@consenttheater/playbill 0.1.0

package/dist/actors/fingerprinting.json

@@ -0,0 +1,214 @@
+{
+    "category": "fingerprinting",
+    "description": "Browser fingerprinting, device identification, cross-device tracking",
+    "stats": { "cookies": 60, "domains": 145, "companies": 90 },
+    "cookies": {
+        "TDID_v2": { "company": "The Trade Desk", "service": "The Trade Desk Unified ID 2.0", "category": "fingerprinting", "description": "The Trade Desk UID2 cookie for cookieless identity resolution using hashed email addresses", "severity": "critical", "lifetime": "1 year", "docs_url": "https://www.thetradedesk.com/general/privacy" },
+        "_1p_uid": { "company": "1plusX (Triton Digital)", "service": "1plusX First-Party ID", "category": "fingerprinting", "description": "1plusX first-party data platform cookie for predictive audience identity resolution without cookies", "severity": "critical", "lifetime": "1 year", "docs_url": "https://www.1plusx.com/privacy-policy/" },
+        "_augur_uid": { "company": "Augur", "service": "Augur Identity Resolution", "category": "fingerprinting", "description": "Augur AI-powered device fingerprinting cookie for linking anonymous devices to real identities across devices and sessions", "severity": "critical", "lifetime": "2 years", "docs_url": "https://www.augur.io/privacy-policy" },
+        "_cc_id": { "company": "Crux (Lotame)", "service": "Lotame Cross-Device Graph", "category": "fingerprinting", "description": "Lotame cross-device cookie collecting browser and device signals for deterministic identity matching", "severity": "critical", "lifetime": "6 months", "docs_url": "https://www.lotame.com/about-lotame/privacy/" },
+        "_cid_yahoo": { "company": "Yahoo", "service": "Yahoo ConnectID", "category": "fingerprinting", "description": "Yahoo ConnectID cookie for deterministic identity matching using hashed email addresses from 225M+ Yahoo Mail users", "severity": "critical", "lifetime": "1 year", "docs_url": "https://legal.yahoo.com/us/en/yahoo/privacy/index.html" },
+        "_exp_did": { "company": "Experian", "service": "Experian Digital Identity", "category": "fingerprinting", "description": "Credit bureau digital identity cookie — uses credit file data on 245M+ US consumers for digital advertising and identity resolution", "severity": "critical", "lifetime": "1 year", "docs_url": "https://www.experian.com/privacy/marketing-services-privacy-policy" },
+        "_fabrick_id": { "company": "Neustar (TransUnion)", "service": "Fabrick ID", "category": "fingerprinting", "description": "Neustar Fabrick identity resolution cookie linking online identifiers to offline consumer data for cross-device targeting", "severity": "critical", "lifetime": "1 year", "docs_url": "https://www.home.neustar/privacy" },
+        "_iidt": { "company": "FingerprintJS", "service": "FingerprintJS Pro", "category": "fingerprinting", "description": "FingerprintJS device identity cookie for cross-session browser fingerprint persistence", "severity": "critical", "lifetime": "1 year", "docs_url": "https://fingerprint.com/privacy-policy/" },
+        "_netid_*": { "company": "NetID Foundation", "service": "NetID European Login", "category": "fingerprinting", "description": "European single sign-on identity cookie enabling cross-site tracking across participating European media properties", "severity": "critical", "pattern": true, "lifetime": "1 year", "docs_url": "https://netid.de/en/privacy-policy/" },
+        "_onetag_uid": { "company": "OneTag", "service": "OneTag Identity", "category": "fingerprinting", "description": "OneTag publisher monetization identity cookie for audience identification in programmatic advertising", "severity": "critical", "lifetime": "1 year", "docs_url": "https://www.onetag.com/privacy-policy/" },
+        "_publir_*": { "company": "Publir", "service": "Publir Identity", "category": "fingerprinting", "description": "Publir publisher monetization identity cookie for ad stack optimization and visitor identification", "severity": "high", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.publir.com/privacy-policy/" },
+        "_retargetly_id": { "company": "Retargetly", "service": "Retargetly DMP", "category": "fingerprinting", "description": "Retargetly Latin American data management platform cookie for audience profiling and identity resolution", "severity": "critical", "lifetime": "1 year", "docs_url": "https://retargetly.com/privacy-policy/" },
+        "_rid_lramp": { "company": "LiveRamp", "service": "LiveRamp RampID", "category": "fingerprinting", "description": "LiveRamp RampID cookie — converts PII into a deterministic identifier used across 500+ ad platforms for persistent cross-device targeting", "severity": "critical", "lifetime": "13 months", "docs_url": "https://liveramp.com/privacy/" },
+        "_rk_wallet": { "company": "Rainbow", "service": "RainbowKit Wallet Detection", "category": "fingerprinting", "description": "RainbowKit wallet detection cookie — records which crypto wallets users have installed, creating a financial technology fingerprint", "severity": "critical", "lifetime": "1 year", "docs_url": "https://rainbow.me/privacy" },
+        "_thr_id": { "company": "Throtle", "service": "Throtle Identity Resolution", "category": "fingerprinting", "description": "Throtle deterministic identity cookie — matches offline PII to online identifiers for persistent cross-device identity graphs", "severity": "critical", "lifetime": "1 year", "docs_url": "https://throtle.io/privacy/" },
+        "_tu_id": { "company": "TransUnion", "service": "TransUnion TruAudience", "category": "fingerprinting", "description": "Credit bureau identity cookie — links consumer credit file data with online identifiers for cross-device identity resolution", "severity": "critical", "lifetime": "1 year", "docs_url": "https://www.transunion.com/privacy" },
+        "_vid_t": { "company": "FingerprintJS", "service": "FingerprintJS Pro", "category": "fingerprinting", "description": "FingerprintJS visitor identifier timestamp for fingerprint freshness validation", "severity": "critical", "lifetime": "1 year", "docs_url": "https://fingerprint.com/privacy-policy/" },
+        "_w3m_*": { "company": "WalletConnect", "service": "Web3Modal Wallet Detection", "category": "fingerprinting", "description": "Web3Modal wallet connection cookie — records which cryptocurrency wallets are installed and connected, fingerprinting the user's crypto ecosystem", "severity": "critical", "pattern": true, "lifetime": "1 year", "docs_url": "https://walletconnect.com/privacy" },
+        "adform_cid": { "company": "Adform", "service": "Adform Identity", "category": "fingerprinting", "description": "Adform client identifier cookie for cross-device tracking and programmatic advertising identity resolution", "severity": "critical", "lifetime": "2 months", "docs_url": "https://site.adform.com/privacy-center/" },
+        "adnxs_uid": { "company": "Microsoft (Xandr)", "service": "Xandr Identity", "category": "fingerprinting", "description": "Microsoft Xandr (AppNexus) identity cookie for cross-publisher user identification in programmatic marketplace", "severity": "critical", "lifetime": "3 months", "docs_url": "https://www.xandr.com/privacy/platform-privacy-policy/" },
+        "adotmob_*": { "company": "Adot", "service": "Adot Mobile Identity", "category": "fingerprinting", "description": "Adot mobile identity cookie for cross-device tracking using device fingerprint and location signals", "severity": "critical", "pattern": true, "lifetime": "1 year", "docs_url": "https://we-are-adot.com/privacy/" },
+        "attribution-reporting-eligible": { "company": "Google", "service": "Attribution Reporting API (Privacy Sandbox)", "category": "fingerprinting", "description": "Chrome Attribution Reporting trigger — enables cross-site ad conversion measurement by registering attribution sources and triggers in the browser", "severity": "critical", "lifetime": "30 days", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/attribution-reporting/" },
