What this page learned about you
Everything a single web page can work out about the browser, device and person that requested it. The plain-English findings come first — each expands to the exact values behind it — and the complete field-by-field record follows.
Every value is computed and displayed locally. Nothing is transmitted, and no part of this page contacts another company. How each technique works →
- Findings
- 4
- Details observed
- 45
- Fields checked
- 55
- Tables
- 4
- Collected in
- —
- At
- —
In plain English
What this page worked out about you, in the order it matters. Every statement expands to the exact values it came from.
Collecting
None of this asks your permission. The findings appear as soon as the last pass lands.
- Reading the browser, screen and document
- Storage, network, devices and permissions
- Fingerprinting graphics, audio and performance
- Reducing it all to one identifier
Every detail, as collected
The findings above are derived from these 4 tables. Field names carry a definition where one helps; anything your browser withheld is grayed out.
Known before any code runs
How these work →Your browser sends all of this by itself, on every request, whether or not the page contains a single line of JavaScript. Blocking scripts does not stop it.
What your browser volunteered
HTTP Request Headers
15 reportedEvery header the browser attached to the request for this page, read server-side. This is what a site knows before one line of JavaScript runs.
| Field | Value |
|---|---|
| accept | */* |
| accept-encoding | gzip, br, zstd, deflate |
| content-security-policy | default-src 'self'; script-src 'self' 'nonce-0b2dfb57dce84c459da895d943a63e60' 'strict-dynamic'; style-src 'self' 'nonce-0b2dfb57dce84c459da895d943a63e60'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' data: blob:; font-src 'self… |
| host | sessioncontext.org |
| referer | https://www.sessioncontext.org/ |
| user-agent | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| x-forwarded-for | 216.73.216.45, 152.233.47.65 |
| x-forwarded-host | sessioncontext.org |
| x-forwarded-port | 8080 |
| x-forwarded-proto | https |
| x-nonce | 0b2dfb57dce84c459da895d943a63e60 |
| x-railway-edge | jfk1 |
| x-railway-request-id | BDNhHKyCSgO94Xtwlt7tkg |
| x-real-ip | 216.73.216.45 |
| x-request-start | 1789184238299 |
Client Hints Received
1 reportedThis server sends Accept-CH and Critical-CH asking for high-entropy hints — processor architecture, exact browser build, device model, color-scheme preference. The browser then volunteers them on every subsequent request, no script required.
| Field | Value |
|---|---|
| no client hints received | reload once — the browser must see the server's Accept-CH before it sends them |
The network connection underneath
Connection & Protocol
11 reportedFacts read from the TCP socket, below the HTTP layer. This deployment sits behind a hosting proxy, so the socket here belongs to that proxy and the headers have been re-emitted by it: the ordering below is the proxy's, not your browser's. Run the site directly, with no proxy in front, and this section reports your browser's own header order — a passive fingerprint that survives user-agent spoofing.
| Field | Value |
|---|---|
| HTTP version | 1.1proxy to server; your browser likely negotiated HTTP/2 or /3 at the edge |
| transport | no (plain HTTP)the proxy terminated TLS; your connection to it was encrypted |
| remote address | ::ffff:100.64.0.16the proxy's address, not yours |
| remote port | 61602the proxy's port |
| address family | IPv6 |
| local (server) address | ::ffff:10.210.199.191:8080 |
| requests on this TCP connection | 1keep-alive reuse |
| bytes read on socket | 495 |
| header count | 12 |
| raw header order | Host, User-Agent, Accept, Accept-Encoding, Referer, X-Forwarded-For, X-Forwarded-Host, X-Forwarded-Proto, X-Railway-Edge, X-Railway-Request-Id, X-Real-Ip, X-Request-Startre-emitted by the proxy — not your browser's own order |
| request line | GET / |
Server-Derived Context
18 reported · 10 notWhat the server infers from the request. No external lookup is performed — no IP-geolocation service, no analytics endpoint. Nothing about this session leaves the machine.
| Field | Value |
|---|---|
| client IP (x-forwarded-for) | 216.73.216.45your real address, forwarded by the proxy |
| proxy chain | 216.73.216.45, 152.233.47.65 |
| x-real-ip | 216.73.216.45 |
| Host requested | sessioncontext.org |
| User-Agent | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| UA length | 103reduced-UA is about 110 characters |
| Accept | */* |
| Accept-Encoding | gzip, br, zstd, deflatecompression support |
| Accept-Language (raw) | not reported |
| preferred language | not reported |
| language count | not reportedranked list, high entropy |
| DNT header | not sent |
| Sec-GPC header | not sent |
| Sec-Fetch-Site | not reported |
| Sec-Fetch-Mode | not reported |
| Sec-Fetch-Dest | not reported |
| Sec-Fetch-User | not reported |
| Referer | https://www.sessioncontext.org/ |
| Upgrade-Insecure-Requests | not reported |
| Priority | not reported |
| cookies sent | 0 |
| cookie names | none |
| cookie bytes | 0 |
| server time (UTC) | 2026-09-12T03:37:18.301Z |
| server epoch ms | 1789184238298compare against your own clock |
| server uptime | 974.3 s |
| server timezone | UTC |
| runtime | Node v22.23.2 · linux/x64 |
How recognizable you are
How these work →Whether this site can pick you out of a crowd and know you are the same person who visited before — without you logging in, and without relying on cookies.