××<p>The goal of this project is to measure and study the diversity of web browsers and establish statistical profiles of browser fingerprints.
All of the data for the project will be collected in an anonymized form which ensures that it is not Personally Identifiable Information*, nor otherwise likely to lead to the identification or tracking of any web users.</p>
<p>*Personally identifiable information (PII) is any data that could potentially identify a specific individual.</p>
<p>We are committed to protecting the privacy of visitors to our website.
In this policy, "we" refers to the Inria researchers and students who are bound to keep information they receive confidential.</p>Information Gathered by the AmIUnique Website<p>For the needs of the research project defined
here, AmIUnique collects anonymous data about the configuration of computers, operating systems, browsers and plugins.
If you click the "View my fingerprint" button, this type of information will be collected from your browser.
Although these kinds of data may form a `fingerprint' that could in principle be combined with information about page requests and identifying details in order to track people's browsing habits, we will
<strong>never</strong> do so.</p>
<p>The specific 'fingerprint' information we collect is : </p>
<ul>
<li>The HTTP headers sent to the server : </li>
<ul>
<li>
<dl>
<dt>the User agent header</dt>
<dd>HTTP header sent to the server that contains information regarding your browser and operating system</dd>
</dl>
</li>
<li>
<dl>
<dt>the Accept header</dt>
<dd>HTTP header sent to the server that contains information regarding the type of media that are acceptable for the response</dd>
</dl>
</li>
<li>
<dl>
<dt>the Encoding header</dt>
<dd>HTTP header sent to the server that lists the compression methods supported by the browser</dd>
</dl>
</li>
<li>
<dl>
<dt>the Language header</dt>
<dd>HTTP header sent to the server that indicates the preferred languages for the response</dd>
</dl>
</li>
<li>
<dl>
<dt>the Connection header</dt>
<dd>HTTP header sent to the server that contains specific options that are desired for that particular connection</dd>
</dl>
</li>
<li>
<dl>
<dt>the Host header</dt>
<dd>HTTP header sent to the server that specifies the domain name of the server and eventually the TCP port number on which the server is listening</dd>
</dl>
</li>
<li>
<dl>
<dt>the Upgrade Insecure Requests header</dt>
<dd>HTTP header sent to the server that indicates the client's preference for an encrypted and authenticated response.</dd>
</dl>
</li>
<li>
<dl>
<dt>the Referer header</dt>
<dd>The address of the previous web page from which a link to the currently requested page was followed.</dd>
</dl>
</li>
<li>
<dl>
<dt>the Cache-Control header</dt>
<dd>Specifies directives for caching mechanisms in both requests and responses.</dd>
</dl>
</li>
<li>
<dl>
<dt>the Do Not Track header</dt>
<dd>HTTP header sent to the server that indicates the user's tracking preference.</dd>
</dl>
</li>
<li>
<dl>
<dt>The If not match header</dt>
<dd>Makes the request conditional and applies the method only if the stored resource doesn't match any of the given ETags.
This is used to update caches (for safe requests), or to prevent to upload a new resource when one is already existing.</dd>
</dl>
</li>
<li>
<dl>
<dt>The pragma header</dt>
<dd>Implementation-specific header that may have various effects anywhere along the request-response chain.
Used for backwards compatibility with HTTP/1.0 caches where the Cache-Control header is not yet present.</dd>
</dl>
</li>
<li>
<dl>
<dt>The x-forwarded-proto header</dt>
<dd>The X-Forwarded-Proto (XFP) header is a de-facto standard header for identifying the protocol (HTTP or HTTPS) that a client used to connect to your proxy or load balancer.
Your server access logs contain the protocol used between the server and the load balancer, but not the protocol used between the client and the load balancer.
To determine the protocol used between the client and the load balancer, the X-Forwarded-Proto request header can be used.</dd>
</dl>
</li>
<li>
<dl>
<dt>The xnginx-proxy header</dt>
<dd>Indicate we are behind a nginx proxy.</dd>
</dl>
</li>
<li>
<dl>
<dt>The sec fetch headers</dt>
<dd>Set of Fetch metadata request headers that aim to provide servers with enough information to make a priori decisions about whether or not to service a request based on the way it was made, and the context in which it will be used.</dd>
</dl>
</li>
<li>
<dl>
<dt>All custom headers</dt>
<dd>Non-standard http headers added for example by extensions or yourself.
