Browser Fingerprinting: Tracking You Without Cookies

Browser fingerprinting recognises you from the many small details your browser quietly broadcasts, allowing sites to track you even with no cookies at all. Here is how browser fingerprinting works and how to reduce it.

What is browser fingerprinting?

Browser fingerprinting is a tracking technique that identifies your device by gathering dozens of small, seemingly harmless details your browser reveals and combining them into a single distinctive signature. On its own, each detail is unremarkable. Put together, though, the exact mix of your screen size, installed fonts, time zone, language, and graphics behaviour is often close to unique, which lets a site recognise you again without saving anything on your machine.

That last part is what makes fingerprinting notable. Unlike a cookie, which is a file stored on your device that you can inspect and delete, a fingerprint lives nowhere you can reach. It is recomputed every time your browser loads a page, so there is nothing to clear.

What details make up a fingerprint?

A fingerprinting script quietly reads a wide range of properties. Common ingredients include:

• User agent: your browser name, version, and operating system.
• Screen and window: resolution, colour depth, and available space.
• Time zone and language: which region your system is set to.
• Fonts and plugins: the exact set installed, which varies a lot between people.
• Canvas and WebGL: how your device renders hidden graphics, which differs subtly by hardware and drivers.
• Hardware hints: number of processor cores, memory, and audio processing quirks.

No single item identifies you, but the combination frequently does. If only a handful of people in the world share your exact configuration, a site can pick you out of the crowd with surprising confidence.

How fingerprinting differs from cookies

It helps to line the two up directly. Cookies are visible, storable, and clearable. Fingerprinting is invisible, stored nowhere on your device, and persistent across sessions.

Because privacy tools and regulations have pushed back hard on cookies, fingerprinting has grown as an alternative that is harder for users to notice or block.

Fingerprinting and your IP address

Fingerprinting is often combined with your IP address to strengthen tracking. The IP suggests a rough location and network, while the fingerprint distinguishes your specific device. Together they can re-link you even after you clear cookies or move between pages.

This is why hiding your IP alone does not defeat fingerprinting. If you use a VPN or a proxy, a site sees a different address, but your browser still broadcasts the same fonts, screen size, and rendering quirks. As our guide on what your IP reveals notes, an IP is only one signal among many.

How to reduce your fingerprint

You cannot make yourself invisible, but you can blend in. The strategy is not to look unique but to look like everyone else, so a fingerprint no longer singles you out. Practical steps include:

• Use a privacy-focused browser that deliberately makes all its users look alike and resists canvas and font probing. The Tor Browser is a strong example.
• Enable built-in anti-fingerprinting settings that mainstream browsers increasingly offer.
• Avoid piling on extensions and rare fonts, since unusual configurations stand out.
• Keep your browser updated so your version is not distinctive.
• Consider content blockers that stop known tracking scripts from running at all.

The counter-intuitive lesson is that heavy customisation can hurt privacy. A stock browser on a common operating system is far harder to fingerprint than a heavily personalised one.

Why fingerprinting matters

Fingerprinting sits at the centre of modern web tracking precisely because it sidesteps the tools people rely on for privacy. It powers cross-site advertising, fraud detection, and analytics, sometimes for legitimate reasons and sometimes not. Understanding it helps you make informed choices rather than assuming that clearing cookies or hiding an IP is enough.

If you would like to see one piece of the puzzle, the address a site associates with your visit, you can view your public IP at IP Animals. It is a reminder that trackers assemble a picture from many signals, and that real privacy comes from reducing each of them.