+        "bk_*": { "company": "Oracle", "service": "Oracle BlueKai DMP", "category": "fingerprinting", "description": "Oracle BlueKai data management platform cookie for cross-device audience profiling and targeting", "severity": "critical", "pattern": true, "lifetime": "6 months", "docs_url": "https://www.oracle.com/legal/privacy/marketing-cloud-data-cloud-privacy-policy.html" },
+        "bn_device_id": { "company": "Binance", "service": "Binance Device Fingerprint", "category": "fingerprinting", "description": "Binance device fingerprint cookie for exchange security and anti-fraud device recognition", "severity": "critical", "lifetime": "1 year", "docs_url": "https://www.binance.com/en/privacy" },
+        "browsing-topics": { "company": "Google", "service": "Topics API (Privacy Sandbox)", "category": "fingerprinting", "description": "Chrome Topics API header — exposes visitor interest categories derived from recent browsing history to sites and ad tech vendors via the Sec-Browsing-Topics header", "severity": "critical", "lifetime": "3 weeks", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/topics/" },
+        "cb_device_id": { "company": "Coinbase", "service": "Coinbase Device Fingerprint", "category": "fingerprinting", "description": "Coinbase device identifier cookie for fraud prevention and cross-device account security fingerprinting", "severity": "critical", "lifetime": "1 year", "docs_url": "https://www.coinbase.com/legal/privacy" },
+        "connectId": { "company": "Yahoo/Verizon", "service": "Yahoo ConnectID", "category": "fingerprinting", "description": "Yahoo ConnectID persistent identifier for cross-site identity matching using hashed email addresses", "severity": "critical", "lifetime": "1 year", "docs_url": "https://legal.yahoo.com/xw/en/yahoo/privacy/" },
+        "criteo_fpc": { "company": "Criteo", "service": "Criteo First-Party Identity", "category": "fingerprinting", "description": "Criteo first-party cookie enabling persistent identity for retargeting when third-party cookies are blocked", "severity": "critical", "lifetime": "13 months", "docs_url": "https://www.criteo.com/privacy/" },
+        "euid": { "company": "The Trade Desk", "service": "European Unified ID", "category": "fingerprinting", "description": "The Trade Desk EUID cookie — European version of UID2 for GDPR-compliant deterministic identity using hashed email", "severity": "critical", "lifetime": "1 year", "docs_url": "https://www.thetradedesk.com/general/privacy" },
+        "euid_*": { "company": "The Trade Desk", "service": "EUID (European UID)", "category": "fingerprinting", "description": "European Unified ID cookie — same email-to-ad-ID system as UID 2.0 but marketed as GDPR-compliant persistent cross-site tracking", "severity": "critical", "pattern": true, "lifetime": "1 year", "docs_url": "https://euid.eu/en/privacy-policy" },
+        "floc_*": { "company": "Google", "service": "FLoC (Deprecated)", "category": "fingerprinting", "description": "Federated Learning of Cohorts cookie — deprecated Google experiment that grouped users into behavioral cohorts for ad targeting. Cookies may persist from earlier Chrome versions.", "severity": "high", "pattern": true, "lifetime": "7 days", "docs_url": "https://privacysandbox.com/proposals/floc/" },
+        "fpjs_*": { "company": "FingerprintJS", "service": "FingerprintJS Pro", "category": "fingerprinting", "description": "FingerprintJS browser fingerprinting cookie for highly persistent device identification", "severity": "critical", "pattern": true, "lifetime": "1 year", "docs_url": "https://fingerprint.com/privacy-policy/" },
+        "gpp_sid": { "company": "IAB Tech Lab", "service": "IAB Global Privacy Platform", "category": "fingerprinting", "description": "IAB GPP section ID cookie identifying which privacy regulation sections apply to the current user", "severity": "medium", "lifetime": "1 year", "docs_url": "https://iabtechlab.com/gpp/" },
+        "gpp_v": { "company": "IAB Tech Lab", "service": "IAB Global Privacy Platform", "category": "fingerprinting", "description": "IAB GPP version cookie tracking consent framework version for multi-jurisdiction consent management", "severity": "medium", "lifetime": "1 year", "docs_url": "https://iabtechlab.com/gpp/" },
+        "hadronId_*": { "company": "Audigent", "service": "Audigent Hadron ID", "category": "fingerprinting", "description": "Audigent Hadron real-time identity enrichment cookie combining device signals with contextual data for cookieless targeting", "severity": "critical", "pattern": true, "lifetime": "1 year", "docs_url": "https://audigent.com/privacy-policy/" },
+        "id5": { "company": "ID5", "service": "ID5 Universal ID", "category": "fingerprinting", "description": "ID5 universal identifier cookie for cross-publisher identity resolution in programmatic advertising", "severity": "critical", "lifetime": "90 days", "docs_url": "https://id5.io/privacy" },
+        "id5_sync": { "company": "ID5", "service": "ID5 Universal ID", "category": "fingerprinting", "description": "ID5 cookie sync timestamp for maintaining identity graph freshness across ad tech partners", "severity": "critical", "lifetime": "90 days", "docs_url": "https://id5.io/privacy" },
+        "idx": { "company": "Merkle/Dentsu", "service": "Merkle Identity Resolution", "category": "fingerprinting", "description": "Merkle identity resolution cookie linking online behavior to offline consumer data for people-based targeting", "severity": "critical", "lifetime": "1 year", "docs_url": "https://www.merkleinc.com/privacy" },
+        "intent_iq_*": { "company": "IntentIQ", "service": "IntentIQ Identity Resolution", "category": "fingerprinting", "description": "IntentIQ probabilistic identity resolution cookie using device signals to match visitors across publishers without login data", "severity": "critical", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.intentiq.com/privacy" },
+        "iponweb_uid": { "company": "IPONWEB (Roku)", "service": "BidSwitch Identity", "category": "fingerprinting", "description": "BidSwitch identity resolution cookie synchronizing user IDs across 300+ ad tech platforms", "severity": "critical", "lifetime": "3 months", "docs_url": "https://www.iponweb.com/privacy-policy/" },
+        "iri_*": { "company": "IRI/Circana", "service": "Circana Audience Analytics", "category": "fingerprinting", "description": "IRI/Circana purchase analytics cookie linking retail purchase data to online identifiers for CPG ad targeting", "severity": "critical", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.circana.com/privacy-policy/" },
+        "liveramp_ats": { "company": "LiveRamp", "service": "LiveRamp ATS", "category": "fingerprinting", "description": "LiveRamp Authenticated Traffic Solution cookie for deterministic cross-site identity resolution", "severity": "critical", "lifetime": "1 year", "docs_url": "https://liveramp.com/privacy/" },
+        "lotame_*": { "company": "Lotame", "service": "Lotame Panorama ID", "category": "fingerprinting", "description": "Lotame DMP cookie for Panorama ID people-based identity resolution across devices", "severity": "critical", "pattern": true, "lifetime": "13 months", "docs_url": "https://www.lotame.com/about-lotame/privacy/" },
+        "novatiq_*": { "company": "Novatiq", "service": "Novatiq Hyper ID", "category": "fingerprinting", "description": "Novatiq telecom-grade identity cookie using carrier network data for cookieless user identification", "severity": "critical", "pattern": true, "lifetime": "90 days", "docs_url": "https://www.novatiq.com/privacy-policy/" },
+        "optable_id": { "company": "Optable", "service": "Optable Identity", "category": "fingerprinting", "description": "Optable privacy-first data collaboration identity cookie for encrypted audience matching", "severity": "high", "lifetime": "1 year", "docs_url": "https://optable.co/privacy/" },
