What information can a website collect about me without permission?

Without a prompt, a website can commonly see your IP address, approximate city, browser and device type, screen size, language, timezone, and available graphics signals. Browser support and privacy settings limit battery, memory, font, media-device, and fingerprinting inputs. This page shows which signals your browser exposes.

What is a browser fingerprint?

A browser fingerprint combines characteristics such as screen size, fonts, GPU, and timezone into a potentially identifying pattern. The Electronic Frontier Foundation's historical Panopticlick research measured about 18 bits of identifying information in the browsers it tested; modern results vary by browser and privacy defenses.

Can a website see my exact location?

By default a site only sees your approximate city, derived from your IP address. Pinpoint GPS location — accurate to a few metres — requires your explicit permission, but many apps and sites request it as a matter of routine.

Can websites see my other tabs or which sites I'm logged into?

No. The browser sandbox and same-origin policy stop any page from reading your other tabs, your history, or another site's data. However, a page can still detect the moment you switch away from its tab, the site you arrived from, and — sometimes — which major services still recognise your browser session.

How do I stop websites from tracking me?

Install a content blocker such as uBlock Origin, use a privacy-focused browser (Brave, Firefox, or Tor), deny camera, microphone, location, and clipboard access by default, block third-party cookies, and turn on Global Privacy Control. Together these steps cut off the large majority of trackers.

Does this website store any of my data?

It stores no raw test readings or server-side visitor profile. The returning-visitor demo keeps one fingerprint hash and visit count in your browser's localStorage. The reveal also makes disclosed third-party requests for IP geolocation and tracker checks. Cookieless analytics does not load when DNT or GPC is enabled.

Is my phone really listening to my conversations for ads?

A relevant ad alone cannot establish that. Check recent microphone access and permissions on your phone. Those records can identify app access, but they do not by themselves establish what audio was collected or whether it was used for advertising.

How can I tell if an app is actually using my microphone?

Use App Privacy Report on iPhone or Privacy dashboard on Android to review recent access. App Privacy Report only starts collecting activity after you enable it. Review and revoke microphone permissions for apps that do not need them.

Can this browser test check whether other apps are listening?

No. A website cannot inspect other apps' microphone activity. This test shows signals available to the current browser page and offers optional permission demonstrations. Use your phone's privacy controls to review app access.

Is My Phone Listening to Me for Ads? What the Evidence Says

An ad about something you just discussed is not evidence that your phone recorded the conversation. Start with something you can verify: which apps have microphone permission and which recently used it.

Published July 2, 2026 · Updated September 29, 2026 · 5 min read

Start here

On iPhone: review recent access
Open Settings → Privacy & Security → App Privacy Report. Turn it on if needed; it starts collecting activity after you enable it. Review microphone access and the apps involved.
Follow Apple's App Privacy Report steps →
On Android: open Privacy dashboard
In Settings, open Security & privacy or Privacy → Privacy dashboard → Microphone. Review access and change permissions for apps that do not need them. Menus vary by device.
Follow Google's Privacy dashboard steps →
Check website permissions too
Apps and websites have separate permission controls. Review microphone access in your browser's site settings, especially for sites you no longer use.
Review browser permissions →

See what websites can read

Run the browser test to explore device and tracking signals. Its permission demos are optional. It cannot inspect other apps or determine why you received an ad.

Run the free browser privacy test →

Does a targeted ad prove my phone was listening?

No. The timing of an ad cannot identify the source of its targeting. Browsing, searches, purchases, account activity, and the context in which an ad appears can all help explain relevance without a recording of your conversation.

That does not establish what every app does. A microphone permission tells you that an app is allowed to request access; a recent-access record shows use. Neither alone explains what happened to the audio or proves an advertising purpose.

What the research can tell us

The 2018 Panoptispy study examined 17,260 Android apps using static and dynamic analysis. It investigated media access and found privacy problems involving images, video, and screen recording, including data sent to third parties.

It is useful evidence about the apps and behaviors observed in that study. It is not a current audit of every iPhone or Android app, and automated testing cannot exercise every possible action inside an app. Sweeping claims that all apps listen, or that no app ever could, go beyond that evidence.

How to investigate unexpected microphone use

Check the app and time shown in your phone's recent-access controls. Consider whether you were recording a message, making a call, or using a voice feature then.
Revoke microphone access for an app that does not need it. If a feature later requires access, you can decide whether to grant it again.
Read the app's explanation of audio collection and retention. A microphone activity indicator shows access, not why the app is using it or where the audio goes.
Review voice assistant settings separately, including activation, saved recordings, and deletion controls. Those settings are different from a third-party app's microphone permission.

Reduce tracking beyond the microphone

Revoking microphone access does not stop account-based advertising or browser tracking. Review the ad and activity controls in services you use, limit unnecessary location access, and check your browser's tracking protection.

Use the browser test as a demonstration of what a web page can read. A readable signal is not proof that someone is tracking you, and a blocked request is not proof of anonymity. The useful outcome is a setting you understand and can review again.

Frequently asked questions

Is my phone really listening to my conversations for ads?: A relevant ad alone cannot establish that. Check recent microphone access and permissions on your phone. Those records can identify app access, but they do not by themselves establish what audio was collected or whether it was used for advertising.
How can I tell if an app is actually using my microphone?: Use App Privacy Report on iPhone or Privacy dashboard on Android to review recent access. App Privacy Report only starts collecting activity after you enable it. Review and revoke microphone permissions for apps that do not need them.
Can this browser test check whether other apps are listening?: No. A website cannot inspect other apps' microphone activity. This test shows signals available to the current browser page and offers optional permission demonstrations. Use your phone's privacy controls to review app access.

Sources & further reading

Test your browser

See which browser, device, network, and fingerprinting signals your current setup exposes, then review practical next steps.