# SNITCHTEST

> A client-side browser privacy audit that shows every data point the page you're viewing can extract from your browser: IP address, WebRTC leaks, canvas / audio / WebGL fingerprints, installed fonts, TLS signature, timezone, language, and 11 other tests across 18 live measurements.

Full-text variant with all pillars inlined for LLM ingestion: https://snitchtest.com/llms-full.txt

SNITCHTEST is a two-stage privacy benchmark at https://snitchtest.com. Stage 1 is a deliberately loud "click me" button pastiche of a 1998 geocities site; stage 2 is a minimal black terminal that streams back every data point the site can read about the visiting browser, colored by risk level (red = leak, amber = telemetry, green = defended).

All tests run client-side in the visiting browser. Nothing is sent to a server. The site does not log visitor results.

## What SNITCHTEST tests

- Public IP + geolocation inference
- WebRTC local/public IP leak (the one that reveals your real IP through a VPN)
- Canvas fingerprint hash (GPU + driver + OS + browser combined)
- Audio fingerprint hash (AudioContext render)
- WebGL renderer string (exact GPU make/model)
- Installed font enumeration
- Screen + viewport + color depth
- Timezone + language + Accept-Language header
- Hardware concurrency (CPU cores)
- Device memory (RAM tier)
- Battery state (via Battery Status API)
- User-Agent + UA Client Hints
- HTTP/3 + IPv6 support detection
- DNT + GPC signal transmission
- Do Not Track header
- Cookie + localStorage availability
- Plus synthetic data points like combined fingerprint uniqueness

## Key facts

- 18 parallel tests + 11 synthetic metrics per session
- Zero server-side logging; results never leave the user's device
- Frontend: vanilla JS, no framework, no tracking SDKs
- NordVPN impact.com affiliate is the one outbound CTA after results (fully disclosed, rel=sponsored)
- Bubble-sorts results (exposed / info / protected) at render time so the worst leaks surface first

## Important pages

- [SNITCHTEST home](https://snitchtest.com/): the two-stage bait-and-reveal audit. Click the button, see what your browser leaks
- [The Dossier Your Browser Hands Out for Free](https://snitchtest.com/the-dossier): ~2100-word explainer on browser fingerprinting, WebRTC leaks, canvas/audio/TLS hashing, and what VPNs + incognito actually hide
- [How to Actually Stop Browser Fingerprinting](https://snitchtest.com/how-to-stop-fingerprinting): ~2400-word defense guide with per-browser settings (Firefox about:config, Brave Shields, Chrome extensions), WebRTC leak fixes, and browser-choice tradeoffs
- [Browser Privacy Glossary](https://snitchtest.com/glossary): canonical definitions of the 9 terms that determine browser identifiability (browser fingerprint, canvas fingerprint, audio fingerprint, WebRTC leak, TLS JA3/JA4, DNT, sec-ch-ua Client Hints, privacy.resistFingerprinting, WebRTC Network Limiter)
- [SNITCHTEST vs BrowserLeaks](https://snitchtest.com/compare/browserleaks): honest comparison with the most-established browser leak test. Where they overlap, where SNITCHTEST's backend probes add unique signal
- [SNITCHTEST vs EFF Cover Your Tracks](https://snitchtest.com/compare/cover-your-tracks): honest comparison with EFF's fingerprint-uniqueness research tool. Different questions, different tools

## Key definitions

- Browser fingerprint: a unique identifier derived from dozens of technical details the browser voluntarily reports, resistant to cookie deletion and incognito mode
- WebRTC leak: exposure of LAN/public IP via the WebRTC API, which bypasses VPN tunnels because it asks the OS directly for network interfaces
- Canvas fingerprinting: drawing a small image and hashing the pixel output to produce a per-machine ID
- TLS fingerprinting (JA3/JA4): identifying software from the cipher-suite order in the TLS ClientHello — works server-side, can't be blocked by browser extensions
- privacy.resistFingerprinting: Firefox's Tor-derived anti-fingerprinting mode (about:config setting)
- Brave Shields Strict: per-site per-session fingerprint randomization

## Sibling sites (same operator, privacy benchmark network)

- [piholekiller.com](https://piholekiller.com/): 103-test ad-blocker audit covering ads, trackers, fingerprinters, DoH bypass, malware
- [adbloat.com](https://adbloat.com/): ad-tech overhead benchmark — bytes blocked, handshakes prevented, tracker payload weight
- [y2kdash.com](https://y2kdash.com/): continuous-monitoring speed + bufferbloat dashboard
- [What Your Browser Reveals: The 27 Signals](https://snitchtest.com/what-your-browser-reveals-2026): Original reference of the 27 fingerprinting signals a browser leaks and what each reveals; ~89% of browsers are uniquely identifiable (AmIUnique/EFF).