+        "panoramaId_*": { "company": "Lotame", "service": "Lotame Panorama ID", "category": "fingerprinting", "description": "Lotame Panorama ID cookie for people-based identity resolution without third-party cookies", "severity": "critical", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.lotame.com/about-lotame/privacy/" },
+        "pbjs_unifiedid": { "company": "Prebid.org", "service": "Prebid Unified ID", "category": "fingerprinting", "description": "Prebid.js unified identifier module cookie for cross-platform audience matching in header bidding", "severity": "critical", "lifetime": "90 days", "docs_url": "https://docs.prebid.org/dev-docs/modules/userId.html" },
+        "permutive_*": { "company": "Permutive", "service": "Permutive First-Party DMP", "category": "fingerprinting", "description": "Permutive edge-based data management platform cookie for first-party audience segmentation without third-party cookies", "severity": "critical", "pattern": true, "lifetime": "1 year", "docs_url": "https://permutive.com/privacy/" },
+        "ps_interest_group_*": { "company": "Google", "service": "Protected Audience API (FLEDGE)", "category": "fingerprinting", "description": "Privacy Sandbox interest group cookie storing retargeting audience membership for on-device ad auction participation", "severity": "critical", "pattern": true, "lifetime": "30 days", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/protected-audience/" },
+        "rtbh_uid": { "company": "RTB House", "service": "RTB House Retargeting", "category": "fingerprinting", "description": "RTB House deep learning retargeting identifier using AI-powered device fingerprinting for personalized ad delivery", "severity": "critical", "lifetime": "3 months", "docs_url": "https://www.rtbhouse.com/privacy-center/" },
+        "seedtag_*": { "company": "Seedtag", "service": "Seedtag Contextual AI", "category": "fingerprinting", "description": "Seedtag contextual advertising cookie combining content analysis with device signals for cookieless targeting", "severity": "high", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.seedtag.com/privacy-policy/" },
+        "sharedid": { "company": "Prebid.org", "service": "Prebid SharedID", "category": "fingerprinting", "description": "Prebid SharedID first-party cookie providing a shared user identifier across header bidding demand partners", "severity": "critical", "lifetime": "1 year", "docs_url": "https://docs.prebid.org/dev-docs/modules/sharedIdSystem.html" },
+        "tapad_*": { "company": "Tapad", "service": "Tapad Device Graph", "category": "fingerprinting", "description": "Tapad cross-device identity graph cookie linking devices to a single user profile", "severity": "critical", "pattern": true, "lifetime": "2 months", "docs_url": "https://www.tapad.com/privacy" },
+        "tu_*": { "company": "TransUnion", "service": "TransUnion TruAudience", "category": "fingerprinting", "description": "TransUnion TruAudience cookie linking credit bureau consumer data to digital advertising identifiers for identity resolution", "severity": "critical", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.transunion.com/privacy" },
+        "uid": { "company": "Adform", "service": "Adform Cross-Device", "category": "fingerprinting", "description": "Adform cross-device identifier cookie for linking multiple devices to a single advertising profile", "severity": "critical", "lifetime": "2 months", "docs_url": "https://site.adform.com/privacy-center/" },
+        "uid2_*": { "company": "The Trade Desk", "service": "UID 2.0 (Unified ID)", "category": "fingerprinting", "description": "UID 2.0 encrypted email-based identifier for post-cookie cross-site ad tracking — converts email addresses into persistent advertising IDs", "severity": "critical", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.thetradedesk.com/general/privacy" },
+        "utiq_*": { "company": "Utiq", "service": "Utiq Telco Consent ID", "category": "fingerprinting", "description": "Utiq European telco consent cookie using network-level identity for authenticated advertising", "severity": "critical", "pattern": true, "lifetime": "90 days", "docs_url": "https://utiq.com/privacy/" },
+        "wallet_connected_*": { "company": "Various DApps", "service": "Web3 Wallet Detection", "category": "fingerprinting", "description": "Web3 dApp cookie recording connected wallet addresses for persistent user identification across sessions", "severity": "critical", "pattern": true, "lifetime": "1 year", "docs_url": "https://ethereum.org/en/privacy-policy/" },
+        "web3_session_*": { "company": "Various DApps", "service": "Web3 Session Fingerprint", "category": "fingerprinting", "description": "Web3 application session cookie linking wallet signatures to browser fingerprint for identity persistence", "severity": "critical", "pattern": true, "lifetime": "session", "docs_url": "https://ethereum.org/en/privacy-policy/" },
+        "zeotap_uid": { "company": "Zeotap", "service": "Zeotap ID+", "category": "fingerprinting", "description": "Zeotap deterministic identity resolution cookie linking device signals to individual user profiles", "severity": "critical", "lifetime": "1 year", "docs_url": "https://zeotap.com/privacy-policy/" }
+    },
+    "domains": {
+        "1plusx.com": { "company": "1plusX (Triton Digital)", "service": "1plusX Platform", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.1plusx.com/privacy-policy/" },
+        "accessibe.com/fingerprint": { "company": "accessiBe", "service": "accessiBe Device Fingerprinting", "category": "fingerprinting", "severity": "critical", "note": "accessiBe accessibility overlay fingerprinting — collects device and browser characteristics under the guise of accessibility adaptation, creating persistent device fingerprints. Disability rights advocates have widely criticized this practice.", "docs_url": "https://accessibe.com/privacy-policy" },
+        "acr.lgads.tv": { "company": "LG Electronics", "service": "LG ACR (Automatic Content Recognition)", "category": "fingerprinting", "severity": "critical", "note": "LG Smart TV automatic content recognition — monitors and fingerprints content displayed on LG webOS TVs for viewer profiling and cross-device ad targeting", "docs_url": "https://www.lgads.tv/privacy-policy/" },
+        "acr.samsungads.com": { "company": "Samsung", "service": "Samsung ACR (Automatic Content Recognition)", "category": "fingerprinting", "severity": "critical", "note": "Samsung Smart TV automatic content recognition — fingerprints TV content for viewer profiling and ad targeting across Samsung's 50M+ connected TVs", "docs_url": "https://www.samsung.com/us/account/privacy-policy/" },
+        "adsrvr.org/identity": { "company": "The Trade Desk", "service": "Trade Desk Unified ID 2.0", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.thetradedesk.com/general/privacy" },
+        "aggregationservice.googleapis.com": { "company": "Google", "service": "Private Aggregation API (Privacy Sandbox)", "category": "fingerprinting", "severity": "high", "note": "Private Aggregation API — aggregation service for Privacy Sandbox APIs, enables noisy aggregate measurement of cross-site data without individual user tracking", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/private-aggregation/" },
+        "alchemy.com": { "company": "Alchemy", "service": "Alchemy RPC Node", "category": "fingerprinting", "severity": "high", "note": "Alchemy RPC infrastructure — alternative to Infura; receives all wallet queries and transaction data from connected dApps", "docs_url": "https://www.alchemy.com/policies/privacy-policy" },
+        "api.augur.io": { "company": "Augur", "service": "Augur API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.augur.io/privacy-policy" },
