A device-fingerprinting script is present

Why it matters

This page loads a device-fingerprinting library. Fingerprinting identifies a visitor's device across sites from its browser and hardware characteristics, without cookies — which makes it harder for a visitor to see or opt out of than ordinary tracking. Confirm this use is disclosed to visitors and that you have a clear reason for it (for example fraud prevention rather than advertising). (The library is named in this finding's evidence.)

How ShipReady detects it

Per-page privacy signals read straight from the fetched HTML and response headers — no extra requests. Page-scoped because trackers, cookies and forms genuinely differ between routes (a marketing homepage vs a bare /login), and the route that carries the signup form is exactly the one worth seeing.

Detection is deterministic. ShipReady reports this only when it observes the condition directly, and prefers to miss a real problem over inventing one. Rule version 1.0.0.

How to fix it

This is the prompt ShipReady puts in your report — written to be pasted straight into Cursor, Claude Code, or whichever assistant built the app.

This page loads a device-fingerprinting library, which identifies a visitor's device across sites from browser and hardware characteristics without using cookies. Because it is invisible to visitors and not cleared by deleting cookies, it carries a higher privacy expectation than ordinary analytics. Confirm you actually need it and for what: fingerprinting for fraud/bot prevention on a login or checkout flow is a common, defensible use; using it for advertising or cross-site analytics is not, and should be removed. Disclose the use in your privacy policy, and load it only where it is needed (e.g. the checkout page) rather than site-wide. This is general privacy guidance, not legal advice.

Frequently asked questions

What does "A device-fingerprinting script is present" mean?

This page loads a device-fingerprinting library.

How serious is it?

ShipReady rates this medium. Fix soon. Meaningfully weakens a defence or degrades how the site works.

How do I fix it?

Paste the fix prompt on this page into Cursor, Claude Code or your AI editor. It is the same prompt ShipReady puts in your report.

Can I check my own site?

Yes — ShipReady scans up to ten pages of any public site for free and reports this alongside every other check. The free report lists every issue it finds and shows full evidence and a fix prompt for the critical and high-severity ones; medium and low findings are counted and unlock on Pro.

Related checks

• A form collecting personal data submits via GETmedium
• Session-replay or behaviour-recording script is presentmedium
• Tracking cookie is set before the consent banner can be answeredmedium
• Tracking cookie is set on the first responsemedium
• Analytics or advertising tracker loads without a detected consent steplow
• Fonts are loaded from Google's serverslow