Since You Arrived · Vol. IV
taken.
You opened this page. It already knows the following.
reading
You opened this page. It already knows the following.
Every observation on this page came from your own browser, or from the Cloudflare edge serving this page, in the first milliseconds after you arrived. The words were written by a human. A few honest footnotes follow.
Your IP address arrives at the edge serving every request your device makes. We display only the first and last part of it. City, country, timezone, and network organization are provided by Cloudflare's request metadata. We do not put the value in browser storage or send it to an additional geolocation service.
Observations about your device were retrieved through standard JavaScript APIs documented openly by Mozilla. No exploits, vulnerabilities, or hacks. Everything on this page is by design. The design is the problem.
Installed fonts can be detected by measuring rendered text widths. We show the result locally, but do not transmit the font list or use it as an identifier.
Canvas fingerprinting reads rendered pixels as an identifier. This page does not run it. The page you visit after this one might.
With a user gesture, a page can request the last thing you copied. A password, an address, a draft message. We do not request it.
The combination of battery percentage and discharge time was once shown to be a tracking signal. This page only displays availability and coarse state when the browser exposes it.
A page can test whether you are logged into other sites by loading their favicons. We did not run this. Some pages you visited today did.
Sixteen hairlines are derived from the data your device handed over. Same data, same barcode. Different visitor, different barcode. The computation happens in your browser; nothing about it is transmitted.
Every sentence was written by a human. The code selects from hand-written templates based on what your browser returned. If a condition is not covered, the page stays quiet about it.
The page can send an arrival and a finished event to its own `/api/beacon` endpoint. No identifier or browser data is included, and the Function does not read or store the body. Cloudflare may still retain ordinary transport logs under its default policies.
No cookies. No localStorage. No sessionStorage. No IndexedDB. No service worker cache. The page forgets its in-memory observations when you close the tab.
The series moves from the world, to the sky, to the ground, to the person standing here.
Open the source. Read it. Everything described above is in the page you are reading. We have nothing to hide. Most pages cannot say that.