These headers can be particularly discriminating and are very interesting to study.</dd>
</dl>
</li>
</ul>
<li>
<dl>
<dt>the list of plugins</dt>
<dd>Browser-populated JavaScript attribute that gives the list of activated plugins in the browser (window.navigator.plugins)</dd>
</dl>
</li>
<li>
<dl>
<dt>the platform</dt>
<dd>Browser-populated JavaScript attribute that indicates the platform the browser is running on (window.navigator.platform)</dd>
</dl>
</li>
<li>
<dl>
<dt>the cookies preferences (allowed or not)</dt>
<dd>Browser-populated JavaScript attribute that indicates if the browser accepts cookies or not (window.navigator.cookieEnabled)</dd>
</dl>
</li>
<li>
<dl>
<dt>User agent with Javascript</dt>
<dd>A string giving details on the browser and its underlying operating system.
This attribute is collected with Javascript.</dd>
</dl>
</li>
<li>
<dl>
<dt>the Do Not Track preferences (yes, no or not communicated)</dt>
<dd>Browser-populated JavaScript attribute that indicates your Do Not Track setting (window.navigator.doNotTrack), "NC" means the value was not specified</dd>
</dl>
</li>
<li>
<dl>
<dt>the timezone</dt>
<dd>Timezone offset of your browser obtainable through JavaScript (new Date().getTimezoneOffset())</dd>
</dl>
</li>
<li>
<dl>
<dt>the screen resolution and its color depth</dt>
<dd>Browser-populated JavaScript attributes that indicate the resolution of the device’s screen (window.screen.height/width/colorDepth)</dd>
</dl>
</li>
<li>
<dl>
<dt>the use of local storage</dt>
<dd>JavaScript test to find out if local storage is supported (storage of a specific value in "localStorage")</dd>
</dl>
</li>
<li>
<dl>
<dt>the use of session storage</dt>
<dd>JavaScript test to find out if session storage is supported (storage of a specific value in "sessionStorage")</dd>
</dl>
</li>
<li>
<dl>
<dt>a picture rendered with the HTML Canvas element</dt>
<dd>Rendering of a specific picture with the HTML5 Canvas element following a fixed set of instructions.
The picture presents some slight noticeable variations depending on the OS and the browser used.</dd>
</dl>
</li>
<li>
<dl>
<dt>a picture rendered with WebGL</dt>
<dd>Rendering of specific 3D forms following a fixed set of instructions.
The picture presents some slight noticeable variations depending on the device of the user.</dd>
</dl>
</li>
<li>
<dl>
<dt>the presence of AdBlock</dt>
<dd>Test to find out if the AdBlock extension is installed</dd>
</dl>
</li>
<li>
<b>the list of fonts</b>
<ul>
<li>
<dl>
<dt>using Flash</dt>
<dd>Flash attribute that gives the entire list of fonts installed on the operating system (flash.text.Font.enumerateFonts(true))</dd>
</dl>
</li>
<li>
<dl>
<dt>using JS</dt>
<dd>Fonts installed in the device using JS</dd>
</dl>
</li>
</ul>
</li>
<li>
<dl>
<dt>Content language with javascript</dt>
<dd>Using Javascript for getting preferred languages for the response</dd>
</dl>
</li>
<li>
<dl>
<dt>BuildID</dt>
<dd>A string indicating the build identifier of the browser(not present in all browsers).
