Baseline visit v2 schema (r2)

robinhood.com

https://robinhood.com/

Aug 14, 2026, 7:00 PM UTC

cut short: fingerprinting evidence was censored before completion — the in-page fingerprint observer did not finish (recorded loss count: 1); recorded by the scanner

View site historyScan this site againReport an evidence problem

Evidence quality

This report is built on an incomplete visit

Incomplete evidence: evidence was cut short before completion (fingerprinting evidence was censored before completion — the in-page fingerprint observer did not finish (recorded loss count: 1)). Counts for the affected evidence are lower bounds; families that completed carry only their ordinary limits. The evidence receipt states the exact per-visit quality.

Comparison Reportv2 schema (r2)

robinhood.com

https://robinhood.com/us/en
SharePDF + evidence

What this actually means

robinhood.com contacted catalogued Google, LinkedIn and Microsoft, +1 more domains during this visit.

4 distinct catalogued tracking-service entities recorded responses across 24 cross-site domains. A catalog match identifies the service domain, not why the request occurred or what it carried.

4tracking-service entities
76cross-site requests
9third-party cookie records
Observed in two automated visits: evidence to check, not a verdict.
Post on X

Plain-Language Findings

What this visit means

Unfamiliar terms are defined in the glossary
playwright-chromium

Worth checking

Bottom line: this visit has review-worthy signals

The scan observed signals a non-expert should not have to decode from raw request tables. Some detector evidence was incomplete; each affected detector card states its own retained or unavailable scope, while completed request, cookie, and storage measurements keep their recorded exactness.

The cards below translate the evidence into plain language; severity reflects fixed reference thresholds, not measured population percentiles. The request log, domain table, and methodology remain below for verification.

105 requests observed in one controlled visit.

Worth checking

56 of 100 requests the engine evaluated matched Brave Shields filter lists

56 requests matched the default filter lists of Brave Shields, the ad and tracker blocker built into the Brave browser, while loading normally.

Computed with Brave's own ad-block engine and default filter lists in classification mode: matched requests were not blocked by the scanner and remain in this report's observed request counts. Matching shows what Shields would target on this visit's traffic; an actual Shields visit blocks these and also prevents their follow-on requests, so this number is neither a measured block count nor the total effect.

The hand-curated service catalog separately matched 37 request rows in this visit.Show matched requests

Context

This GPC comparison supports no comparable delta

The pair did not record the network egress region for both visits, and an unrecorded condition never counts as matching.

The raw request logs of both visits remain below for transparency, but the diff between them supports no claim about what the compared condition changed.

1 disqualifying condition named by the report's claim policy.

Worth checking

Consent tooling and requests to tracking-service entities appeared before any choice

robinhood.com sent a request to Usercentrics, a consent management platform (the tooling that shows cookie banners), and the request log included 4 distinct catalogued tracking-related services before the scanner made any consent choice; 4 companies answered.

A request to the platform's loader proves the page attempted to fetch consent tooling; an observed response supports delivery, but neither fact proves a banner was visibly shown to this scanner. Banner display can vary by region and visit context. The scanner never clicks a banner in this mode, so this report records requests made before the scanner made a consent choice. It does not determine whether any request required consent or whether the site's behavior complied with applicable law. More tracking-service entities or requests may appear after "Accept" than this report captures, so the counts here are lower bounds for users who consent.

Consent platform detected via a request to api.usercentrics.eu.

Context

Tracking companies the privacy policy does not appear to name

LinkedIn, Microsoft and Meta were sent requests during this visit, but the policy text matched none of the names this scan knows those companies by.

Policies often disclose vendor categories rather than company names, so an unnamed vendor is a transparency gap worth reviewing, not automatically a violation. Named in the policy: Google.

Policy at https://robinhood.com/us/en/support/articles/privacy-policy; 0 checkable statements matched; 1 of 4 observed tracking companies named in the policy.

Worth checking

Catalogued service domains recorded responses during this visit

Google, LinkedIn and Microsoft, plus 1 other appeared in the request log.

A catalog match identifies a maintainer-reviewed service/domain mapping; it does not establish why an individual request occurred, what it carried, or whether profiling happened. Functional catalog labels include analytics / tag management, advertising and social / advertising pixel. This scan could not identify 7 of the 24 third-party hosts recorded here, so it cannot say who operates them. That is a limit of identity coverage, not evidence about the site. The role taxonomy assigns these additional services explicitly non-tracking operational, support, security, consent-management, or hosting roles: Sentry.

76 cross-site requests across 24 third-party hosts.Modest distinct tracking-service entities count.Show third-party requests

Worth checking

Requests were dispatched to catalogued major-platform domains

This visit dispatched requests to catalogued domains for Google, Meta and Microsoft, plus 1 other.

