calls

Frame: https://www.youtube.com/

  • https://www.youtube.com/
DeviceReads browser and display properties.17 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory6 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAIACEBK/d=1/br=1/[redacted-id]/[redacted-id]
navigator.doNotTrack1 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
navigator.hardwareConcurrency2 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAIACEBK/d=1/br=1/[redacted-id]/[redacted-id]
navigator.language1 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
navigator.languages1 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
navigator.maxTouchPoints1 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
navigator.mimeTypes1 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
navigator.platform3 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAIACEBK/d=1/br=1/[redacted-id]/[redacted-id]
navigator.plugins2 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
navigator.userAgent121 calls

Frame: https://www.youtube.com/

  • https://www.youtube.com/s/desktop/5d669aa8/jsbin/[redacted-id]/custom-elements-es5-adapter.jsline 12 · col 127
  • https://www.youtube.com/s/desktop/5d669aa8/jsbin/spf.vflset/spf.jsline 33 · col 33
  • https://www.youtube.com/s/desktop/5d669aa8/jsbin/webcomponents-sd.vflset/webcomponents-sd.jsline 16 · col 602
  • https://www.youtube.com/s/desktop/5d669aa8/jsbin/webcomponents-sd.vflset/webcomponents-sd.jsline 148 · col 573
  • https://www.youtube.com/s/desktop/5d669aa8/jsbin/webcomponents-sd.vflset/webcomponents-sd.jsline 163 · col 833
navigator.webdriver1 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
screen.availHeight3 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAIACEBK/d=1/br=1/[redacted-id]/[redacted-id]
screen.availWidth5 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAIACEBK/d=1/br=1/[redacted-id]/[redacted-id]
screen.colorDepth2 calls

Frame: https://www.youtube.com/

  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAIACEBK/d=1/br=1/[redacted-id]/[redacted-id]
screen.height3 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAIACEBK/d=1/br=1/[redacted-id]/[redacted-id]
screen.width3 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAIACEBK/d=1/br=1/[redacted-id]/[redacted-id]
window.devicePixelRatio9 calls

Frame: https://www.youtube.com/

  • https://www.google.com/js/th/UuzLx1YTO8P6u56myU4pojdeJmdcBWAsOkQVPkq63qc.jsline 2 · col 478
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAIACEBK/d=1/br=1/[redacted-id]/[redacted-id]
  • https://www.youtube.com/s/player/0229cd64/player_es6.vflset/en_US/base.jsline 3498 · col 31
Providers, script signatures, and DNS 1 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Adsgoogleads.g.doubleclick.net, static.doubleclick.net

Static script signatures

  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAIACEBK/d=1/br=1/[redacted-id]/[redacted-id]API patterns only · 4 API patterns
Network and worker observations 133 requests
Captured scripts
12
Instrumented frames
3
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

  • https://www.youtube.com/sw.jsThird-party hosts: www.youtube.com

Third-party hosts

  • accounts.google.com
  • fonts.googleapis.com
  • fonts.gstatic.com
  • googleads.g.doubleclick.net
  • i.ytimg.com
  • static.doubleclick.net
  • www.google.com
  • www.gstatic.com
  • www.youtube.com
  • youtube.com
Other recorded API calls 2
  • document.cookie.read37 calls
  • document.cookie.write13 calls
Source record and integrity
Original source
infrastructure/results/headful/youtu-be-20261019T061946.json
Original file SHA-256
48f5ba2ff80a413928d46d6b4ff6e38c887c50171ecec8bb154f92508779ecbb

Run ID: headful-48f5ba2ff80a. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (1)