+        "api.chainalysis.com/identity": { "company": "Chainalysis", "service": "Chainalysis KYT Identity", "category": "fingerprinting", "severity": "critical", "note": "Chainalysis Know Your Transaction — government blockchain surveillance tool linking cryptocurrency wallet addresses to real-world identities. Used by IRS, FBI, HMRC, and law enforcement in 60+ countries.", "docs_url": "https://www.chainalysis.com/privacy-policy/" },
+        "api.connectid.yahoo.com": { "company": "Yahoo", "service": "Yahoo ConnectID API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://legal.yahoo.com/us/en/yahoo/privacy/index.html" },
+        "api.debank.com": { "company": "DeBank", "service": "DeBank API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://debank.com/privacy" },
+        "api.fingerprint.com": { "company": "FingerprintJS", "service": "FingerprintJS API v3", "category": "fingerprinting", "severity": "critical", "docs_url": "https://fingerprint.com/privacy-policy/" },
+        "api.fpjs.io": { "company": "FingerprintJS", "service": "FingerprintJS Pro", "category": "fingerprinting", "severity": "critical", "docs_url": "https://fingerprint.com/privacy-policy/" },
+        "api.getambassador.com/fingerprint": { "company": "Ambassador", "service": "GetAmbassador Fingerprinting", "category": "fingerprinting", "severity": "critical", "note": "Aggressive browser fingerprinting — collects canvas, WebGL, AudioContext, screen, fonts, plugins, and hardware data without explicit consent", "docs_url": "https://www.getambassador.com/privacy-policy" },
+        "api.intentiq.com": { "company": "Intent IQ", "service": "Intent IQ Identity API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.intentiq.com/privacy-policy/" },
+        "api.metamask.io": { "company": "Consensys", "service": "MetaMask API", "category": "fingerprinting", "severity": "critical", "note": "MetaMask wallet API — sends wallet addresses, token balances, and transaction data to Consensys infrastructure", "docs_url": "https://consensys.io/privacy-policy" },
+        "api.nansen.ai/labels": { "company": "Nansen", "service": "Nansen Wallet Labels", "category": "fingerprinting", "severity": "critical", "note": "Nansen wallet labeling — identifies and de-anonymizes cryptocurrency wallet owners by linking on-chain activity patterns to known entities", "docs_url": "https://www.nansen.ai/privacy-policy" },
+        "api.netid.de": { "company": "NetID Foundation", "service": "NetID API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://netid.de/en/privacy-policy/" },
+        "api.novatiq.com": { "company": "Novatiq", "service": "Novatiq Zenith ID API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.novatiq.com/privacy-policy/" },
+        "api.permutive.com": { "company": "Permutive", "service": "Permutive First-Party DMP", "category": "fingerprinting", "severity": "critical", "note": "Permutive edge-based DMP using first-party data and device signals for audience targeting", "docs_url": "https://permutive.com/privacy/" },
+        "api.phantom.app": { "company": "Phantom", "service": "Phantom Wallet API", "category": "fingerprinting", "severity": "high", "note": "Phantom Solana wallet API — sends wallet addresses, token queries, and transaction data to Phantom servers", "docs_url": "https://phantom.app/privacy" },
+        "api.rainbow.me": { "company": "Rainbow", "service": "Rainbow Wallet API", "category": "fingerprinting", "severity": "medium", "docs_url": "https://rainbow.me/privacy" },
+        "api.rampid.liveramp.com": { "company": "LiveRamp", "service": "LiveRamp RampID API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://liveramp.com/privacy/" },
+        "api.rarible.com": { "company": "Rarible", "service": "Rarible API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://rarible.com/privacy-policy" },
+        "api.throtle.io": { "company": "Throtle", "service": "Throtle API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://throtle.io/privacy/" },
+        "api.trustwallet.com": { "company": "Trust Wallet (Binance)", "service": "Trust Wallet API", "category": "fingerprinting", "severity": "high", "note": "Trust Wallet API (Binance-owned) — wallet addresses and transaction data sent to Binance infrastructure", "docs_url": "https://trustwallet.com/privacy-policy" },
+        "api.utiq.com": { "company": "Utiq", "service": "Utiq Consent Signal API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://utiq.com/privacy/" },
+        "api.verisk.com": { "company": "Verisk", "service": "Verisk Identity API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.verisk.com/privacy-policies/" },
+        "api.wallet.coinbase.com": { "company": "Coinbase", "service": "Coinbase Wallet API", "category": "fingerprinting", "severity": "high", "docs_url": "https://www.coinbase.com/legal/privacy" },
+        "api.zapper.xyz": { "company": "Zapper", "service": "Zapper API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://zapper.xyz/privacy" },
+        "api.zeotap.com": { "company": "Zeotap", "service": "Zeotap ID+ API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://zeotap.com/privacy-policy/" },
+        "api.zerion.io": { "company": "Zerion", "service": "Zerion API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://zerion.io/privacy" },
+        "ats.rlcdn.com": { "company": "LiveRamp", "service": "LiveRamp ATS Envelope", "category": "fingerprinting", "severity": "critical", "docs_url": "https://liveramp.com/privacy/" },
+        "attribution-reporting.googleapis.com": { "company": "Google", "service": "Attribution Reporting API (Privacy Sandbox)", "category": "fingerprinting", "severity": "critical", "note": "Attribution Reporting API — enables cross-site ad conversion measurement without third-party cookies by using browser-mediated attribution with noise and aggregation", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/attribution-reporting/" },
+        "auction.googleapis.com": { "company": "Google", "service": "Protected Audience API (FLEDGE)", "category": "fingerprinting", "severity": "critical", "note": "Protected Audience (formerly FLEDGE) — moves ad auction logic into the browser, creating interest groups based on browsing behavior for on-device retargeting without cookies", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/protected-audience/" },
+        "audigent.com": { "company": "Audigent", "service": "Audigent Identity Hub", "category": "fingerprinting", "severity": "critical", "docs_url": "https://audigent.com/privacy-policy/" },
+        "beacon.krxd.net": { "company": "Salesforce DMP", "service": "Krux/Salesforce DMP", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.salesforce.com/products/marketing-cloud/sfmc/salesforce-dmp/" },
+        "brave.com/privacy-sandbox": { "company": "Brave", "service": "Brave Privacy-Preserving Ads", "category": "fingerprinting", "severity": "medium", "note": "Brave browser privacy-preserving ad system — matches ads locally on-device using browsing history without sending data to external servers", "docs_url": "https://brave.com/privacy/" },
+        "cdn.1plusx.com": { "company": "1plusX (Triton Digital)", "service": "1plusX CDN", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.1plusx.com/privacy-policy/" },
+        "cdn.51degrees.com": { "company": "51Degrees", "service": "51Degrees Device Detection", "category": "fingerprinting", "severity": "critical", "note": "High-accuracy device detection — identifies device properties from HTTP headers using a database of 250M+ device combinations for fingerprint-based identification", "docs_url": "https://51degrees.com/terms/privacy" },
+        "cdn.adform.net": { "company": "Adform", "service": "Adform Ad Platform", "category": "fingerprinting", "severity": "critical", "note": "European ad tech platform — combines device fingerprinting with cross-device identity resolution for programmatic advertising", "docs_url": "https://site.adform.com/privacy-center/" },