The domain matches identify services, not the requests' purpose, payload, or whether any profile linking occurred.

32 requests to these platforms.Show catalog-matched requests

Nothing observed

Google Analytics present, no remarketing signal

Google Analytics was observed, but no DoubleClick remarketing sync appeared in this visit.

Standard analytics collection was observed, without the stats.g.doubleclick.net advertising sync.

Google Analytics host observed; no stats.g.doubleclick.net request.Show catalog-matched requests

Worth checking

Third-party cookies were present

9 third-party cookies showed up during the visit.

The scanner observed cookie metadata whose domain crossed the scanned site's registrable-domain boundary. This report does not retain cookie values or partition keys, so it does not establish whether a cookie was a persistent identifier or could recognize a visitor across sites.

22 cookies total in this report.Elevated third-party cookies count (at or above the 5 reference threshold).

Context

Incomplete evidence: No fingerprint-like API calls observed in retained evidence before collection stopped

The scan did not observe the instrumented high-entropy browser APIs.

This is an observation layer, not proof that fingerprinting is impossible. Evidence collection was cut short, so this covers only what was recorded before the cutoff.

Retained incomplete evidence includes 0 API event records; no exact API-family total is available.

GPC Comparison

GPC off and GPC on: two visits, no comparable metric delta

GPC off: 10,648msGPC on: 3,470ms
No metric deltas are comparable across these two visits, so none are shown.
  • Request, cookie, and storage deltas (each visit's own evidence still renders below): The pair did not record the network egress region for both visits, and an unrecorded condition never counts as matching.
  • Catalog-matched request and entity deltas (each visit's own evidence still renders below): The pair did not record the network egress region for both visits, and an unrecorded condition never counts as matching.
  • Other detector and causal-path deltas (each visit's own evidence still renders below): The pair did not record the network egress region for both visits, and an unrecorded condition never counts as matching. The fingerprint-heuristics detector's status differed between the two visits, so their numbers measure different things. The baseline visit did not completely capture this evidence family, so its values are unavailable or incomplete rather than comparable totals.
  • The Shields-number delta (each visit's own evidence still renders below): The pair did not record the network egress region for both visits, and an unrecorded condition never counts as matching.
  • Fingerprinting deltas (each visit's own evidence still renders below): At least one visit did not complete the fingerprint measurement, so no exact cross-visit delta is shown.
  • Ad-pixel deltas (each visit's own evidence still renders below): At least one visit did not complete the pixel measurement, so no exact cross-visit delta is shown.

Measurement limits

5 conditions affect how this evidence reads

Both visits

  • Each visit in this report is one automated, headless Chromium visit from a fixed en-US / UTC profile, with no scrolling, clicking, or consent interaction. Sites can behave differently for real users, browsers, regions, accounts, or network locations.
  • Counts are a lower bound: trackers that load only after interaction or consent are not observed; Service Workers are blocked, and Web Worker or WebSocket traffic may be incomplete. Service labels use a US-biased hand-curated catalog, so regional services may be under-labeled. Cookie and storage figures are an end-of-visit snapshot, with storage keys read from the top frame only.
  • Read the site's privacy policy (https://robinhood.com/us/en/support/articles/privacy-policy) and compared its text against this visit's observed behavior. Policy checks are an automated text match with the matched sentences quoted, not a legal reading.

GPC off visit only

  • The page did not reach network idle before the scan window ended.
  • The in-page fingerprint observer could not read one or more frames, so fingerprint-like API calls and heuristics for this visit are incomplete.

How to use this report

Read the findings and measurement limits first, then inspect the evidence for each recorded visit. Comparisons include both visits, even where a difference cannot be interpreted.

Keep this PDF with its evidence package: the source JSON, correction context, export receipt and SHA256SUMS. The package preserves source bytes and the correction context at export time. Hashes check file consistency; they do not establish independent measurement accuracy or a signed attestation.

Correction context SHA-256: 1a6acc2ad1147c0255b04d14d2748f411159a9516f818959dd3054be53ed216c

Renderer revision: 3c18992e02534f33c825f7c2e51dd534d3ccab0d

GPC off — evidence

2026-08-14T19:00:58.621Z · cut short: fingerprinting evidence was censored before completion — the in-page fingerprint observer did not finish (recorded loss count: 1); recorded by the scanner

Retained observations from this visit. Missing measurements do not establish absence of activity.

Request attribution map

Which actor each third-party request is attributed to, from the initiator the browser reported. Attribution, not causation: an initiator may itself have been told what to fetch, and requests with no reported initiator are not distinguished from ones fetched from several. Asterisks mark subdomain labels hidden for privacy.
Attributed requests
56
Not attributable
20
Third-party requests
76

No unique actor could be assigned to 20 of these requests. That includes requests for which the browser reported no usable initiator, and repeated URLs seen with conflicting initiators. This report does not distinguish those causes, so they are counted together rather than drawn.

