Home
About
Crafts
GitHub
No data is logged — this page is a demo.

|

You just loaded one page. Here's every single thing your browser and network quietly told us — before you clicked anything.

5 data points gathered so far

From your network request alone

Every HTTP request leaks this. You never opted in.

IP address sensitive
—
Sent with every request you make. Used to look up your rough location below.
Geolocation
Skipped
loading
Show the raw request headers (0)
{}

From three lines of JavaScript

Any site can read this the moment the page loads. No prompts, no permissions.

Now watch what happens when you click "allow"

Tap each prompt to feel the jump from "rough" to "exact".

Precise location

Turns your city-level IP guess into GPS-accurate coordinates.

Show the exact JavaScript call
navigator.geolocation.getCurrentPosition(
  (pos) => console.log(pos.coords.latitude, pos.coords.longitude, pos.coords.accuracy),
  (err) => console.error(err)
);

Camera & microphone

Unlocks the exact make and model of every camera and mic attached to your device.

Show the exact JavaScript call
// Before:
await navigator.mediaDevices.enumerateDevices(); // labels are empty strings

// After requesting permission:
await navigator.mediaDevices.getUserMedia({ video: true, audio: true });
await navigator.mediaDevices.enumerateDevices(); // labels now populated

Motion & orientation

Real-time accelerometer and gyroscope. On iOS, Safari requires an explicit tap.

Show the exact JavaScript call
// iOS 13+ requires this gesture-triggered permission call:
await DeviceOrientationEvent.requestPermission();
window.addEventListener('deviceorientation', (e) => {
  console.log(e.alpha, e.beta, e.gamma);
});

Clipboard contents

Read whatever you most recently copied — passwords, addresses, 2FA codes.

Show the exact JavaScript call
const text = await navigator.clipboard.readText();
console.log(text);

The point

Most of this was free. No prompt, no warning, no explicit consent — just the price of opening a tab. The interactive cards above show how much more is one click away. Privacy on the web isn't about hiding; it's about knowing what you're actually spending.

This page ran entirely on your machine, except for the IP geolocation (ip-api.com) used to greet you. Nothing is stored. Nothing is logged. Close the tab and it's gone.