KANAWHA IT SECURITYPRIVACY FIELD GUIDE LOCAL SCAN

KITS / PRIVACY FIELD GUIDE

What your browser
tells the web.

Privacy is more than cookies. A normal visit can reveal a bundle of details about your browser, device, network, preferences, and past activity.

Some details are sent.
Others make you recognizable.

When a browser connects to a website, the website's server receives your network address and request information. The page can also inspect many browser-visible properties, subject to browser rules and privacy settings. Each item may be ordinary on its own. In combination, the signals can make one browser stand out.

Cookies and other storage can keep identifiers between visits. Tracking companies may use them to connect activity across sites when the browser allows it. Browsers now partition or block some cross-site storage, but the exact protections depend on the browser, settings, exceptions, and extensions in use.

A / REQUEST

Network + referrer

A website's server sees the network address connecting to it. Depending on the browser and link, the request may also include a referrer, browser details, and language preferences. A web page cannot discover your public IP by itself without sending a request to some server.

B / STORAGE

Cookies + “supercookies”

Cookies are only one place websites can keep state. Local storage, IndexedDB, caches, and service workers can also retain data for a site. “Supercookie” is a catch-all term for tracking that uses multiple or less-visible storage paths to keep an identifier around; cache validators and other browser behaviors have also been abused as tracking channels.

C / FINGERPRINT

Browser + device clues

Screen size, time zone, language, graphics information, available fonts, hardware hints, and feature support can contribute to a browser fingerprint. Some details are reduced, masked, or unavailable; the combination can still be distinctive.

D / PERMISSIONS

Location + sensors

Websites can ask for location, camera, microphone, notifications, and other access. A permission already granted can reveal more. This scan reads permission status where the browser permits it; it never opens a camera, microphone, or location sensor.

02 / LOWER YOUR EXPOSURE

Make tracking
work harder.

These steps reduce common forms of collection. No single setting makes a browser anonymous or stops every site from recognizing a returning visitor.

01

Turn on built-in tracker protection.

Use your browser's strict or enhanced tracking protection. In Firefox, the shield icon opens site protections and the Protections Dashboard shows what was blocked. If a site breaks, add a narrow exception for that site instead of disabling protection everywhere.

Firefox: Enhanced Tracking Protection ↗
02

Limit cross-site cookies and clear site data.

Block third-party cookies where practical, review exceptions, and remove stored data for sites you no longer use. Clearing cookies can sign you out; clearing site data can also remove saved preferences or offline content.

03

Review every site permission.

Keep location, camera, microphone, notifications, and clipboard access set to Ask or Block unless a site needs them. Revoke old grants in the browser's site-permission settings.

04

Use privacy signals with realistic expectations.

Global Privacy Control (GPC) communicates an opt-out preference where a site or law recognizes it. Do Not Track (DNT) is a discontinued, voluntary signal; a site can ignore it. Neither replaces tracker blocking or careful permission settings.

MDN: Global Privacy Control ↗
05

Separate contexts and avoid unnecessary logins.

Use separate browser profiles or containers for work, shopping, and personal accounts. A login directly identifies you to that service and can connect activity that cookies alone might keep separate.

06

Keep the browser and extensions lean.

Install updates, remove extensions you do not use, and check the permissions an extension requests. Extensions can often see more browsing data than an ordinary page, so install only software you trust.

07

Know what private windows and VPNs do.

Private windows reduce what is saved after a session; they do not hide your network address from the websites you visit or stop fingerprinting. A VPN changes the network address websites see, but the VPN provider can observe connection metadata and cookies or account logins can still link activity.

WANT HELP REVIEWING YOUR SETUP?

Talk with KITS about privacy and security for your devices or network.

Contact KITS

What KITS receives

The server receives ordinary connection information, including your network address and request metadata. KITS does not add advertising analytics to this redesign. Routine hosting logs may be retained to operate and protect the site.

If you use the contact form, KITS receives the information you submit to reply. The form uses hCaptcha, which processes data needed to provide its verification service. See hCaptcha's Privacy Policy ↗. Do not submit passwords, access codes, or sensitive credentials in a contact message.

The dark-mode control stores your theme choice in this browser's local storage. This page's self-scan does not upload or retain its results.

Questions: tim@kitswv.com.

FIELD REFERENCES

MDN: Same-origin policyMDN: Cookies, tracking, and HttpOnlyMDN: High-entropy browser hintsMozilla: Fingerprinting protections

04 / LOCAL BROWSER SELF-SCAN

See what this page
can learn.

Press the button to inspect browser-visible signals on this device: browser and operating-system hints, display and hardware properties, privacy preferences, permission states, available storage, and this site's own script-readable cookie and storage names.

Local-only consent. By pressing Scan Me, you agree to this one-time browser scan. It runs in this page on your device, makes no scan-related network requests, changes no settings, and saves no scan data. Results exist only in this page until you leave or reload it. The scanner cannot read another site's cookies or storage, HttpOnly cookies, saved passwords, installed add-ons, your address book, or files. Where this site has script-readable cookies, their names and values may appear locally; treat values as secrets and never share them. Passwords are not read or requested.

The scan is an educational snapshot, not a complete device audit, malware scan, anonymity test, or privacy score. Browser privacy defenses can hide or standardize information; an unavailable value is not automatically a problem.

Pressing Scan Me means you agree to the local-only scan described above. No results are saved or sent.