76 third-party requests: 56 attributed to a single recorded actor, 20 not attributable.

Select a relationship to see its detail and open the rows behind it.

Showing the 12 highest-volume attribution paths of 21 recorded paths. The per-domain counts above cover only the paths drawn here; open the report JSON for the full set.

By the numbers

Recorded counts and evidence availability from this one visit. The findings above interpret them.
Requests10576 third-party
Matched Shields lists56verified over 100 requests the engine evaluated
Third-party domains245 distinct catalogued service entities
Cookies229 third-party
Storage keys2727 keys privacy-filtered; values omitted
Fingerprint API callsIncompletefingerprint detector incomplete; no exact count available
GPC signalVerified offheader and JavaScript readback agreed
Duration10.6s7:00:58 PM UTC

Request composition & timeline

First-party requests 29
Other third-party requests 39
Catalog-matched third-party requests 37

105 requests were recorded from 49 ms to 3,394 ms. Open the request log for exact timing and request details.

0 ms3,394 ms

Recorded visit structure

Visit phases & state changes

3 phases

Request counts are retained request rows whose start fell in each phase. A phase with no retained rows does not prove that no traffic occurred; some phase traffic can be intentionally excluded from the public request log.

PhaseSpan from run startRecorded requestsThird-partyCatalog-matched requestsCookie recordsStorage records
Initial page loadP0 · passive-load0 to 9,056 ms (9,056 ms)105763722 present27 present
Active input probeP1 · active-probe9,056 to 9,073 ms (17 ms)No retained rowsNo retained rowsNo retained rows0 retained0 retained
Privacy-policy analysisP2 · policy-analysis9,166 to 10,647 ms (1,481 ms)No retained rowsNo retained rowsNo retained rows0 retained0 retained

Cookie & storage snapshot ledger

49 change records

Changes are inferred from privacy-filtered snapshots at phase boundaries, not instrumented browser write events. Cookie values are never recorded; storage values are omitted and only byte counts remain.

