Learning objectives
After reading this article you will be able to:
- Distinguish request data from browser measurements
- Recognize information controlled by browser permissions
- Check the current browser without confusing it with another device
Browser and operating system
Requests and browser APIs can describe the browser family, version and platform.
The User-Agent header carries a browser description. Some browsers also provide User-Agent Client Hints. These interfaces may report reduced, generalized or differently formatted information, so a short operating-system version can be an intentional privacy measure.
A website reads what the browser reports. It does not receive an unrestricted inventory of your operating system or a universal hardware serial number.
Screen and device capabilities
A page can inspect layout dimensions and selected device capabilities.
| Signal | Useful interpretation |
|---|---|
| Screen and viewport size | Display information and the space available to the page |
| Device pixel ratio | Relationship between CSS pixels and display pixels |
| CPU concurrency and device memory | Reported resource hints, sometimes rounded or limited |
| Touch support | Capabilities exposed by the browser, not a definitive device category |
Canvas, WebGL and rendering
Drawing and rendering tests can produce outputs that vary between browser environments.
A Canvas test draws a chosen sample and reads the result. WebGL can expose graphics capabilities and, where available, renderer information. Browser versions, fonts, graphics software and privacy protections can all affect these observations. Compare the same test before interpreting a changed hash.
Fonts and text measurements
Websites can measure how text renders and test candidate fonts.
A script may compare text dimensions using a requested font and a fallback font. That reveals something about the tested font environment. Broader local-font access is a separate capability with browser support and permission requirements.
Language, timezone and location
Language and timezone settings are different from physical location.
Your browser can expose language preferences and a timezone. A site can estimate a region from the connection IP; precise geolocation generally uses a separate permission-controlled API. A traveler or multilingual user can legitimately have settings that differ from the IP region.
Public IP and other network observations
The web server sees the source address of the connection reaching it.
With a proxy or VPN, this may be the service exit address. WebRTC can reveal additional connection candidates depending on browser and network settings. DNS tests examine resolver behavior. Check these paths separately when diagnosing a connection.
Permissions and browser features
Feature availability and granted permissions change what a page can observe.
Access to camera, microphone, screen capture and precise geolocation is governed by browser permissions and security requirements. A feature being present does not mean that a website has permission to use it. Information you type or upload is another direct source.
Run EnvTrace in the window you want to examine. Use the browser report for exposed fields and the IP lookup for that window’s connection. A report from ordinary Chrome does not describe a separate managed profile.
Why this inventory matters
A browser report is most useful when each field has a clear source. You can then decide whether to inspect a browser setting, a permission, a saved session or a network route instead of changing everything at once.
Interpreting the result
- Different websites run different checks; they need not collect the same field set.
- A field describes an observation made in this browser, not an independently verified personal identity.
- Inspect the target website itself to confirm which account is signed in.
Frequently asked questions
Can a website see my email address automatically?
Your account login, submitted information or an existing identifier can reveal it to that service. Ordinary screen or Canvas readings do not themselves contain your email address.
Can a website read my entire browsing history?
An ordinary page does not receive unrestricted access to another site’s browsing history. It can record activity on its own service and use the information available to its scripts and servers.
Does a VPN hide all these details?
It changes the route and public address for traffic it covers. Browser settings, rendering behavior and information you submit need separate consideration.
References
Next steps
Inspect your browser fingerprint