This attribute is collected through JavaScript via the 'navigator' object.</dd>
</dl>
</li>
<li>
<dl>
<dt>Audio informations</dt>
<dd>Javascript attributes giving information about the audio output such as supported types, context or frequency.</dd>
</dl>
</li>
<li>
<dl>
<dt>Navigator properties</dt>
<dd>List the properties present in the navigator object</dd>
</dl>
</li>
<li>
<dl>
<dt>Permissions</dt>
<dd>Permissions of the browser</dd>
</dl>
</li>
<li>
<dl>
<dt>Video formats</dt>
<dd>Supported video format for the video element</dd>
</dl>
</li>
<li>
<dl>
<dt>Media devices</dt>
<dd>Returns the list of microphones, cameras, headphones..
presents on the device</dd>
</dl>
</li>
<li>
<dl>
<dt>Sensors</dt>
<dd>Test if some sensors are present on the device.</dd>
</dl>
</li>
<li>
<dl>
<dt>Keyboard layout</dt>
<dd>Test to detect the keyboard layout (qwerty, azerty, etc)</dd>
</dl>
</li>
<li>
<dl>
<dt>Battery</dt>
<dd>Returns property belonging to the battery value, such as level, charging, chargin time and discharging time.</dd>
</dl>
</li>
<li>
<dl>
<dt>Connection</dt>
<dd>Connection informations</dd>
</dl>
</li>
<li>
<dl>
<dt>Windows properties</dt>
<dd>Test some window properties.</dd>
</dl>
</li>
<li>
<dl>
<dt>Bot detection</dt>
<dd>Some attributes with bot detection as a goal like error generation or testing some API like selenium.</dd>
</dl>
</li>
</ul>
<p>In addition to these data, we collect several kinds of `housekeeping' information to assist us in analyzing the fingerprint data.
The housekeeping information is : </p>
<ul>
<li>Cookies</li>
<li>IP addresses</li>
<li>Timestamps</li>
</ul>
<p>Our practices and purposes for collecting these housekeeping records are discussed below : </p>Cookies<p>AmIUnique sets a cookie that persists for 4 months for the purpose of determining how often browser characteristics change, and how often they stay the same, when a browser returns over time.
If your browser is configured to accept cookies, and you return to AmIUnique several times, the cookie will be used to link the data from your visits together so that we can study the natural evolution of browser fingerprints.
AmIUnique also stores a temporary cookie that persists for 5 minutes in order to avoid fingerprinting a user again if they revisit within 5 minutes.
If you want to disable/enable browser cookies, click on the link below corresponding to your browser for instructions.
You should be aware that entirely disabling cookies may block some interactive features on some websites (most notably, automatic logins).</p>
<p>Instructions for:</p>
<ul>
<li>Microsoft Windows Explorer</li>
<li>Google Chrome</li>
<li>Mozilla Firefox</li>
<li>Apple Safari</li>
<li>Opera Browser</li>
</ul>
<p>Moreover, if you are interested in enabling/disabling Flash cookies, you can do so by visiting the following page : Manage Flash cookies</p>IP addresses<p>AmIUnique logs IP address.
This IP will allow us to collect a dataset about how often browsers that change IP address could have been followed using a fingerprint.</p>Timestamps<p>AmIUnique collects a timestamp each time it is visited.
This will be used to measure how fast browser fingerprints change.</p>Our Use of Information from AmIUnique<p>We will analyze the collected data in order to establish what are realistic profiles for browser fingerprints.
The purpose of this analysis is to set an automatic procedure to proactively diversify user platforms in a realistic manner.
AmIUnique has no Third-Party Service Providers.</p>Sharing of AmIUnique data<p>We may publish or share aggregated, statistical data from the AmIUnique project in order to facilitate privacy research, educate people about privacy problems, and to aid in the development of privacy-enhancing technologies.
We have gone to great lengths to ensure that AmIUnique does not produce any records about anyone's browsing habits or the identities of any individual visitors, so we will never be in a position where we could share any such records.</p>Security<p>In a general way, Inria commits to carry out technical and organizational means to protect all information we gathered against illegal or fortuitous destruction, fortuitous loss, alteration, diffusion or unauthorized access.
Nevertheless, Inria shall be required to divulgate any information to comply with any applicable law or rules, or to respond to any administrative or judiciary order.</p>
<p>Although we make good faith efforts to store information collected in a secure operating environment, we cannot guarantee complete security.
Information collected will be maintained for a length of time appropriate to the needs of this research project.</p>
<br>
<p>This Privacy Policy is based on some material from the EFF website
(Electronic Frontier Foundation), which is freely redistributed under the
Creative Commons Attribution License</p>