Browser Fingerprinting

A technique that combines unique browser and device characteristics to identify users without relying on cookies.

Nov 3, 2026 / About 1 min read

Security

Browser fingerprinting collects a set of attributes from a user's browser and device - screen resolution, installed fonts, plugins, timezone, language settings, GPU information, and more - and combines them into a profile that can uniquely identify the user.

Unlike cookies, which are stored in the browser and can be deleted or blocked by the user, a fingerprint is assembled from information the browser sends to websites and information that scripts on the page read. The user may be tracked without noticing. In a 2010 paper by Peter Eckersley of the EFF, 83.6% of the 470,161 browsers from privacy-conscious users who visited Panopticlick had a unique fingerprint.

Key components of a fingerprint include the User-Agent string, screen resolution and color depth, timezone and language settings, installed plugins and fonts, Canvas fingerprint (a hash of an image drawn via the Canvas API), WebGL fingerprint (GPU rendering characteristics), and AudioContext fingerprint (audio processing traits).

For URL shortening services, fingerprinting can supplement click analytics in environments where cookies are unavailable - private browsing mode, browsers that block third-party cookies, and so on. However, in Opinion 9/2014 (adopted November 2014), the EU's Article 29 Working Party stated that Article 5(3) of the ePrivacy Directive, which requires consent for accessing information on a user's device, applies to fingerprinting, so compliance with privacy regulations is required.

As countermeasures, Firefox's Enhanced Tracking Protection blocks known fingerprinting scripts. WebKit, the engine behind Safari, reduces fingerprinting signals with changes such as exposing only OS-bundled fonts and web fonts to web pages and not changing the User-Agent string with minor updates. Brave randomizes some API values (per the WebKit and Brave documentation as of October 2026).

Was this article helpful?

Related Terms

Cookie

A small piece of data stored in the browser by a website. Cookies enable login persistence, shopping cart retention, and user tracking.

IP Address

A unique numerical identifier assigned to every device connected to the internet. IP addresses enable data routing between devices across networks.

Referrer-Policy

An HTTP header that controls how much referrer information is included when navigating from one page to another.

CSP

Content Security Policy - an HTTP header that controls which resources a browser is allowed to load for a given page.

Two-Factor Authentication

A security method requiring a second verification factor beyond a password. Dramatically reduces account takeover risk.

Event Tracking

A method of measuring user interactions that do not involve page transitions, such as button clicks, video plays, and file downloads.

Short URLs and Tracking Strategy in the Cookieless Era

As browser restrictions on third-party cookies tighten, this guide covers first-party data collection using short URLs and privacy-compliant tracking methods including UTM parameters, server-side measurement, and fingerprint-less analytics.

GDPR and Short URLs - Privacy-First Link Tracking Compliance Guide

Learn how short URL services handle personal data under GDPR. Covers consent requirements, data retention policies, and privacy-first tracking alternatives.

Short URL Security - Phishing Risks, Safe Sharing Practices, and Protection Guide

A comprehensive guide to short URL security. Understand phishing risks, malware distribution via shortened links, and best practices for safe sharing.

FAQ

How does fingerprinting differ from cookies?

Cookies are data stored in the browser that users can delete or block. Fingerprinting assembles an identifier from browser configuration data that users cannot easily control.

How can I protect myself from fingerprinting?

Enable Firefox's Enhanced Tracking Protection or Brave's fingerprinting protections. The Tor Browser is designed so that all users share the same fingerprint. Browser extensions that block fingerprinting scripts also help.

Is fingerprinting legal?

It depends on how it is used and on local regulations. In the EU, the Article 29 Working Party's Opinion 9/2014 states that Article 5(3) of the ePrivacy Directive applies to fingerprinting and that user consent is required unless an exemption applies. Japan's Act on the Protection of Personal Information also requires appropriate handling of data that can identify individuals.

Put the terms to work

Shorten a URL for Free