  1. P0 · Initial page loadPresent at first snapshot
    Cookie 1 · name hidden for privacyThird-party cookie · persistent
  2. P0 · Initial page loadPresent at first snapshot
    MUIDThird-party cookie · persistent
  3. P0 · Initial page loadPresent at first snapshot
    IDEThird-party cookie · persistent
  4. P0 · Initial page loadPresent at first snapshot
    li_sugrThird-party cookie · persistent
  5. P0 · Initial page loadPresent at first snapshot
    lidcThird-party cookie · persistent
  6. P0 · Initial page loadPresent at first snapshot
    Cookie 6 · name hidden for privacyThird-party cookie · persistent
  7. P0 · Initial page loadPresent at first snapshot
    __cf_bmThird-party cookie · persistent
  8. P0 · Initial page loadPresent at first snapshot
    Cookie 8 · name hidden for privacyThird-party cookie · persistent
  9. P0 · Initial page loadPresent at first snapshot
    Cookie 9 · name hidden for privacyThird-party cookie · persistent
  10. P0 · Initial page loadPresent at first snapshot
    Cookie 10 · name hidden for privacyFirst-party cookie · persistent
  11. P0 · Initial page loadPresent at first snapshot
    Cookie 11 · name hidden for privacyFirst-party cookie · persistent
  12. P0 · Initial page loadPresent at first snapshot
    _gidFirst-party cookie · persistent
  13. P0 · Initial page loadPresent at first snapshot
    _gatFirst-party cookie · persistent
  14. P0 · Initial page loadPresent at first snapshot
    _gcl_auFirst-party cookie · persistent
  15. P0 · Initial page loadPresent at first snapshot
    Cookie 15 · name hidden for privacyFirst-party cookie · persistent
  16. P0 · Initial page loadPresent at first snapshot
    _gaFirst-party cookie · persistent
  17. P0 · Initial page loadPresent at first snapshot
    Cookie 17 · name hidden for privacyFirst-party cookie · persistent
  18. P0 · Initial page loadPresent at first snapshot
    _fbpFirst-party cookie · persistent
  19. P0 · Initial page loadPresent at first snapshot
    Cookie 19 · name hidden for privacyFirst-party cookie · persistent
  20. P0 · Initial page loadPresent at first snapshot
    _uetsidFirst-party cookie · persistent
  21. P0 · Initial page loadPresent at first snapshot
    _uetvidFirst-party cookie · persistent
  22. P0 · Initial page loadPresent at first snapshot
    Cookie 22 · name hidden for privacyFirst-party cookie · persistent
  23. P0 · Initial page loadPresent at first snapshot
    Storage key 1 · name hidden for privacylocalStorage · observed size 4 bytes
  24. P0 · Initial page loadPresent at first snapshot
    Storage key 2 · name hidden for privacylocalStorage · observed size 130 bytes
  25. P0 · Initial page loadPresent at first snapshot
    Storage key 3 · name hidden for privacylocalStorage · observed size 4 bytes
  26. P0 · Initial page loadPresent at first snapshot
    Storage key 4 · name hidden for privacylocalStorage · observed size 36 bytes
  27. P0 · Initial page loadPresent at first snapshot
    Storage key 5 · name hidden for privacylocalStorage · observed size 29 bytes
  28. P0 · Initial page loadPresent at first snapshot
    Storage key 6 · name hidden for privacylocalStorage · observed size 10 bytes
  29. P0 · Initial page loadPresent at first snapshot
    Storage key 7 · name hidden for privacylocalStorage · observed size 28 bytes
  30. P0 · Initial page loadPresent at first snapshot
    Storage key 8 · name hidden for privacylocalStorage · observed size 10 bytes
  31. P0 · Initial page loadPresent at first snapshot
    Storage key 9 · name hidden for privacylocalStorage · observed size 66 bytes
  32. P0 · Initial page loadPresent at first snapshot
    Storage key 10 · name hidden for privacylocalStorage · observed size 277 bytes
  33. P0 · Initial page loadPresent at first snapshot
    Storage key 11 · name hidden for privacylocalStorage · observed size 4 bytes
  34. P0 · Initial page loadPresent at first snapshot
    Storage key 12 · name hidden for privacylocalStorage · observed size 53 bytes
  35. P0 · Initial page loadPresent at first snapshot
    Storage key 13 · name hidden for privacylocalStorage · observed size 36 bytes
  36. P0 · Initial page loadPresent at first snapshot
    Storage key 14 · name hidden for privacylocalStorage · observed size 517 bytes
  37. P0 · Initial page loadPresent at first snapshot
    Storage key 15 · name hidden for privacylocalStorage · observed size 28 bytes
  38. P0 · Initial page loadPresent at first snapshot
    Storage key 16 · name hidden for privacylocalStorage · observed size 13 bytes
  39. P0 · Initial page loadPresent at first snapshot
    Storage key 17 · name hidden for privacylocalStorage · observed size 36 bytes
  40. P0 · Initial page loadPresent at first snapshot
    Storage key 18 · name hidden for privacylocalStorage · observed size 29 bytes
  41. P0 · Initial page loadPresent at first snapshot
    Storage key 19 · name hidden for privacylocalStorage · observed size 88 bytes
  42. P0 · Initial page loadPresent at first snapshot
    Storage key 20 · name hidden for privacylocalStorage · observed size 5 bytes
  43. P0 · Initial page loadPresent at first snapshot
    Storage key 21 · name hidden for privacylocalStorage · observed size 10 bytes
  44. P0 · Initial page loadPresent at first snapshot
    Storage key 22 · name hidden for privacylocalStorage · observed size 9,090 bytes
  45. P0 · Initial page loadPresent at first snapshot
    Storage key 23 · name hidden for privacylocalStorage · observed size 36 bytes
  46. P0 · Initial page loadPresent at first snapshot
    Storage key 24 · name hidden for privacylocalStorage · observed size 1,944 bytes
  47. P0 · Initial page loadPresent at first snapshot
    Storage key 25 · name hidden for privacysessionStorage · observed size 64 bytes
  48. P0 · Initial page loadPresent at first snapshot
    Storage key 26 · name hidden for privacysessionStorage · observed size 2 bytes
  49. P0 · Initial page loadPresent at first snapshot
    Storage key 27 · name hidden for privacysessionStorage · observed size 6 bytes

37 change records hide unreviewed names or keys because they can contain identifiers.

