u/MindlessCry3444

GrapheneOS is marketed as a privacy-hardened, "de-Googled" operating system. However, technical analysis by the Kuketz IT-Security Blog revealed that the OS automatically connects to Google-operated gstatic.com servers by default to perform Android's standard captive portal checks.This behavior is not documented in the official GrapheneOS FAQ, creating a transparency issue for users. From a strict privacy perspective, these automatic connections leak critical metadata, including the user's IP address, timestamp, and location data directly to Google, enabling potential tracking and device fingerprinting despite the absence of Google Play Services.