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleYouTube

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext3 calls
  • Inline caller recorded
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
WebGLQueries the graphics environment.2 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webglrenderingcontext.getExtension1 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
webglrenderingcontext.getParameter1 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

fonts.load2 calls
  • https://www.youtube.com/
DeviceReads browser and display properties.17 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory6 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAgACEBK/d=1/br=1/[redacted-id]/[redacted-id]
navigator.doNotTrack1 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
navigator.hardwareConcurrency2 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAgACEBK/d=1/br=1/[redacted-id]/[redacted-id]
navigator.language1 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
navigator.languages1 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
navigator.maxTouchPoints1 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
navigator.mimeTypes1 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
navigator.platform3 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAgACEBK/d=1/br=1/[redacted-id]/[redacted-id]
navigator.plugins2 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
navigator.userAgent132 calls
  • https://www.youtube.com/s/desktop/5d669aa8/jsbin/[redacted-id]/custom-elements-es5-adapter.jsline 12 · col 127
  • https://www.youtube.com/s/desktop/5d669aa8/jsbin/spf.vflset/spf.jsline 33 · col 33
  • https://www.youtube.com/s/desktop/5d669aa8/jsbin/webcomponents-sd.vflset/webcomponents-sd.jsline 16 · col 602
  • https://www.youtube.com/s/desktop/5d669aa8/jsbin/webcomponents-sd.vflset/webcomponents-sd.jsline 148 · col 573
  • https://www.youtube.com/s/desktop/5d669aa8/jsbin/webcomponents-sd.vflset/webcomponents-sd.jsline 163 · col 833
navigator.webdriver1 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
screen.availHeight3 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAgACEBK/d=1/br=1/[redacted-id]/[redacted-id]
screen.availWidth5 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAgACEBK/d=1/br=1/[redacted-id]/[redacted-id]
screen.colorDepth2 calls
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAgACEBK/d=1/br=1/[redacted-id]/[redacted-id]
screen.height3 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAgACEBK/d=1/br=1/[redacted-id]/[redacted-id]
screen.width3 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAgACEBK/d=1/br=1/[redacted-id]/[redacted-id]
window.devicePixelRatio9 calls
  • https://www.google.com/js/th/Soe1m5QWz3lag4rTy5QITJOnD-eWm03HjQmX2iCBADY.jsline 2 · col 447
  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAgACEBK/d=1/br=1/[redacted-id]/[redacted-id]
  • https://www.youtube.com/s/player/0229cd64/player_es6.vflset/en_US/base.jsline 3498 · col 31
Providers, script signatures, and DNS 1 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Adsgoogleads.g.doubleclick.net, static.doubleclick.net

Static script signatures

  • https://www.youtube.com/s/_/ytmainappweb/_/js/[redacted-id]/am=AAAAAAgACEBK/d=1/br=1/[redacted-id]/[redacted-id]API patterns only · 4 API patterns
Network and worker observations 133 requests
Captured scripts
19
Instrumented frames
Not recorded
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • accounts.google.com
  • fonts.googleapis.com
  • fonts.gstatic.com
  • googleads.g.doubleclick.net
  • i.ytimg.com
  • static.doubleclick.net
  • www.google.com
  • www.gstatic.com
  • www.youtube.com
  • youtube.com
Other recorded API calls 2
  • document.cookie.read39 calls
  • document.cookie.write15 calls
Source record and integrity
Original source
infrastructure/results/headful/youtu-be.json
Original file SHA-256
2a2dfa7d83ff64373bdf8deeda79f3f3a2b273c15533569ea888f81f953d5079

Run ID: headful-2a2dfa7d83ff. The JSON contains sanitized observations, not the original private scan payload.

Earlier measurement shown. Review the scan time and subsequent attempts below.

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-19T01:16:01.195342Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
infrastructure/results/headless/youtu-be-20261019T011601.json
Original file SHA-256
1ac9524278ee2c050be7338a32a1640ff53d10dec8a65803ff94879b1d42013e

Run ID: research-1ac9524278ee. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (1)

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
infrastructure/results/headless/youtu-be.json
Original file SHA-256
4d5ea63ae3af581d2f3a6994027d542a2daaeb676b48409d887d5093e3dd7338

The research mode is inferred from the archive folder because this legacy record has no mode field.

Run ID: research-4d5ea63ae3af. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →