See what was talked about here:
https://discuss.grapheneos.org/d/5775-device-fingerprinting-test-results-concerns-and-questions/20 https://discuss.grapheneos.org/d/19692-vanadium-fingerprinting/4
Disabling the JS wouldn't actually stop it in practice, because you'd stand out incredibly by the lack of data being provided in comparison to almost everyone else on the planet. The service just isn't adapted to that scenario and it would be trivially easy to set up a library to do it. You should use web services that respect your privacy and don't do such nefarious things as a first priority. No browser's fingerprinting protection works well at all and is highly dependent on having a crowd. On most implementations it's randomizing data points and hoping that the service admin isn't smart enough to correlate or to track the points that do not change.
The more invasive a site is about fingerprinting then any resistance towards it is increasingly less possible, final boss being services requiring you to KYC to use it. This would apply even for browsers with strict settings that do not change. Take a look at your display size, locale, timezone, GPU, for example or even benchmarking the device performance. In reality the fingerprint suggests a GrapheneOS user of a certain device with a VPN and it tries to keep that as much as it can which goes under the radar for more naive services.
npub1hx…sg75y
2026-09-07 18:15:02 UTC
in reply to nevent1q…pyvp
Author Public Key
npub1hxx76n82ags8jrduk0p3gqrfyqyaxnrlnynu9p5rt2vmwjq6ts3q4sg75ySeen on
wss://relay.primal.netPublished at
2026-09-07 18:15:02 UTCEvent JSON
{
"id": "00000bc037368fbcd70663e1453f819851c87165b4b6c1d790dce45b13f7e473",
"pubkey": "b98ded4ceaea20790dbcb3c31400692009d34c7f9927c286835a99b7481a5c22",
"created_at": 1788804902,
"kind": 1,
"tags": [
[
"e",
"00000387509fa3b19492025b41586ddb52f23f426c30227f4322ec8a3e196c5d",
"wss://ynostr.yael.at/tango",
"root",
"b98ded4ceaea20790dbcb3c31400692009d34c7f9927c286835a99b7481a5c22"
],
[
"e",
"1ba58bd874a528cce4a2f54c1ea12c701ea69f67ade2d5693ab3cffc65b10bc3",
"wss://relay.primal.net/",
"",
"6f0cc771674c2494627c931077dce22ac4ee24517abe5f7233afc0550c70de9e"
],
[
"e",
"5831db48fbf73b648a9f912c86a7db6459a8b90434b5d5c09efa4d08c1908685",
"wss://relay.primal.net/",
"reply",
"6f0cc771674c2494627c931077dce22ac4ee24517abe5f7233afc0550c70de9e"
],
[
"p",
"b98ded4ceaea20790dbcb3c31400692009d34c7f9927c286835a99b7481a5c22",
"wss://relay.primal.net/"
],
[
"p",
"6f0cc771674c2494627c931077dce22ac4ee24517abe5f7233afc0550c70de9e",
"wss://nostr.mom/"
],
[
"r",
"https://discuss.grapheneos.org/d/19692-vanadium-fingerprinting/4"
],
[
"r",
"https://discuss.grapheneos.org/d/5775-device-fingerprinting-test-results-concerns-and-questions/20"
],
[
"nonce",
"300iz3",
"20"
]
],
"content": "See what was talked about here:\nhttps://discuss.grapheneos.org/d/5775-device-fingerprinting-test-results-concerns-and-questions/20 https://discuss.grapheneos.org/d/19692-vanadium-fingerprinting/4\n\nDisabling the JS wouldn't actually stop it in practice, because you'd stand out incredibly by the lack of data being provided in comparison to almost everyone else on the planet. The service just isn't adapted to that scenario and it would be trivially easy to set up a library to do it. You should use web services that respect your privacy and don't do such nefarious things as a first priority. No browser's fingerprinting protection works well at all and is highly dependent on having a crowd. On most implementations it's randomizing data points and hoping that the service admin isn't smart enough to correlate or to track the points that do not change.\n\nThe more invasive a site is about fingerprinting then any resistance towards it is increasingly less possible, final boss being services requiring you to KYC to use it. This would apply even for browsers with strict settings that do not change. Take a look at your display size, locale, timezone, GPU, for example or even benchmarking the device performance. In reality the fingerprint suggests a GrapheneOS user of a certain device with a VPN and it tries to keep that as much as it can which goes under the radar for more naive services.",
"sig": "f06a03da6f8ded557975c5aaa65b1eeec7ffd87f0af979f882ac89947d27d7fc9996ed0b1033e3ff11b3ba3469f276c91e1b0aac4ac97e363467a2db8c1114b2"
}