Browser Fingerprinting: Why Clearing Cookies Doesn't Make You Private

Most people believe private browsing is private. Clear your cookies, you disappear. Use incognito, no one knows it's you.

Browser fingerprinting makes both of these beliefs wrong.

What Fingerprinting Collects

Your browser leaks more identifying information than you'd expect. Not through cookies or tracking pixels — through perfectly normal browser APIs that exist for legitimate reasons:

• User agent string (browser, version, OS)
• Screen resolution and color depth
• System timezone and language preferences
• Installed fonts (measurable via text rendering)
• Canvas rendering (GPU and driver variations)
• WebGL rendering characteristics
• Audio processing characteristics
• Available browser plugins and extensions

Individually, none of these are unique. Together, they're remarkably identifying. Research from browser fingerprinting company FingerprintJS found that their fingerprints correctly identify returning users 99.5% of the time.

How Canvas Fingerprinting Works

A script draws invisible text and shapes to an HTML5 canvas element. It then reads the pixel values of that drawing. How your specific GPU, graphics driver, and OS render text is subtly different from other hardware combinations. The differences are imperceptible to human eyes but statistically consistent and identifying. You don't need to click anything or accept any permission. The script runs silently.

Why Incognito Doesn't Help

Incognito mode tells your browser not to save cookies or history to disk. Your GPU doesn't change. Your fonts don't change. Your screen resolution doesn't change. Every attribute used for fingerprinting stays exactly the same in incognito. The fingerprint is identical.

What Actually Helps

Tor Browser makes everyone look the same by standardizing fingerprint attributes. Brave Browser adds randomization that changes your fingerprint between sessions. Firefox with privacy.resistFingerprinting makes your browser report generic values for many fingerprinting attributes. uBlock Origin blocks the tracking scripts entirely, which is often the most practical solution.

Complete privacy from fingerprinting requires looking like many other people (Tor's approach) or blocking the scripts entirely (uBlock's approach). Partial measures reduce the uniqueness of your fingerprint but don't eliminate it.