Domain evidence

27 recorded domains
DomainRoleRequestsCatalog matchResource types
www.googletagmanager.comservice6Google: analytics / tag managementscript
*.bing.comservice6Microsoft: advertising / analyticsscript, image, xhr
*.*.doubleclick.netservice5Google: advertisingxhr, document, script
*.*.sentry.ioservice4Sentry: error monitoringother
*.ads.linkedin.comservice4LinkedIn: social / advertising pixelfetch, xhr, image
www.google-analytics.comservice3Google: analytics / tag managementscript, xhr, fetch
*.facebook.netservice2Meta: social / advertising pixelscript
*.licdn.comservice2LinkedIn: social / advertising pixelscript
ad.doubleclick.netservice2Google: advertisingfetch
sentry.ioservice1Sentry: error monitoringfetch
*.google.comservice1Google: advertisingimage
www.linkedin.comservice1LinkedIn: social / advertising pixelimage
images.ctfassets.netthird-party12No catalog matchimage
www.google.comthird-party7No catalog matchfetch, image
*.ctfassets.netthird-party4No catalog matchmedia
api.usercentrics.euthird-party4No catalog matchfetch
*.singular.netthird-party3No catalog matchscript, xhr
app.usercentrics.euthird-party2No catalog matchdocument, image
*.*.tvsquared.comthird-party2No catalog matchscript, image
*.ninetailed.cothird-party1No catalog matchfetch
*.*.usercentrics.euthird-party1No catalog matchfetch
*.*.*.usercentrics.euthird-party1No catalog matchfetch
www.redditstatic.comthird-party1No catalog matchscript
*.reddit.comthird-party1No catalog matchimage
cdn.robinhood.comfirst-party24No catalog matchfont, script, image
robinhood.comfirst-party4No catalog matchdocument, fetch
*.robinhood.comfirst-party1No catalog matchfetch

Request log

105 recorded requests

In hosts and URLs, * and … mark details hidden for privacy.

Request references name this visit's retained JSON rows in order (B = baseline, V = variant, S = single). R0001 is the first request row.

