Standard "Private Browsing" or "Incognito" modes prevent local history from saving to disk, but they do little to protect your identity from sophisticated web trackers. Modern tracking networks rely on device fingerprinting—measuring system fonts, GPU rendering quirks via HTML5 Canvas, WebGL parameters, audio latency, and installed plugins to create a persistent hardware signature across sessions.
Key Tracking Vectors and Countermeasures
- HTML5 Canvas Fingerprinting: Trackers draw invisible shapes and text behind the scenes; minute GPU driver rendering variations produce a unique hash.
Defense: Install privacy tools like Canvas Defender or Firefox's native
privacy.resistFingerprinting = trueinabout:config. - AudioContext API Tracking: Variations in audio buffer processing across system sound cards provide another identifiable vector.
Defense: Block non-consensual Web Audio processing through extension policies.
- System Font Enumeration: Tracking scripts measure font rendering metrics across hundreds of installed fonts.
Defense: Restrict font queries to standard platform fonts (
layout.css.font-visibility.standard = 1in modern Firefox). - WebRTC IP Leakage: WebRTC STUN requests can expose real public and private LAN IPs even when connected behind a VPN proxy.
Defense: Set
media.peerconnection.enabled = false.