botcheckme

What this site collects, and how to delete it

Every visit is recorded. Once per browser, a full reading of the browser is taken in the background and stored. Here is what is in each, why, and the button that deletes it.

Every page view records

  • The page, the page you came from, and the time you spent on it.
  • Your IP address, and the approximate location (country, region, city) and network operator Cloudflare reports for it.
  • Connection details: HTTP version, TLS version and cipher, a summary of how your browser opened the connection, and its round-trip time.
  • Browser and device facts: browser and system, screen and window size, language list, time zone, processor threads, memory, touch support, display preferences.
  • How the page was used, as summaries: scroll depth, pointer speed and direction changes, the rhythm of key presses. Never which keys, never any text.
  • Script errors on the page, the links you click, and whether Global Privacy Control or Do Not Track is on.

Once per browser, a full reading

After a page has loaded, this site reads about 120,000 properties of your browser in the background: graphics, fonts, audio, canvas drawing and the browser's programming interfaces. It is the same reading donutbrowser.com takes, and it is stored. It is taken once per browser on this site, and again after a browser update or after 30 days. The reading on the home page is built from it.

Why

  • To show you your reading.
  • To compare your browser with the others these eight sites have read, so a row can say how common your value is.
  • To build a dataset of real browsers, used to develop Donut Browser.

Kept, not sold

The data is stored permanently and is not sold. Cloudflare serves this site and sees each request on the way through. Global Privacy Control and Do Not Track are recorded and do not stop collection. The page loads no advertising, analytics or other third-party scripts, and there is no account and no email field.

Kept in this browser only

Your last two readings stay in this browser's storage so you can compare them. They leave it only if you make a link to one; a link publishes the row names, values and contribution, never the address or network.

Delete my data

Deletes every visit, event, full reading and shared link this browser made on botcheckme.com, clears the readings kept in this browser, and stops collection here. Each of the eight sites gives a browser its own identity, so each has its own button.

Questions or a request about your data: contact@donutbrowser.com

What people ask about this page

Does this site read my browser before I press the button?
Yes. Every page view records the visit, and once per browser this site takes the full reading in the background after the page has loaded. Pressing the button shows you that same reading; it does not take a second one.
Is my IP address stored?
Yes. Each visit is stored with the address the request came from and the approximate location and network Cloudflare reports for it. The reading uses them to tell you whether your exit address is the problem.
Does Global Privacy Control or Do Not Track stop collection?
No. Both signals are recorded with the visit, and collection goes on. To stop it, use the delete button on this page: it deletes what this browser sent here and turns collection off in this browser.
Are my keystrokes recorded?
No. The page counts key presses and the time between them, and measures how the pointer moves, as summaries. It never records which keys you pressed, what you typed, or where on the page the pointer was.
Is my data sold?
No. It is used to show you your reading, to compare your browser with the others these sites have read, and to build a dataset of real browsers that is used to develop Donut Browser.

The rows you cannot fix from a settings page

A VPN you need for work, an address your ISP shares with a thousand other subscribers, a laptop with no graphics chip, a hardened profile that breaks the sites it was meant to protect — none of these have a checkbox. What is left is to present a reading that is internally consistent and ordinary on purpose, instead of one that is accidentally strange.

Donut Browser does that at the engine level: its Wayfern Chromium fork applies the fingerprint through CDP injection rather than patching JavaScript in the page, and it refuses to launch a profile whose proxy exit country, time zone and language contradict the profile's own fingerprint — which is the top row of most readings on this site. It is AGPL-3.0, it has no telemetry of any kind, and it runs on macOS, Windows and Linux.

Stated plainly: this site has no test results showing what any particular anti-bot service does with any particular browser, and neither does Donut Browser's own repository. What can be checked is the source, which is public.