Collected
The collector reads browser claims, probe timings, canvas and WebGL output, audio output, and fonts. By default, it groups battery, storage, and WebRTC values into ranges.rawSurface: true requests exact values for those fields.
The sensor records the source address and TCP, TLS, HTTP, and QUIC details of the collector connection.
Returned
The verdict response includes the observed address and port, request and connection details, and browser claims. You are the controller of that record. Heretic processes it for you and makes no decision on it. Name the measurement in your privacy notice and rely on a lawful basis such as fraud prevention. Probe identifiers are scoped to the site key and versioned. They do not affect the verdict.Retention
Retiring or deleting a site stops reads of its results, including results still inside the seven days.
Keep secret keys on your server. Do not put personal data in collector configuration.