RefTimePhaseStatusTypeDomainProvenanceURL
B:R000149msP0302documentrobinhood.comNot attributedhttps://robinhood.com/
B:R0002225msP0200documentrobinhood.comNot attributedhttps://robinhood.com/us/en
B:R0003955msP0200fontcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0004956msP0200fontcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0005956msP0200fontcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0006956msP0200fontcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0007956msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0008956msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0009956msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0010956msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0011956msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0012956msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0013956msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0014956msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0015957msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0016957msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
B:R0017957msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
B:R0018958msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
B:R0019959msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
B:R0020959msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
B:R0021959msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…
B:R0022959msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
B:R0023959msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
B:R0024959msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
B:R0025959msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
B:R0026959msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
B:R0027959msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
B:R0028959msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
B:R0029960msP0200imagecdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R0030963msP0206media*.ctfassets.netinitiated by robinhood.comhttps://*.ctfassets.net/…
B:R0031963msP0206media*.ctfassets.netinitiated by robinhood.comhttps://*.ctfassets.net/…
B:R00321,004msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R00331,004msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R00341,011msP0200fontcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R00351,011msP0200fontcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R00361,374msP0200other*.*.sentry.ioNot attributedhttps://*.*.sentry.io/api/…?…
B:R00371,374msP0200fetchapi.usercentrics.euNot attributedhttps://api.usercentrics.eu/…
B:R00381,574msP0200scriptcdn.robinhood.cominitiated by cdn.robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R00391,575msP0200scriptcdn.robinhood.cominitiated by cdn.robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R00401,576msP0200scriptcdn.robinhood.cominitiated by cdn.robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R00411,576msP0200other*.*.sentry.ioNot attributedhttps://*.*.sentry.io/api/…?…
B:R00421,576msP0200fetch*.robinhood.cominitiated by cdn.robinhood.comhttps://*.robinhood.com/…
B:R00431,682msP0206media*.ctfassets.netinitiated by robinhood.comhttps://*.ctfassets.net/…
B:R00441,683msP0206media*.ctfassets.netinitiated by robinhood.comhttps://*.ctfassets.net/…
B:R00451,685msP0200fetch*.ninetailed.coinitiated by cdn.robinhood.comhttps://*.ninetailed.co/…?locale
B:R00461,692msP0200fetchrobinhood.cominitiated by cdn.robinhood.comhttps://robinhood.com/…/us/en/…
B:R00471,693msP0200scriptcdn.robinhood.cominitiated by cdn.robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R00481,693msP0200fetchrobinhood.cominitiated by cdn.robinhood.comhttps://robinhood.com/…/us/en/…
B:R00491,694msP0200scriptcdn.robinhood.cominitiated by cdn.robinhood.comhttps://cdn.robinhood.com/…/static/…
B:R00501,697msP0200fetchsentry.ioinitiated by cdn.robinhood.comhttps://sentry.io/api/…?…
B:R00511,700msP0200fetchapi.usercentrics.euNot attributedhttps://api.usercentrics.eu/settings/…
B:R00521,802msP0200fetchapi.usercentrics.euNot attributedhttps://api.usercentrics.eu/settings/…
B:R00531,899msP0200documentapp.usercentrics.euinitiated by cdn.robinhood.comhttps://app.usercentrics.eu/…
B:R00542,090msP0200imageapp.usercentrics.euNot attributedhttps://app.usercentrics.eu/…?…
B:R00552,091msP0200fetchapi.usercentrics.euNot attributedhttps://api.usercentrics.eu/…
B:R00562,130msP0200fetch*.*.usercentrics.euNot attributedhttps://*.*.usercentrics.eu/…/en?…
B:R00572,313msP0201fetch*.*.*.usercentrics.euNot attributedhttps://*.*.*.usercentrics.eu/…
B:R00582,330msP0200scriptwww.googletagmanager.cominitiated by cdn.robinhood.comhttps://www.googletagmanager.com/…?id
B:R00592,331msP0200scriptwww.google-analytics.cominitiated by cdn.robinhood.comhttps://www.google-analytics.com/…
B:R00602,331msP0200scriptwww.googletagmanager.cominitiated by cdn.robinhood.comhttps://www.googletagmanager.com/…?id
B:R00612,485msP0200xhrwww.google-analytics.cominitiated by cdn.robinhood.comhttps://www.google-analytics.com/…?v&…&t&cid&tid
B:R00622,486msP0200xhr*.*.doubleclick.netinitiated by cdn.robinhood.comhttps://*.*.doubleclick.net/…?t&…&v&tid&cid
B:R00632,648msP0200other*.*.sentry.ioNot attributedhttps://*.*.sentry.io/api/…?…
B:R00642,650msP0200scriptwww.googletagmanager.cominitiated by www.googletagmanager.comhttps://www.googletagmanager.com/…?id&…
B:R00652,650msP0200scriptwww.googletagmanager.cominitiated by www.googletagmanager.comhttps://www.googletagmanager.com/…?id&…
B:R00662,650msP0200scriptwww.googletagmanager.cominitiated by www.googletagmanager.comhttps://www.googletagmanager.com/…?id&…
B:R00672,650msP0200scriptwww.googletagmanager.cominitiated by www.googletagmanager.comhttps://www.googletagmanager.com/…?id&…
B:R00682,650msP0200script*.facebook.netinitiated by www.googletagmanager.comhttps://*.facebook.net/…
B:R00692,651msP0200script*.licdn.cominitiated by www.googletagmanager.comhttps://*.licdn.com/…
B:R00702,651msP0200script*.bing.cominitiated by www.googletagmanager.comhttps://*.bing.com/…
B:R00712,651msP0200script*.singular.netinitiated by www.googletagmanager.comhttps://*.singular.net/…
B:R00722,651msP0200scriptwww.redditstatic.cominitiated by www.googletagmanager.comhttps://www.redditstatic.com/…?…
B:R00732,652msP0200script*.*.tvsquared.cominitiated by www.googletagmanager.comhttps://*.*.tvsquared.com/…
B:R00742,652msP0200fetchwww.google.cominitiated by cdn.robinhood.comhttps://www.google.com/…?…
B:R00752,652msP0204fetchad.doubleclick.netinitiated by cdn.robinhood.comhttps://ad.doubleclick.net/…?…
B:R00762,701msP0204fetchwww.google-analytics.cominitiated by cdn.robinhood.comhttps://www.google-analytics.com/…?v&tid&…&cid
B:R00772,797msP0200fetchwww.google.cominitiated by cdn.robinhood.comhttps://www.google.com/…?…&tid
B:R00782,798msP0n/afetchad.doubleclick.netinitiated by cdn.robinhood.comhttps://ad.doubleclick.net/…
B:R00792,800msP0302document*.*.doubleclick.netinitiated by www.googletagmanager.comhttps://*.*.doubleclick.net/…
B:R00802,886msP0200script*.*.doubleclick.netinitiated by www.googletagmanager.comhttps://*.*.doubleclick.net/…?…
B:R00812,886msP0200fetchwww.google.cominitiated by cdn.robinhood.comhttps://www.google.com/…?…
B:R00822,887msP0200script*.*.doubleclick.netinitiated by www.googletagmanager.comhttps://*.*.doubleclick.net/…?…
B:R00832,887msP0200fetchwww.google.cominitiated by cdn.robinhood.comhttps://www.google.com/…?…
B:R00842,887msP0200fetchwww.google.cominitiated by cdn.robinhood.comhttps://www.google.com/…?…&tid
B:R00852,910msP0200script*.singular.netinitiated by *.singular.nethttps://*.singular.net/…
B:R00862,912msP0200script*.licdn.cominitiated by *.licdn.comhttps://*.licdn.com/…
B:R00872,920msP0200image*.reddit.comNot attributedhttps://*.reddit.com/…?…&id&v
B:R00882,980msP0200script*.facebook.netinitiated by *.facebook.nethttps://*.facebook.net/…?v&…
B:R00892,984msP0200script*.bing.cominitiated by *.bing.comhttps://*.bing.com/…
B:R00903,007msP0204fetch*.ads.linkedin.cominitiated by cdn.robinhood.comhttps://*.ads.linkedin.com/…?…
B:R00913,008msP0200xhr*.ads.linkedin.cominitiated by cdn.robinhood.comhttps://*.ads.linkedin.com/…?…
B:R00923,009msP0302image*.ads.linkedin.comNot attributedhttps://*.ads.linkedin.com/…?v&…
B:R00933,013msP0200imagewww.google.comNot attributedhttps://www.google.com/…?…&cid
B:R00943,015msP0200imagewww.google.comNot attributedhttps://www.google.com/…?…&cid
B:R00953,025msP0200document*.*.doubleclick.netinitiated by www.googletagmanager.comhttps://*.*.doubleclick.net/…
B:R00963,064msP0200xhr*.singular.netNot attributedhttps://*.singular.net/api/…?…
B:R00973,067msP0200script*.bing.cominitiated by *.bing.comhttps://*.bing.com/…
B:R00983,067msP0204image*.bing.comNot attributedhttps://*.bing.com/…?…&ver&msclkid
B:R00993,088msP0200image*.google.cominitiated by *.*.doubleclick.nethttps://*.google.com/…
B:R01003,181msP0200script*.bing.cominitiated by *.bing.comhttps://*.bing.com/…
B:R01013,187msP0200image*.*.tvsquared.comNot attributedhttps://*.*.tvsquared.com/…?…
B:R01023,278msP0n/aimage*.ads.linkedin.comNot attributedhttps://*.ads.linkedin.com/…?v&…
B:R01033,341msP0204xhr*.bing.cominitiated by cdn.robinhood.comhttps://*.bing.com/…
B:R01043,393msP0n/aimagewww.linkedin.comNot attributedhttps://www.linkedin.com/…?…
B:R01053,394msP0200other*.*.sentry.ioNot attributedhttps://*.*.sentry.io/api/…?…

