Mirror

What any server learns about you the moment you connect — before cookies, before JavaScript. Nothing is stored.

$ GET /api/mirror — a single request, no parameters
TLS handshake done · the server already knows everything in the left panel
the right panel never touched the network — it was read locally by your browser
// what the server sees● via worker

reading the request…

// what your browser tells◆ local, no network
read on this page · never sent anywhere
▲ Why it matters: The combination of these values — no cookies, no login — is enough to re-identify most browsers across visits. This is how tracking survives "clearing cookies". The defense is not hiding one field, it is shrinking the surface: browsers with anti-fingerprinting, resistance to third-party scripts, and sites (like this one) that collect nothing.

🛰️ This tool talks to the Worker (dynamic/) — what is sent and why is explained above.


← Back to tools