+        "cdn.adnuntius.com": { "company": "Adnuntius", "service": "Adnuntius Ad Server", "category": "fingerprinting", "severity": "high", "note": "Scandinavian ad server — uses first-party data and device signals for cookieless ad targeting in Nordic markets", "docs_url": "https://adnuntius.com/privacy/" },
+        "cdn.audigent.com": { "company": "Audigent", "service": "Audigent Identity Hub CDN", "category": "fingerprinting", "severity": "critical", "docs_url": "https://audigent.com/privacy-policy/" },
+        "cdn.augur.io": { "company": "Augur", "service": "Augur Identity Resolution", "category": "fingerprinting", "severity": "critical", "note": "AI-powered device fingerprinting — uses machine learning to link anonymous devices to real identities, building cross-device identity graphs from browser fingerprints and behavioral patterns", "docs_url": "https://www.augur.io/privacy-policy" },
+        "cdn.botd.io": { "company": "FingerprintJS", "service": "BotD Bot Detection", "category": "fingerprinting", "severity": "critical", "note": "Made by FingerprintJS — open-source bot detection that collects browser fingerprint signals (canvas, WebGL, audio, fonts) identical to tracking fingerprints. Dual-use: blocks bots while enabling user identification.", "docs_url": "https://fingerprint.com/privacy-policy/" },
+        "cdn.browscap.org": { "company": "browscap", "service": "Browser Capabilities Project", "category": "fingerprinting", "severity": "high", "note": "Open-source browser detection database — maps User-Agent strings to browser and device capabilities for server-side fingerprinting", "docs_url": "https://browscap.org/" },
+        "cdn.clientjs.org": { "company": "ClientJS", "service": "ClientJS Fingerprinting Library", "category": "fingerprinting", "severity": "critical", "note": "Open-source browser fingerprinting library — collects screen resolution, timezone, plugins, fonts, canvas, WebGL, and AudioContext to generate unique device fingerprints. Widely used for stateless tracking.", "docs_url": "https://clientjs.org/" },
+        "cdn.connectid.yahoo.com": { "company": "Yahoo", "service": "Yahoo ConnectID", "category": "fingerprinting", "severity": "critical", "note": "Yahoo post-cookie identity — uses hashed email addresses from Yahoo Mail's 225M+ users to enable cross-site advertising tracking via deterministic identity matching", "docs_url": "https://legal.yahoo.com/us/en/yahoo/privacy/index.html" },
+        "cdn.cookielaw.org/scripttemplates": { "company": "OneTrust", "service": "OneTrust Device Fingerprint", "category": "fingerprinting", "severity": "high", "note": "OneTrust consent verification may use device fingerprinting for consent fraud prevention", "docs_url": "https://www.onetrust.com/privacy/" },
+        "cdn.creativecdn.com": { "company": "RTB House", "service": "RTB House Retargeting", "category": "fingerprinting", "severity": "critical", "note": "RTB House deep learning retargeting — uses AI-powered device and behavioral fingerprinting for ad personalization without traditional cookies", "docs_url": "https://www.rtbhouse.com/privacy-center/" },
+        "cdn.creativecdn.com/tags": { "company": "RTB House", "service": "RTB House Deep Learning Retargeting", "category": "fingerprinting", "severity": "critical", "note": "RTB House uses deep learning AI for cookieless retargeting by analyzing browsing behavior patterns for user identification without traditional tracking", "docs_url": "https://www.rtbhouse.com/privacy-center/" },
+        "cdn.debank.com": { "company": "DeBank", "service": "DeBank Web3 Social", "category": "fingerprinting", "severity": "critical", "note": "Web3 social portfolio platform — tracks wallet addresses, DeFi positions, and NFT holdings to build public financial profiles. Makes crypto wealth transparent and trackable.", "docs_url": "https://debank.com/privacy" },
+        "cdn.deviceatlas.com": { "company": "DeviceAtlas (Afilias)", "service": "DeviceAtlas Device Detection", "category": "fingerprinting", "severity": "critical", "note": "Server-side device detection library — identifies device type, browser, OS from User-Agent and Client Hints for content adaptation, also enabling device-level fingerprinting", "docs_url": "https://deviceatlas.com/privacy-policy" },
+        "cdn.euid.eu": { "company": "The Trade Desk", "service": "EUID (European UID)", "category": "fingerprinting", "severity": "critical", "note": "European version of UID 2.0 — same cross-site tracking via hashed emails but designed to comply with GDPR. Still enables the same surveillance advertising model in European markets.", "docs_url": "https://euid.eu/en/privacy-policy" },
+        "cdn.evercookie.com": { "company": "Evercookie", "service": "Evercookie Persistent Tracking", "category": "fingerprinting", "severity": "critical", "note": "Zombie cookie library — stores identifiers in 10+ browser storage mechanisms to resist deletion", "docs_url": "https://samy.pl/evercookie/" },
+        "cdn.experian.com/marketing": { "company": "Experian", "service": "Experian Digital Identity", "category": "fingerprinting", "severity": "critical", "note": "Credit bureau identity resolution — uses credit file data on 245M+ US consumers to power digital advertising targeting. Your credit bureau data is being used to serve you ads.", "docs_url": "https://www.experian.com/privacy/marketing-services-privacy-policy" },
+        "cdn.fabrick.neustar.biz": { "company": "Neustar (TransUnion)", "service": "Fabrick CDN", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.home.neustar/privacy" },
+        "cdn.fingerprintjs.com": { "company": "FingerprintJS", "service": "FingerprintJS CDN", "category": "fingerprinting", "severity": "critical", "docs_url": "https://fingerprint.com/privacy-policy/" },
+        "cdn.foundation.app": { "company": "Foundation", "service": "Foundation NFT Tracking", "category": "fingerprinting", "severity": "critical", "note": "NFT marketplace — links wallet addresses to browsing behavior, bid history, and social profiles, creating identity profiles from supposedly pseudonymous crypto activity", "docs_url": "https://foundation.app/privacy" },
+        "cdn.heapanalytics.com/fingerprint": { "company": "Heap", "service": "Heap Auto-Capture Fingerprint", "category": "fingerprinting", "severity": "high", "note": "Heap auto-captures all user interactions including device fingerprint signals for session stitching", "docs_url": "https://www.heap.io/privacy" },
+        "cdn.imprintjs.com": { "company": "ImprintJS", "service": "ImprintJS Device Fingerprint", "category": "fingerprinting", "severity": "critical", "note": "Device fingerprinting library — generates unique browser fingerprints from hardware and software characteristics, designed to survive cookie deletion and private browsing", "docs_url": "" },
+        "cdn.inscape.tv": { "company": "Vizio", "service": "Vizio Inscape ACR SDK", "category": "fingerprinting", "severity": "critical", "note": "Vizio Inscape automatic content recognition — fingerprints audio/video content displayed on TV screens every second, creating a detailed viewing profile. FTC fined Vizio $2.2M for collecting this data without consent.", "docs_url": "https://www.vizio.com/en/terms/privacy-policy" },
+        "cdn.intentiq.com": { "company": "Intent IQ", "service": "Intent IQ Identity CDN", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.intentiq.com/privacy-policy/" },
+        "cdn.ipaddressguide.com/fingerprint": { "company": "IP Address Guide", "service": "IP Fingerprinting", "category": "fingerprinting", "severity": "critical", "note": "IP-based fingerprinting service — combines IP geolocation with browser characteristics for cookieless user identification", "docs_url": "" },
