PayPal fingerprints incognito Chrome
Should be pretty clear at this point that Chrome doesn't provide any fingerprint protection, but just in case you want to see it in action:
- Open an incognito session.
- Log into PayPal.
- Close Chrome.
- Launch a new incognito session and navigate to a website that takes PayPal as a payment method. Prompt it to sign.
It will pre-populate your email address, regardless of restarting the browser.
If you inspect network traffic, you'll see PayPal send the following response body:
> {"deviceFingerprintEmailToPrefill":"te•••••••••@example.com","dfpEm":true}
(Sometimes it's censored, sometimes it's not.)
This sticks around for weeks and even survives VPNs that are co-located within the same region, so they're pretty damn confident.
Neat party trick to show your normie friends if you need an in-your-face example of fingerprinting.
Based on my observations, Brave and Firefox (with fingerprinting protection enabled) do not exhibit this behavior.