DPE-2026-0007

Apparaatherkenning

Het apparaat wordt herkend aan zijn kenmerken, zonder dat er iets is opgeslagen.

Familie
Gegevens
Status
actief
Geldt voor
web

Wat er gebeurt

Scripts read properties that together make a device distinctive: time zone, screen metrics, fonts, canvas or WebGL rendering, enumerated navigator fields. No cookie is stored, so cookie controls do not touch it.

Waarom het ertoe doet

Recognition without storage escapes exactly the controls people are told to use. Clearing cookies and refusing consent leave the technique untouched.

Veelvoorkomende oorzaken

  • anti-fraud or bot-detection library that also serves marketing
  • advertising script with built-in fingerprinting

Dit is het níet

Reading a time zone to localise a page is not this entry. The distinguishing feature is enumeration of multiple properties by a third party.

Hoe je het vaststelt

Indicator

Within one page load, a script under a different registrable domain reads three or more distinct classes of device property, of which at least one is a canvas or WebGL rendering, an enumeration of installed fonts, or an enumeration of navigator or media-device fields. A single reading, such as the time zone, does not qualify: it is the combination that makes a device distinctive, and the combination is what the indicator has to show. Record which reads the same script performed, so the count is attributable to one party rather than to the page.

Methode

network-observed

Kwaliteit van de detectie

90 van 100

De grenzen van deze bevinding

Wat dit patroon zou weerleggen

  • The properties are read by a first-party script, not a third party.machinaal te toetsende bevinding krijgt een ander patroon
  • The reads serve a functional purpose such as localisation or accessibility.niet uit de meting af te leidende bevinding wordt zwakkerPurpose cannot be established from a capture. The entry establishes the reading, not the intent.
  • The reads come from a component the operator engaged for fraud or bot detection and the result is not used for recognition beyond that purpose.niet uit de meting af te leidende bevinding krijgt een ander patroonThe reading itself still engages the terminal-equipment provision, so this narrows the finding instead of removing it. It is a question for the operator.

Wat dit patroon níet vaststelt

  • harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
  • severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
  • unlawfulness; that is for a supervisory authority or a court
  • intent; a fault is usually a build decision, not a plan
  • absence: not finding it in one capture is not evidence that it is not there

Reproduceren

  • manualMETHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above
  • scriptrepro/web/check.mjsthe run reports DPE-2026-0007 as present, with the detail behind it

Ook zichtbaar met openbare scanners

blacklight

Juridisch kader

Bepalingen

nl-tw-11-7aeu-gdpr-6-1-a

Veelgehoorde tegenwerpingen

We set no cookies.

The cookie provision covers storing and reading information on the device, not only cookies. Reading device characteristics for recognition is within its scope.

Geldt wanneer

to-processing

Verwante patronen

← alle patronen