+        "cdn.iponweb.com": { "company": "IPONWEB (Roku)", "service": "BidSwitch Identity", "category": "fingerprinting", "severity": "critical", "note": "BidSwitch — cookie matching and identity resolution platform connecting 300+ demand and supply partners for cross-platform ad targeting", "docs_url": "https://www.iponweb.com/privacy-policy/" },
+        "cdn.krxd.net": { "company": "Salesforce DMP", "service": "Krux/Salesforce DMP Fingerprint", "category": "fingerprinting", "severity": "critical", "note": "Cross-device fingerprinting and identity resolution for Salesforce Data Management Platform", "docs_url": "https://www.salesforce.com/products/marketing-cloud/sfmc/salesforce-dmp/" },
+        "cdn.lotame.com": { "company": "Lotame", "service": "Lotame Panorama ID", "category": "fingerprinting", "severity": "critical", "note": "Lotame DMP using Panorama ID for people-based identity across devices and browsers", "docs_url": "https://www.lotame.com/about-lotame/privacy/" },
+        "cdn.netid.de": { "company": "NetID Foundation", "service": "NetID European Login", "category": "fingerprinting", "severity": "critical", "note": "European single sign-on identity — backed by RTL, ProSiebenSat.1, and Mediengruppe. Creates cross-site identity through login, enabling persistent tracking across participating European media sites.", "docs_url": "https://netid.de/en/privacy-policy/" },
+        "cdn.onetag.com": { "company": "OneTag", "service": "OneTag CDN", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.onetag.com/privacy-policy/" },
+        "cdn.optable.co": { "company": "Optable", "service": "Optable CDN", "category": "fingerprinting", "severity": "high", "docs_url": "https://optable.co/privacy/" },
+        "cdn.optable.co/identity": { "company": "Optable", "service": "Optable Identity Resolution", "category": "fingerprinting", "severity": "high", "note": "Optable privacy-first data collaboration — uses encrypted identity matching for audience activation across publishers without sharing raw data", "docs_url": "https://optable.co/privacy/" },
+        "cdn.oracle.com/idgraph": { "company": "Oracle", "service": "Oracle ID Graph CDN", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.oracle.com/legal/privacy/" },
+        "cdn.panoramaid.lotame.com": { "company": "Lotame", "service": "Lotame Panorama ID", "category": "fingerprinting", "severity": "critical", "note": "Lotame's post-cookie identity solution — uses probabilistic matching and machine learning to link identifiers across devices and browsers without traditional cookies. Claims privacy but enables cross-site tracking.", "docs_url": "https://www.lotame.com/about-lotame/privacy/" },
+        "cdn.permutive.com": { "company": "Permutive", "service": "Permutive CDN", "category": "fingerprinting", "severity": "critical", "docs_url": "https://permutive.com/privacy/" },
+        "cdn.privacysandbox.com": { "company": "Google", "service": "Privacy Sandbox CDN", "category": "fingerprinting", "severity": "critical", "docs_url": "https://privacysandbox.com/" },
+        "cdn.rainbowkit.com": { "company": "Rainbow", "service": "RainbowKit Wallet Detection", "category": "fingerprinting", "severity": "critical", "note": "Web3 wallet connection kit — detects and fingerprints installed cryptocurrency wallets by probing browser APIs, revealing user's crypto wallet ecosystem and financial tool preferences", "docs_url": "https://rainbow.me/privacy" },
+        "cdn.rampid.liveramp.com": { "company": "LiveRamp", "service": "LiveRamp RampID", "category": "fingerprinting", "severity": "critical", "note": "LiveRamp's core identity product — converts PII (email, phone, address) into a deterministic identifier used for cross-device ad targeting across 500+ platforms. The backbone of post-cookie surveillance.", "docs_url": "https://liveramp.com/privacy/" },
+        "cdn.rarible.com": { "company": "Rarible", "service": "Rarible NFT Marketplace Tracking", "category": "fingerprinting", "severity": "critical", "note": "NFT marketplace — tracks wallet addresses, transaction history, and browsing behavior across NFT collections. Links on-chain identity to web browsing patterns.", "docs_url": "https://rarible.com/privacy-policy" },
+        "cdn.seedtag.com": { "company": "Seedtag", "service": "Seedtag Contextual AI", "category": "fingerprinting", "severity": "high", "note": "European contextual advertising — uses computer vision AI to analyze page content and combines with device signals for cookieless ad targeting", "docs_url": "https://www.seedtag.com/privacy-policy/" },
+        "cdn.superrare.com": { "company": "SuperRare", "service": "SuperRare NFT Analytics", "category": "fingerprinting", "severity": "critical", "note": "Art NFT marketplace — tracks wallet activity, collection browsing, and bidding patterns. Links on-chain financial behavior to web browsing identity.", "docs_url": "https://superrare.com/privacy" },
+        "cdn.throtle.io": { "company": "Throtle", "service": "Throtle Identity Resolution", "category": "fingerprinting", "severity": "critical", "note": "Deterministic identity resolution — matches offline PII (names, addresses, emails) to online identifiers and device IDs, building persistent cross-device identity graphs from consumer data", "docs_url": "https://throtle.io/privacy/" },
+        "cdn.truaudience.com": { "company": "TransUnion", "service": "TransUnion TruAudience CDN", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.transunion.com/privacy" },
+        "cdn.uidapi.com": { "company": "The Trade Desk", "service": "UID 2.0 (Unified ID)", "category": "fingerprinting", "severity": "critical", "note": "Post-cookie identity framework — converts email addresses into encrypted identifiers for cross-site ad tracking. Marketed as privacy-preserving but still enables persistent cross-site user tracking.", "docs_url": "https://www.thetradedesk.com/general/privacy" },
+        "cdn.verisk.com/marketing": { "company": "Verisk", "service": "Verisk Marketing Solutions", "category": "fingerprinting", "severity": "critical", "note": "Insurance data company turned identity provider — uses insurance and financial data on 330M+ consumers for identity resolution and audience targeting in advertising", "docs_url": "https://www.verisk.com/privacy-policies/" },
+        "cdn.wagmi.sh": { "company": "wagmi", "service": "wagmi Wallet Fingerprinting", "category": "fingerprinting", "severity": "critical", "note": "React hooks library for Ethereum — detects installed wallet providers and chain configurations, creating a crypto-financial fingerprint of the user's Web3 setup", "docs_url": "https://wagmi.sh/" },
+        "cdn.web3modal.com": { "company": "WalletConnect", "service": "Web3Modal Wallet Detection", "category": "fingerprinting", "severity": "critical", "note": "Web3 wallet connection library — probes for installed cryptocurrency wallets (MetaMask, Coinbase, Trust) by checking window.ethereum and other provider objects, fingerprinting which wallets users have installed", "docs_url": "https://walletconnect.com/privacy" },
+        "cdn.zapper.xyz": { "company": "Zapper", "service": "Zapper DeFi Portfolio Tracking", "category": "fingerprinting", "severity": "critical", "note": "DeFi portfolio tracker — monitors wallet balances, transaction history, and DeFi positions across chains. Creates comprehensive financial profiles from blockchain data linked to web sessions.", "docs_url": "https://zapper.xyz/privacy" },
+        "cdn.zerion.io": { "company": "Zerion", "service": "Zerion DeFi Tracking", "category": "fingerprinting", "severity": "critical", "note": "DeFi portfolio manager — monitors wallet transactions, token balances, and protocol interactions across multiple chains, building comprehensive financial profiles", "docs_url": "https://zerion.io/privacy" },
+        "challenge.okx.com": { "company": "OKX", "service": "OKX Device Verification", "category": "fingerprinting", "severity": "critical", "note": "OKX exchange challenge endpoint using device fingerprinting for account security verification", "docs_url": "https://www.okx.com/privacy" },
