Complete Privacy Test

Four checks run in parallel the moment the page loads — no button, no queue. Each is the same measurement its dedicated tool page performs, so the results here and the results there agree.

The IP check reads your public address and the organisation it is registered to, which is what separates a consumer ISP from a datacentre or VPN provider. The DNS check asks several independent resolvers what they see and compares their answers against the tunnel you appear to be using. The WebRTC check opens a peer connection and inspects the ICE candidates the browser offers before any page has asked for them. The fingerprint check samples the attributes a tracking script would read and estimates how far they narrow the field.

Nothing is averaged into a single verdict. Each check passes, fails, or comes back inconclusive on its own, and the score is simply how many passed — so three-of-four tells you exactly which layer to open next. The individual tool pages carry the deeper output for whichever one failed.

The IP check reads your public address and the organisation that owns it, then judges whether the exit looks like a VPN or your own ISP. The DNS check resolves a set of unique hostnames and reports which resolvers answered, which reveals whether your queries are leaving the tunnel. The WebRTC check asks your browser for its ICE candidates, the mechanism that historically exposed real addresses from behind a VPN. The fingerprint check samples the properties sites use to recognise a browser — canvas and WebGL rendering, fonts, hardware hints — and estimates how rare that combination is.

Every check has three outcomes, not two. A probe that was blocked, timed out, or could not run is reported as inconclusive and excluded from the score rather than counted as a pass. This matters most on exactly the networks where guessing is most tempting: censored connections and restrictive corporate proxies routinely block the endpoints leak tests depend on, and a tool that treats silence as success hands out a clean bill of health precisely where the risk is highest.

These four checks describe what your browser and your network reveal to a website right now. They cannot see the larger part of tracking: data brokers merging records you never submitted, the accounts you are signed into, tracking pixels in your email, telemetry from your operating system, or the connection metadata your ISP retains regardless of what any page can observe. A perfect score here means this browser, on this network, at this moment, leaks nothing detectable from the client side. That is a useful floor, not a complete privacy audit.