This website is made to show how websites are able to track you. This does mean that we have to collect sensitivate data that we could use to track you. In this blog we will explain how we do everything to protect your data.
Analytics: Self-Hosted Umami
We use Umami for website analytics. Umami is completely open-source and we self-host our Umami instance. This makes sure your data isn't shared with anything. We use Umami because we want to understand how our website is used and how we can improve it. We don't use it to collect data to sell or abuse.
IP Address Geolocation
To turn the IP address your browser sends to all websites into a physical location, we use two IP geolocation APIs: iphub.info and ipinfo.io. These API calls are done from our server, which limits the data send to these servicese to only be your IP address.
These API's are commenly used on websites, and therefore higly relevant for this website.
AdBlock Test
Our AdBlock test functionality checks if your browser is blocking advertisements. To do this effectively, the test attempts to load a resource that is commonly blocked by ad-blocking software. This resource is hosted by Google (specifically, a script related to Google Ads).
We are aware that loading any Google-related URL could potentially send some information to Google, such as your IP address and browser details. To ensure this only happens with your explicit consent, we've placed a button before you can initiate the AdBlock test. The test and the associated Google URL are only loaded if you actively click this button.
Browser Fingerprint Hashes
Bscan.info allows you to generate various browser fingerprint hashes (e.g., font, canvas, audio). We do maintain a database of these generated hashes along with their component parts. However, it's important to understand the following:
- Anonymity: The stored fingerprint hashes are not tied to your IP address or any other personally identifiable information. They are collected to help us understand the commonality and uniqueness of different browser fingerprints.
- No Third-Party Sharing: This database of fingerprint hashes is for our internal research and to improve the service (e.g., by providing context on how common a specific hash is). We will not share this raw fingerprint data with third parties.
- Purpose: The primary purpose of collecting this data is to provide users with insights into their own digital footprint and to contribute to the broader understanding of browser fingerprinting techniques. The "comparison" feature, where you can share a link with your fingerprint hashes, is entirely opt-in and designed for users who wish to compare their fingerprint across different browsers or sessions. The data shared via this link is based on the parameters in the URL you choose to share.
WebRTC and Other Leak Tests
Tests like WebRTC, timezone, and incognito mode detection operate locally within your browser or by making requests that are essential for the test's function (e.g., STUN requests for WebRTC, which are inherent to how WebRTC works). We display the information these tests reveal directly to you. For IP-dependent tests like WebRTC, the public IP displayed is the one fetched as described in the "IP Address Geolocation" section.
Our Philosophy and future plans
We believe that tools designed to help you understand your online privacy and security should, themselves, be built with privacy as a foremost concern. We strive to minimize data collection, anonymize where possible, and be transparent about our practices.
We are not perfect! As this website becomes bigger we will get access to more ways of preventing your data from being collected. We are currently looking into options where we don't use the API's (mentioned before) but instead use a locally hosted database of IP addresses and their geolocation. This would mean that we don't have to send your IP address to any third-party service. Unfortunately, this costs money and development time, which is currently not feasible.
Feedback
We value your feedback! If you have questions about our privacy practices or suggestions for improvement, please feel free to reach out to us using this form: Link to feedback Form (the form is anonymous and hosted on an open-source form website).