+        "collector.gemini.com": { "company": "Gemini Trust", "service": "Gemini Device Collector", "category": "fingerprinting", "severity": "critical", "note": "Gemini exchange device data collector for regulatory compliance and fraud detection fingerprinting", "docs_url": "https://www.gemini.com/legal/privacy-policy" },
+        "connect.id5.io": { "company": "ID5", "service": "ID5 Universal ID", "category": "fingerprinting", "severity": "critical", "docs_url": "https://id5.io/privacy" },
+        "device.binance.com": { "company": "Binance", "service": "Binance Device Fingerprint", "category": "fingerprinting", "severity": "critical", "note": "Binance device fingerprinting endpoint for exchange security and cross-device identity verification", "docs_url": "https://www.binance.com/en/privacy" },
+        "drawbridge.com": { "company": "Drawbridge", "service": "Drawbridge Cross-Device", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.drawbridge.com/privacy/" },
+        "edge.privacy.microsoft.com": { "company": "Microsoft", "service": "Microsoft Edge Privacy APIs", "category": "fingerprinting", "severity": "high", "note": "Microsoft Edge browser privacy API endpoints for ad selection, conversion measurement, and cross-site tracking alternatives", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
+        "eth-mainnet.alchemyapi.io": { "company": "Alchemy", "service": "Alchemy Ethereum Mainnet", "category": "fingerprinting", "severity": "high", "docs_url": "https://www.alchemy.com/policies/privacy-policy" },
+        "fabrick.neustar.biz": { "company": "Neustar (TransUnion)", "service": "Fabrick Identity Graph", "category": "fingerprinting", "severity": "critical", "note": "Neustar Fabrick identity graph linking online identifiers to offline consumer records for people-based targeting", "docs_url": "https://www.home.neustar/privacy" },
+        "fencedframes.googleapis.com": { "company": "Google", "service": "Fenced Frames (Privacy Sandbox)", "category": "fingerprinting", "severity": "high", "note": "Fenced Frames — isolated rendering context for ads that prevents the embedding site from accessing the ad's network data, but still enables cross-site ad serving", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/fenced-frame/" },
+        "fingerprint.com": { "company": "FingerprintJS", "service": "FingerprintJS Pro", "category": "fingerprinting", "severity": "critical", "docs_url": "https://fingerprint.com/privacy-policy/" },
+        "fpjs.io": { "company": "FingerprintJS", "service": "FingerprintJS Pro", "category": "fingerprinting", "severity": "critical", "docs_url": "https://fingerprint.com/privacy-policy/" },
+        "id.rlcdn.com": { "company": "LiveRamp", "service": "LiveRamp ATS Identity", "category": "fingerprinting", "severity": "critical", "docs_url": "https://liveramp.com/privacy/" },
+        "id.roku.com": { "company": "Roku", "service": "Roku Identity Graph", "category": "fingerprinting", "severity": "critical", "note": "Roku identity resolution — links Roku device IDs to household identity for cross-screen ad targeting using ACR data from 80M+ active accounts", "docs_url": "https://www.roku.com/en-us/legal/privacy-policy" },
+        "id5-sync.com": { "company": "ID5", "service": "ID5 Cookie Sync", "category": "fingerprinting", "severity": "critical", "docs_url": "https://id5.io/privacy" },
+        "identity.experian.com": { "company": "Experian", "service": "Experian ConsumerView", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.experian.com/privacy/marketing-services-privacy-policy" },
+        "identity.transunion.com": { "company": "TransUnion", "service": "TransUnion TruAudience", "category": "fingerprinting", "severity": "critical", "note": "Credit bureau turned identity graph — TruAudience links consumer credit file data with online identifiers, cookies, and device IDs to enable identity resolution using financial data", "docs_url": "https://www.transunion.com/privacy" },
+        "identity.xandr.com": { "company": "Microsoft (Xandr)", "service": "Xandr Identity Service", "category": "fingerprinting", "severity": "critical", "note": "Microsoft Xandr identity resolution — links AppNexus user IDs across publishers for cross-site advertising", "docs_url": "https://www.xandr.com/privacy/platform-privacy-policy/" },
+        "idgraph.oracle.com": { "company": "Oracle", "service": "Oracle ID Graph", "category": "fingerprinting", "severity": "critical", "note": "Oracle cross-device identity graph — links devices, browsers, and identifiers across billions of data points from Oracle Data Cloud, BlueKai, and AddThis to build persistent identity profiles", "docs_url": "https://www.oracle.com/legal/privacy/" },
+        "idx.liadm.com": { "company": "LiveRamp", "service": "LiveRamp Identity Link", "category": "fingerprinting", "severity": "critical", "docs_url": "https://liveramp.com/privacy/" },
+        "infura.io": { "company": "Consensys", "service": "Infura RPC Node", "category": "fingerprinting", "severity": "critical", "note": "MetaMask default RPC endpoint — every wallet balance check, token query, and transaction sends user IP and wallet address to Consensys (Infura) servers. De-anonymizes crypto users at the infrastructure level.", "docs_url": "https://consensys.io/privacy-policy" },
+        "intentiq.com": { "company": "Intent IQ", "service": "Intent IQ Device ID", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.intentiq.com/privacy-policy/" },
+        "ipa.apple.com": { "company": "Apple", "service": "Apple Private Click Measurement", "category": "fingerprinting", "severity": "medium", "note": "Apple Private Click Measurement — Safari's privacy-preserving ad attribution API with limited cross-site data, alternative to Google's Attribution Reporting", "docs_url": "https://webkit.org/blog/11529/introducing-private-click-measurement-pcm/" },
+        "liveintent.com/idex": { "company": "LiveIntent", "service": "LiveIntent IDEX Identity Exchange", "category": "fingerprinting", "severity": "critical", "note": "LiveIntent Identity Exchange — matches email addresses across 250M+ newsletters to create deterministic identity graph for cookieless ad targeting", "docs_url": "https://www.liveintent.com/privacy-policy/" },
+        "liveramp.com": { "company": "LiveRamp", "service": "LiveRamp Identity Platform", "category": "fingerprinting", "severity": "critical", "note": "LiveRamp connects offline and online data using deterministic identity matching", "docs_url": "https://liveramp.com/privacy/" },
+        "mainnet.infura.io": { "company": "Consensys", "service": "Infura Ethereum Mainnet", "category": "fingerprinting", "severity": "critical", "docs_url": "https://consensys.io/privacy-policy" },
+        "match.prod.bidr.io": { "company": "Beeswax (Comcast)", "service": "Beeswax Cookie Match", "category": "fingerprinting", "severity": "critical", "note": "Comcast-owned DSP with cookie matching — synchronizes user identities across Comcast's advertising ecosystem including FreeWheel and NBCUniversal", "docs_url": "https://www.beeswax.com/privacy/" },
+        "nft.api.cx.metamask.io": { "company": "Consensys", "service": "MetaMask NFT API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://consensys.io/privacy-policy" },
+        "nonid.liveintent.com": { "company": "LiveIntent", "service": "LiveIntent Non-ID Resolution", "category": "fingerprinting", "severity": "critical", "note": "LiveIntent non-ID resolution — cookieless identity matching using email engagement signals and device fingerprinting", "docs_url": "https://www.liveintent.com/privacy-policy/" },
+        "novatiq.com": { "company": "Novatiq", "service": "Novatiq Zenith ID", "category": "fingerprinting", "severity": "critical", "note": "Novatiq telco-verified identity platform for cookieless audience identification", "docs_url": "https://www.novatiq.com/privacy-policy/" },