GPC on — evidence

2026-08-14T19:01:09.278Z · complete; recorded by the scanner

Retained observations from this visit. Missing measurements do not establish absence of activity.

Request attribution map

Which actor each third-party request is attributed to, from the initiator the browser reported. Attribution, not causation: an initiator may itself have been told what to fetch, and requests with no reported initiator are not distinguished from ones fetched from several. Asterisks mark subdomain labels hidden for privacy.
Attributed requests
19
Not attributable
9
Third-party requests
28

No unique actor could be assigned to 9 of these requests. That includes requests for which the browser reported no usable initiator, and repeated URLs seen with conflicting initiators. This report does not distinguish those causes, so they are counted together rather than drawn.

28 third-party requests: 19 attributed to a single recorded actor, 9 not attributable.

Select a relationship to see its detail and open the rows behind it.

By the numbers

Recorded counts and evidence availability from this one visit. The findings above interpret them.
Requests5728 third-party
Matched Shields lists11verified over 55 requests the engine evaluated
Third-party domains91 distinct catalogued service entity
Cookies20 third-party
Storage keys55 keys privacy-filtered; values omitted
Fingerprint API calls00 API families
GPC signalVerified onheader and JavaScript readback agreed
Duration3.5s7:01:09 PM UTC

Request composition & timeline

First-party requests 29
Other third-party requests 25
Catalog-matched third-party requests 3

57 requests were recorded from 78 ms to 1,425 ms. Open the request log for exact timing and request details.

0 ms1,425 ms

Recorded visit structure

Visit phases & state changes

3 phases

Request counts are retained request rows whose start fell in each phase. A phase with no retained rows does not prove that no traffic occurred; some phase traffic can be intentionally excluded from the public request log.

PhaseSpan from run startRecorded requestsThird-partyCatalog-matched requestsCookie recordsStorage records
Initial page loadP0 · passive-load0 to 2,239 ms (2,239 ms)572832 present5 present
Active input probeP1 · active-probe2,239 to 2,253 ms (14 ms)No retained rowsNo retained rowsNo retained rows0 retained0 retained
Privacy-policy analysisP2 · policy-analysis2,347 to 3,470 ms (1,123 ms)No retained rowsNo retained rowsNo retained rows0 retained0 retained

Cookie & storage snapshot ledger

7 change records

Changes are inferred from privacy-filtered snapshots at phase boundaries, not instrumented browser write events. Cookie values are never recorded; storage values are omitted and only byte counts remain.

