DEMO — here the display stays local. A real malicious site would send EVERYTHING.

What can this page see once you click "Allow"?

Each button triggers an access that you authorize. The result is displayed here, locally.

Your files

You choose a folder. The page then lists everything it can read from it. "Allow" once = grant access to all content.

No files are sent — local reading and display only.

Your clipboard

Copy anything (a password, an address…), then click:

A malicious page could also replace what you copy (e.g., crypto address). Here we just read.

Your location

A single "Allow" is enough to reveal where you are.

Your camera

"Allow" the camera gives a live video stream — and a photo in one click.

The photo is displayed here, locally. Nothing is sent or stored server-side.

Your microphone

"Allow" the microphone lets you listen and record.

Recording played locally. Nothing is sent or stored server-side.

Your motion sensors

Accelerometer and gyroscope: a page can track the device's tilt and movements (especially mobile).

Back: application · explanation page