+        "onetag.com": { "company": "OneTag", "service": "OneTag Publisher Identity", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.onetag.com/privacy-policy/" },
+        "optable.co": { "company": "Optable", "service": "Optable Data Collaboration", "category": "fingerprinting", "severity": "high", "docs_url": "https://optable.co/privacy/" },
+        "parakeet.azurewebsites.net": { "company": "Microsoft", "service": "PARAKEET (Microsoft Privacy Sandbox)", "category": "fingerprinting", "severity": "high", "note": "Microsoft PARAKEET proposal — alternative to Google's Privacy Sandbox using a proxy-based approach where Microsoft intermediates between advertisers and users", "docs_url": "https://github.com/nickhbg/nickhbg.github.io/blob/master/nickhbg-parakeet/README.md" },
+        "pippio.com": { "company": "LiveRamp (Pippio)", "service": "LiveRamp Pippio", "category": "fingerprinting", "severity": "critical", "docs_url": "https://liveramp.com/privacy/" },
+        "pixel.tapad.com": { "company": "Tapad", "service": "Tapad Device Graph", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.tapad.com/privacy" },
+        "prebid.adnxs.com": { "company": "Microsoft (Xandr)", "service": "Xandr Prebid Server", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.xandr.com/privacy/platform-privacy-policy/" },
+        "privacysandbox.googleapis.com": { "company": "Google", "service": "Google Privacy Sandbox API", "category": "fingerprinting", "severity": "critical", "note": "Google Privacy Sandbox central endpoint — coordinates Topics API, Attribution Reporting, Protected Audience, and other post-cookie tracking APIs that replace third-party cookies with browser-mediated surveillance", "docs_url": "https://privacysandbox.com/" },
+        "reactor.chainalysis.com": { "company": "Chainalysis", "service": "Chainalysis Reactor", "category": "fingerprinting", "severity": "critical", "note": "Chainalysis Reactor investigation tool — clusters wallet addresses, maps transaction flows, and links blockchain activity to real-world entities for law enforcement", "docs_url": "https://www.chainalysis.com/privacy-policy/" },
+        "reports.attribution-reporting.googleapis.com": { "company": "Google", "service": "Attribution Reporting Reports", "category": "fingerprinting", "severity": "critical", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/attribution-reporting/" },
+        "retargetly.com": { "company": "Retargetly", "service": "Retargetly LATAM DMP", "category": "fingerprinting", "severity": "critical", "note": "Latin American data management platform for audience profiling across regional markets", "docs_url": "https://retargetly.com/privacy-policy/" },
+        "sdk.privacy-center.org": { "company": "IAB Tech Lab", "service": "IAB GPP (Global Privacy Platform)", "category": "fingerprinting", "severity": "medium", "note": "IAB Global Privacy Platform — standardizes consent signals but also enables identity resolution through consent-based tracking frameworks", "docs_url": "https://iabtechlab.com/gpp/" },
+        "secure.adnxs.com": { "company": "Microsoft (Xandr)", "service": "Xandr Ad Serving", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.xandr.com/privacy/platform-privacy-policy/" },
+        "security.kraken.com": { "company": "Kraken", "service": "Kraken Device Verification", "category": "fingerprinting", "severity": "critical", "note": "Kraken exchange device verification endpoint using browser fingerprinting for account security", "docs_url": "https://www.kraken.com/legal/privacy" },
+        "sharedid.org": { "company": "Prebid/SharedID", "service": "SharedID (Prebid)", "category": "fingerprinting", "severity": "critical", "note": "Prebid SharedID provides first-party identity for header bidding across publishers", "docs_url": "https://docs.prebid.org/dev-docs/modules/userid-submodules/sharedid.html" },
+        "sharedstorageapi.googleapis.com": { "company": "Google", "service": "Shared Storage API (Privacy Sandbox)", "category": "fingerprinting", "severity": "high", "note": "Shared Storage API — allows cross-site data storage in the browser without direct site access, enabling frequency capping, A/B testing, and creative rotation across sites", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/shared-storage/" },
+        "starknet.io": { "company": "StarkWare", "service": "StarkNet L2", "category": "fingerprinting", "severity": "medium", "docs_url": "https://starkware.co/privacy-policy/" },
+        "swap.api.cx.metamask.io": { "company": "Consensys", "service": "MetaMask Swaps", "category": "fingerprinting", "severity": "critical", "note": "MetaMask swap aggregator — collects swap quotes, wallet addresses, and token amounts for DEX routing", "docs_url": "https://consensys.io/privacy-policy" },
+        "tags.bluekai.com": { "company": "Oracle", "service": "Oracle BlueKai DMP", "category": "fingerprinting", "severity": "critical", "note": "Oracle BlueKai data management platform creating cross-device audience profiles", "docs_url": "https://www.oracle.com/legal/privacy/marketing-cloud-data-cloud-privacy-policy.html" },
+        "tapad.com": { "company": "Tapad", "service": "Tapad Device Graph", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.tapad.com/privacy" },
+        "token.api.cx.metamask.io": { "company": "Consensys", "service": "MetaMask Token API", "category": "fingerprinting", "severity": "critical", "docs_url": "https://consensys.io/privacy-policy" },
+        "token.uidapi.com": { "company": "The Trade Desk", "service": "UID 2.0 Token Server", "category": "fingerprinting", "severity": "critical", "docs_url": "https://www.thetradedesk.com/general/privacy" },
+        "topics.googleapis.com": { "company": "Google", "service": "Topics API (Privacy Sandbox)", "category": "fingerprinting", "severity": "critical", "note": "Topics API — replaces FLoC by categorizing users into interest-based topics from browsing history. Sites can query browsing-topics header to learn visitor interests without cookies.", "docs_url": "https://developer.chrome.com/docs/privacy-sandbox/topics/" },
+        "track.adform.net": { "company": "Adform", "service": "Adform Tracking", "category": "fingerprinting", "severity": "critical", "docs_url": "https://site.adform.com/privacy-center/" },
+        "tracking.1plusx.com": { "company": "1plusX (Triton Digital)", "service": "1plusX Predictive Audiences", "category": "fingerprinting", "severity": "critical", "note": "1plusX first-party data platform using predictive modeling for audience ID resolution", "docs_url": "https://www.1plusx.com/privacy-policy/" },
+        "userpilot.com": { "company": "Userpilot", "service": "Userpilot", "category": "fingerprinting", "severity": "medium", "note": "Product adoption platform that fingerprints users for cross-session identification", "docs_url": "https://userpilot.com/privacy-policy" },
+        "utiq.com": { "company": "Utiq", "service": "Utiq Telco Consent ID", "category": "fingerprinting", "severity": "critical", "note": "Utiq (European telco consortium) authenticated consent signal using network-level identity", "docs_url": "https://utiq.com/privacy/" },
+        "wurfl.io": { "company": "ScientiaMobile", "service": "WURFL Device Detection", "category": "fingerprinting", "severity": "critical", "note": "Wireless Universal Resource FiLe — industry-standard device fingerprinting database. Identifies 60,000+ device types from HTTP headers for content optimization and ad targeting.", "docs_url": "https://www.scientiamobile.com/privacy/" },
+        "zeotap.com": { "company": "Zeotap", "service": "Zeotap ID+ Identity Resolution", "category": "fingerprinting", "severity": "critical", "note": "Zeotap deterministic identity resolution platform linking devices to individual profiles", "docs_url": "https://zeotap.com/privacy-policy/" }
+    }
+}