Catalogue · Section 03 · Entry
BrowserLeaks
ACTIVE
BrowserLeaks is a live page catalogued in section 03 of this register. One page per surface — canvas, WebGL, fonts, WebRTC — with the raw values rather than a verdict. At the last field check its address answered, which is the whole of what ACTIVE means for an entry with no repository behind it.
https://browserleaks.com/
Address printed, not linked — the register's linking policy.
The fields this state was derived from
| Field | Value at this printing |
|---|---|
| http_status | 200 |
| fetched_at | 2026-08-14T09:12:00Z |
| endpoint | HEAD https://browserleaks.com/ |
| rubric_edition | 2nd, in force since 2026-08-14 |
This entry has no repository, so there is no API field a browser can re-read across origins. Its state comes from the register's own link check, printed above with the instant it was made.
Why it reads ACTIVE
No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.
Shipping. Safe to build on today.
Under the superseded first edition
UNSTATED
ACTIVE
No repository. The first edition had no link liveness sweep and therefore no field to read here.
The rubric in force · The superseded first edition · Errata leaf
What BrowserLeaks actually does
One page per surface — canvas, WebGL, fonts, WebRTC, TLS — printing raw readings rather than a verdict, which makes it useful as a reference for what a given API returns rather than as a judgment on a configuration.
What can and cannot be measured about BrowserLeaks
This entry has no repository, so none of the usual repository fields exist for it — no push date, no release tag, no archive flag, no licence identifier. Its state comes from one measurement only: the register requested the address and recorded what came back. Anything in the range 200 to 399 makes a non-repository entry ACTIVE, and that clause is the one the first edition of the rubric did not have at all, which is why live page entries carried no state under it.
Read that for exactly what it is. It says the thing is reachable. It does not say the page still works correctly, because no HTTP status can carry that. Where a stronger signal exists — a repository, a version, a dated revision — this register prefers it, and where one does not, it prints the weaker signal and names it as weak rather than dressing it up.
Where BrowserLeaks sits in this catalogue
BrowserLeaks is filed in section 03, detection test pages & fingerprint scanners, whose scope is this: Pages you point a browser at to see what it gives away. This section is where a link register earns its keep: test pages rot faster than repositories. An entry sits in exactly one section here. Where a project could defensibly go in two, it is placed where a reader would look for it first rather than where it fits most tidily, and that is an editorial decision rather than a measured one.
Filed beside it in the same section: CreepJS (live) (ACTIVE), CreepJS worker tests (ACTIVE), BrowserLeaks TLS (ACTIVE). Comparing an entry against its own section-mates is more informative than comparing it against the catalogue as a whole, because everything in a section is answering roughly the same question and the differences left over are the ones that matter.
There is no licence field, because there is no source to licence — this is a live page rather than a code repository. It is grouped instead with every other entry the rubric marks ACTIVE, which is the axis that actually distinguishes entries of this kind from one another.
Substitutes for the same job, with no claim that either is better: CreepJS (live), deviceinfo.me. The alternative relation is symmetric and carries no ranking, because this register publishes no ranking of any kind. The full BrowserLeaks comparison table sets all of them side by side on licence, push date, release cadence and state.
What to settle before you adopt BrowserLeaks
Raw values need a comparison to mean anything. This site's browser sheet gives one, against the devices its eight sites have read; on its own this page confirms that a change you made had the effect you intended, not that you are safe.
See also
| Relation | Entry | State | Last push |
|---|---|---|---|
| alternative to | CreepJS (live) | ACTIVE | — |
| alternative to | deviceinfo.me | DEAD | — |
Questions readers ask about BrowserLeaks
Answered from this entry's own fields, at the field check printed above and at no other instant.
Is BrowserLeaks still maintained?
BrowserLeaks has no repository, so this register cannot answer that from a commit history. What it can do is request the address and record the result, which is what produced ACTIVE. Shipping. Safe to build on today.
What are the alternatives to BrowserLeaks?
CreepJS (live), deviceinfo.me are recorded as substitutes for the same job. The relation carries no ranking — this register publishes none — so read them side by side on the comparison table, which prints licence, last push, release cadence and state for each.
What licence is BrowserLeaks under?
The question does not apply — BrowserLeaks is a live page rather than source code, so this register records the licence field as not applicable rather than inventing one. Terms of use, where they exist, are the publisher's to state at the address above.
Why did the state recorded for BrowserLeaks change?
Because the rules changed, not because the world did. The same field data reads UNSTATED under the superseded first edition and ACTIVE under the edition in force. Both derivations are printed on this page, and the entry appears on this printing's errata leaf with the superseded value struck rather than deleted.
A test page tells you that something is inconsistent. It does not tell you which layer produced the inconsistency, and it will not fix it. Donut Browser is an open-source anti-detect browser under AGPL-3.0 that addresses the layer most of these pages are reading: engine-level fingerprint overrides through CDP rather than injected script, with a pre-launch gate that refuses to start a profile when the proxy's exit geography contradicts the profile's own fingerprint.
curl -fsSL https://donutbrowser.com/install.sh | sh
macOS (DMG, Homebrew cask donut), Windows (installer and portable), Linux (deb, rpm, AppImage, with APT and RPM repositories at repo.donutbrowser.com), and a Nix flake. Desktop only — there is no mobile build target. Ten shipped languages. Source, AGPL-3.0 · its own entry, judged by the same rubric · the keepers' disclosure.