These figures come from completed tests on this site, such as the WebRTC leak test, the DNS leak test and the browser fingerprint test. They are published as percentages, with the number of tests behind them, so journalists, students and other site owners can cite them. Read the limits below before you do.
Loading the latest figures…
Data
Download the current figures as JSON or CSV. Each file includes the date window and the number of tests for every tool.
How the numbers are produced
- When a test finishes, the page sends one anonymous event with the tool name and a one-word outcome, such as "leak" or "high". The server adds one to a monthly counter for that tool and outcome.
- No IP address, user agent, referrer, cookie or visit-level record is stored with it. Visitors who send Global Privacy Control or Do Not Track are not counted at all. See the privacy policy.
- A tool's figures appear only after at least 1,000 completed tests, and the page shows "still collecting" until then. Percentages are rounded to whole numbers.
- Outcomes are defined in the methodology. They describe what a single test observed, not whether a person is at risk.
Limits you should repeat when you cite these figures
- Not all internet users. The people who run these tests chose to visit a privacy tool. They are more privacy-aware than average, and some arrive because they suspect a problem.
- Tests, not people. Without cookies we cannot tell whether one person ran a test several times, or removed a leak and ran it again. Repeat tests are included.
- Automated visits. Browsers driven by scripts can run a test too. We cannot rule out a small number of non-human tests.
- Heuristics. Leak and fingerprint outcomes depend on what a web page in that browser can observe at the time. Some browsers, extensions and networks block tests. Those results are counted as "needs review" or "inconclusive", not as leaks.
- No breakdowns. We do not record country, device or browser with these counts, so we cannot report them.
How to cite
Suggested wording: "In N completed tests on ScanMyPrivacy.com between [from] and [to], X% of WebRTC leak tests found an exposed address (ScanMyPrivacy statistics, scanmyprivacy.com/stats/)." Use the figures and dates shown above, which update when new data is published. Questions or corrections: contact@scanmyprivacy.com.