What your browser reveals
See the signals your browser hands over, how consistent its story is, and what your connection looks like at Cloudflare's edge — the same kinds of signal bot-detection systems weigh when deciding whether to challenge a visitor.
Useful if you're debugging why real users are getting challenged or blocked, or if you just want to know how identifiable you are.
What this check sends and keeps Nothing is sent until you press the button. We keep a hash of your signals for 90 days, never your IP address.
- Sent from your browser
- User agent and client hints, platform, touch support, screen size, colour depth and pixel ratio, timezone and language, CPU core count and device memory, and your graphics card's WebGL vendor and renderer. Canvas, audio and installed-font readings are hashed in your browser first, so only those hashes and a font count are sent.
- Read from your connection
- TLS version and cipher, HTTP protocol, country, Cloudflare data centre and network (ASN). These are shown back to you; only country and data centre are kept.
- Kept for 90 days, then deleted
- A SHA-256 hash of the browser signals, the rarity and consistency scores, your country and the data centre. The hash is one-way but not secret: anyone with the same signals could compute the same value, which is what lets us count how often a combination recurs.
- Never kept
- Your IP address, the raw signals, or anything linking the hash to an account. No cookies or browser storage are used.