trenchcoat
Free · no sign-up
Website report · 4 h ago

privacybandana.xyz

“Privacy is a choice”

Template-written 14 evidence items Code reader analysed 10 scripts
What this means for you

privacybandana.xyz only talked to its own servers while we watched.E1

  • What loads is a page only: no calls to its own backend, no wallet code, no contract calls, no AI services and no live connections.E13
  • We saw no known analytics or advertising services load on the first visit.E1
  • 1 cookie was set in your browser, all by the site itself.E5

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).

Calls its own backend none seen
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What loads is a page only: no own backend calls, wallet code, contract calls, AI services or live connections.E13

What it is

  • The Internet Archive has never saved this site, so it is probably new.E14
  • The site describes itself as: “Style your PFP with a Solflare bandana.”E2
  • It's built with React (common tools for building web apps).E6
  • Notable building blocks in its code: Three.js (3D graphics).E7
  • In your browser it can open your device's share menu.E8
  • It has sections such as /api.E12

Where your data goes

On a first visit the page only talked to its own servers (privacybandana.xyz).

How key features work

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/auth/login).E9

/api/auth/login

Drawing and editing in the browser

The page draws and edits graphics in your browser using Three.js (3D graphics).E7

Three.js (3D graphics)

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
__vdplE5privacybandana.xyz until you close the browserthe site

Pages and API calls

Pages it links to

/api

Endpoints

Called while loading (seen) or named in the code (code).

/api/auth/logincodeE9
/api/me/avatarcodeE10
/api/resultscodeE11

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Privacy is a choice
page title · https://privacybandana.xyz/
E2
Page description: Style your PFP with a Solflare bandana.
page description · https://privacybandana.xyz/
E3
Main heading: Privacy is a choice.
page h1 · https://privacybandana.xyz/
E4
16 request(s) to privacybandana.xyz
types: 6 image, 6 script, 2 font
GET https://privacybandana.xyz/ · image · 16 requests · network recording
E5
Cookie '__vdpl' set for privacybandana.xyz
session cookie
cookie __vdpl on privacybandana.xyz · value not stored
E6
React detected by the code reader (react-runtime)
confidence: medium
privacybandana.xyz/assets/index-CD7EBVzg.js · “react-runtime” · the code reader
E7
Three.js (3D graphics) found in the code
privacybandana.xyz/assets/index-CD7EBVzg.js @ 66:85673 · “three.module” · pattern scan
E8
Uses the browser ability: web_share
can open your device's share menu
privacybandana.xyz/assets/routes-C34FtD6H.js @ 1:6958 · “navigator.share(” · pattern scan
E9
The code names the endpoint /api/auth/login
privacybandana.xyz/ (page HTML) @ 1:3113 · “/api/auth/login” · pattern scan
E10
The code names the endpoint /api/me/avatar
privacybandana.xyz/assets/routes-C34FtD6H.js @ 1:3579 · “/api/me/avatar” · pattern scan
E11
The code names the endpoint /api/results
privacybandana.xyz/assets/index-CD7EBVzg.js @ 68:1547 · “/api/results” · pattern scan
E12
1 links to pages on the same site
page links · https://privacybandana.xyz/ · /api
E13
16 requests on load: no own backend calls, wallet code, contract calls, AI services or live connections
GET https://privacybandana.xyz/ · summary · 16 requests · network recording
E14
The Internet Archive has no saved copy of privacybandana.xyz
page web archive · https://web.archive.org/web/*/privacybandana.xyz

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 1 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id OB4JUvYB.