What PrivacyBench shows
- IP and provider: your public IPv4 and IPv6 addresses, the provider and its network number (ASN), country, city and the time zone of the IP.
- What every request carries: your browser’s identification string (User-Agent), preferred languages and the page you came from.
- WebRTC leak: whether the browser reveals a different public address than websites see, which typically means your real IP behind a VPN, and whether it exposes local network addresses.
- Browser and device: browser and system versions, the exact model where the browser tells it, processor cores, memory, how many cameras and microphones you have, Do Not Track and Global Privacy Control.
- Language and time, screen (resolution, pixel density, colour depth, HDR, dark mode) and graphics (the graphics card name).
- Fingerprints: canvas and audio fingerprints and which of 50 common fonts are installed.
The check starts by itself when you open PrivacyBench and takes a few seconds.
How browser fingerprinting works
Even without cookies, a site can recognise you by combining many small facts: the time zone, languages, screen size, graphics card, fonts and the tiny differences in how your device draws an image or processes sound. One fact is shared by millions of people; together they can single out one browser among millions.
PrivacyBench estimates uniqueness in bits. Each bit halves the number of browsers that look like yours: 10 bits means about 1 in 1,000, 20 bits about 1 in a million. Without a database of visitors, each trait is scored by how common its value is in public browser statistics and fingerprinting research, and related traits are not simply added up, so the total is not overstated.
| Score | Verdict |
|---|---|
| under 16 bits | like everyone else: hard to tell you apart |
| 16–24 bits | noticeable |
| 24 bits or more | practically unique |
If the canvas is drawn twice with different results, your browser is adding noise on purpose (Brave, Firefox and Safari can do this), and PrivacyBench says so.
How to check your VPN for leaks
- Turn the VPN off and open PrivacyBench. Note your real IP, provider and city. Press Save to history.
- Turn the VPN on and press Check again.
- The IP, provider and country should now be the VPN’s. If the WebRTC group shows your real address, the VPN leaks it: switch on WebRTC leak protection in the VPN app or browser extension.
- Look at the time zone. If the IP’s time zone differs from your clock by an hour or more, sites can tell a VPN is in use. That is not a leak, but it is a clue.
- Compare both results in the history.
A DNS leak cannot be checked by a static website: it needs its own DNS server that sees who asks for random addresses. PrivacyBench says so honestly and links to dnsleaktest.com and browserleaks.com for that test.
How to give away less
- Use a browser with fingerprinting protection: Firefox with strict tracking protection, Brave, Safari, or the Tor Browser, which makes all its users look the same.
- Avoid rare settings: an unusual language combination, many custom fonts or a non-standard window size make you stand out more than common defaults.
- Turn on Global Privacy Control where your browser offers it. In some places sites are legally required to respect it.
- Hide your IP with a VPN or Tor when you need to, and check for WebRTC leaks after every VPN update.
- Clear cookies and site data regularly, or use separate browser profiles for work, shopping and personal accounts.
What PrivacyBench does with your data
Nothing is sent to fof.lol. To learn your public address, the page asks public IP services (get.geojs.io, ipwho.is, ipify) and Google’s STUN server, exactly as any website could. The history, text report and JSON contain your IP address and stay on your device. A shared link and the picture leave out the IP addresses, provider, ASN, city, WebRTC addresses and the referring page: only the country, time zone, verdicts and browser details remain.
Frequently asked questions
Can a website see my exact address?
Not from the IP alone. An IP address points to your provider and usually your city, sometimes only the country. Your exact location is available only if you allow location access.
Does incognito mode hide me?
It does not keep cookies and history after you close it, but your IP, browser and fingerprint stay the same, so sites see almost the same picture.
What is a WebRTC leak?
WebRTC lets browsers connect directly for calls and file transfers. To do that it discovers your network addresses, and a badly configured VPN can let it reveal your real public IP to any page.
Is it bad to have a unique fingerprint?
It means sites and advertisers can recognise your browser across visits even after you clear cookies. It does not reveal your name by itself.
Why does PrivacyBench show a different city?
IP location databases often place you where your provider’s equipment is, which may be another city. With a VPN they show the VPN server’s location.