TL;DR
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
A report on royfish.dev argues that device fingerprinting can help websites and advertisers recognize browsers without relying on cookies, using network details and device characteristics. It also criticizes Google’s handling of third-party cookies, but the source does not provide documentation confirming a new Google fingerprinting product or its deployment. The scale of use, data access and protections remain unclear.
A report published on royfish.dev describes how websites can use device fingerprinting—a combination of browser, network and hardware characteristics—to recognize a user’s browser without relying on cookies. The report argues that this tracking can persist when people clear cookies or use private browsing, but it does not document a specific new product launch or independently establish how widely advertisers are using the technique.
Fingerprinting combines information sent during a browser’s request with measurements gathered by code running on the device. The report lists visible details such as IP address, browser type, operating system and language, alongside characteristics including graphics hardware, processor behavior, memory, screen settings, audio processing, fonts and installed software. Individually, many traits are shared by large numbers of people; together, the source says, they can narrow a group enough to distinguish browsers within a particular audience.
The author contrasts these signals with cookies, which users can delete and which browsers can restrict. Network details may change when someone switches networks, uses a VPN or receives a new address from an internet provider. Device and software characteristics can be more stable, though the report does not supply measurements showing how reliably a fingerprint identifies the same person over time or across devices.
The article also recounts Google’s public debate over third-party cookies and its Privacy Sandbox proposals. It says Google pledged in 2020 to phase out third-party cookies, later changed course, and did not deliver an anticipated IP-masking feature as the author expected. These are the source’s account and interpretation; the article provides no company statement, product documentation or regulatory filing to verify the claims about current Google advertising products.
Fingerprinting matters because it can weaken the practical effect of familiar privacy steps. Clearing cookies, opening a private window or changing an IP address may not change the combination of signals a website can observe. That does not mean every site can identify a person by name: the source describes recognition among a sample of browsers, and does not establish how often a fingerprint is unique or how it is linked to an account.
The report also points to a wider concern: information collected for advertising can, depending on a company’s policies and practices, be associated with account data or used to build audience profiles. Its examples of personal information being offered for sale are presented as a warning, not evidence of a documented transaction. For readers, the distinction matters: fingerprinting is a real technical method, while specific claims about who combines or sells data require separate evidence.
For policymakers and browser makers, the issue is whether privacy protections address tracking techniques beyond stored identifiers. Browser defenses can reduce fingerprinting, but the report does not show that any one browser prevents all forms of recognition. Users should treat the article’s browser comparisons as the author’s assessment, not a controlled test.
device fingerprinting detection software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Third-party cookies became a focus of browser privacy debates as Safari and Firefox restricted them and regulators introduced consent requirements. Google, whose Chrome browser and advertising business make its choices consequential, announced plans in 2020 to phase out third-party cookies. The company later developed Privacy Sandbox, a set of proposed alternatives intended to support advertising while limiting some cross-site tracking.
The source says that after years of development and criticism, Google moved away from its planned cookie phase-out. It frames that history as a progression from pressure, through a proposed alternative, to increased interest in fingerprinting. That framing is commentary, not a neutral chronology supported in the supplied material by dated statements or links to Google’s announcements.
The report distinguishes browser security from privacy. A site is generally restricted from reading another site’s stored data, but its own code can still receive browser information and measure some device behavior. It names Brave, Tor and Mullvad Browser as approaches aimed at limiting fingerprinting, including adding variation to readings or making users’ browser configurations more alike. The source does not provide comparative test results for those protections.
““There are two sources for data that can make up your fingerprint; the network request and the code environment.””
— The royfish.dev report
As an affiliate, we earn on qualifying purchases.
Evidence Behind the Google Claims
The source does not establish that Google has launched a new fingerprinting feature in its advertising products, despite presenting fingerprinting as the next stage of the company’s approach. It gives no product name, launch date, technical documentation or direct statement from Google confirming that claim. The allegations about data being sold or shared with authorities are also not supported with named examples or records in the supplied material.
It is also unclear how accurately a fingerprint can recognize someone as devices, browser versions and settings change. The report explains how combinations of signals might distinguish browsers in a given sample, but offers no dataset, error rate or comparison baseline. A browser fingerprint is not automatically a person’s identity, and tracking across devices may require additional account or data-linking methods not detailed here.
As an affiliate, we earn on qualifying purchases.
What Evidence Would Clarify This
The key next step is independent verification of the report’s claims about advertising products and Google’s current handling of cookies. Relevant evidence would include dated company documentation, statements from Google, regulator filings or technical testing that identifies which signals are collected and for what purposes. The source does not announce a forthcoming investigation, product change or regulatory decision.
Readers can also look for browser-specific disclosures and independent fingerprinting tests, while recognizing that results depend on device, settings and the sites tested. Until further evidence is available, the confirmed point is narrower: websites can gather a range of browser and device signals, and the report warns these may help distinguish users even when cookies are unavailable.
As an affiliate, we earn on qualifying purchases.
Key Questions
What is device fingerprinting?
Device fingerprinting combines browser, network and device characteristics to distinguish a browser from others. A fingerprint can help recognize a browser, but it does not by itself prove the user’s legal identity.
Does clearing cookies stop fingerprinting?
Clearing cookies removes stored cookie data, but it does not necessarily change the signals a website can measure, such as browser settings or hardware characteristics. How reliably those signals identify a returning browser varies and is not quantified in the report.
Has Google confirmed a new fingerprinting advertising product?
Not in the supplied source. The royfish.dev report alleges a move toward fingerprinting but provides no product documentation or direct confirmation from Google of a new launch.
Can a VPN prevent device fingerprinting?
A VPN can change the IP address visible to a website, but it does not necessarily change browser or hardware signals. The report describes IP addresses as one part of a fingerprint, not a complete defense or identification method.
Source: hn
Fall Picks
fall essentials
As an affiliate, we earn on qualifying purchases.