  1. P0 · Initial page loadPresent at first snapshot
    Cookie 1 · name hidden for privacyFirst-party cookie · persistent
  2. P0 · Initial page loadPresent at first snapshot
    Cookie 2 · name hidden for privacyFirst-party cookie · persistent
  3. P0 · Initial page loadPresent at first snapshot
    Storage key 1 · name hidden for privacylocalStorage · observed size 4 bytes
  4. P0 · Initial page loadPresent at first snapshot
    Storage key 2 · name hidden for privacylocalStorage · observed size 125 bytes
  5. P0 · Initial page loadPresent at first snapshot
    Storage key 3 · name hidden for privacylocalStorage · observed size 9,260 bytes
  6. P0 · Initial page loadPresent at first snapshot
    Storage key 4 · name hidden for privacylocalStorage · observed size 3 bytes
  7. P0 · Initial page loadPresent at first snapshot
    Storage key 5 · name hidden for privacysessionStorage · observed size 64 bytes

7 change records hide unreviewed names or keys because they can contain identifiers.

Domain evidence

12 recorded domains
DomainRoleRequestsCatalog matchResource types
*.*.sentry.ioservice2Sentry: error monitoringother
sentry.ioservice1Sentry: error monitoringfetch
images.ctfassets.netthird-party12No catalog matchimage
*.ctfassets.netthird-party4No catalog matchmedia
api.usercentrics.euthird-party4No catalog matchfetch
app.usercentrics.euthird-party2No catalog matchdocument, image
*.ninetailed.cothird-party1No catalog matchfetch
*.*.usercentrics.euthird-party1No catalog matchfetch
*.*.*.usercentrics.euthird-party1No catalog matchfetch
cdn.robinhood.comfirst-party24No catalog matchfont, script, image
robinhood.comfirst-party4No catalog matchdocument, fetch
*.robinhood.comfirst-party1No catalog matchfetch

Request log

57 recorded requests

In hosts and URLs, * and … mark details hidden for privacy.

Request references name this visit's retained JSON rows in order (B = baseline, V = variant, S = single). R0001 is the first request row.

RefTimePhaseStatusTypeDomainProvenanceURL
V:R000178msP0302documentrobinhood.comNot attributedhttps://robinhood.com/
V:R0002263msP0200documentrobinhood.comNot attributedhttps://robinhood.com/us/en
V:R0003313msP0200fontcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0004313msP0200fontcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0005313msP0200fontcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0006313msP0200fontcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0007313msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0008313msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0009313msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0010313msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0011314msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0012314msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0013314msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0014314msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0015314msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0016314msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
V:R0017314msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
V:R0018315msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
V:R0019316msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
V:R0020316msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
V:R0021316msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…
V:R0022316msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
V:R0023316msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
V:R0024316msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
V:R0025316msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
V:R0026316msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
V:R0027316msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
V:R0028316msP0200imageimages.ctfassets.netinitiated by robinhood.comhttps://images.ctfassets.net/…
V:R0029316msP0200imagecdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0030324msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0031325msP0200scriptcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0032325msP0206media*.ctfassets.netinitiated by robinhood.comhttps://*.ctfassets.net/…
V:R0033325msP0206media*.ctfassets.netinitiated by robinhood.comhttps://*.ctfassets.net/…
V:R0034326msP0200fontcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0035326msP0200fontcdn.robinhood.cominitiated by robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0036631msP0200other*.*.sentry.ioNot attributedhttps://*.*.sentry.io/api/…?…
V:R0037632msP0200fetchapi.usercentrics.euNot attributedhttps://api.usercentrics.eu/…
V:R0038833msP0200scriptcdn.robinhood.cominitiated by cdn.robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0039833msP0200scriptcdn.robinhood.cominitiated by cdn.robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0040834msP0200scriptcdn.robinhood.cominitiated by cdn.robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0041834msP0200other*.*.sentry.ioNot attributedhttps://*.*.sentry.io/api/…?…
V:R0042834msP0200fetch*.robinhood.cominitiated by cdn.robinhood.comhttps://*.robinhood.com/…
V:R0043942msP0206media*.ctfassets.netinitiated by robinhood.comhttps://*.ctfassets.net/…
V:R0044943msP0206media*.ctfassets.netinitiated by robinhood.comhttps://*.ctfassets.net/…
V:R0045945msP0200fetch*.ninetailed.coinitiated by cdn.robinhood.comhttps://*.ninetailed.co/…?locale
V:R0046953msP0200fetchrobinhood.cominitiated by cdn.robinhood.comhttps://robinhood.com/…/us/en/…
V:R0047953msP0200scriptcdn.robinhood.cominitiated by cdn.robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0048954msP0200fetchrobinhood.cominitiated by cdn.robinhood.comhttps://robinhood.com/…/us/en/…
V:R0049954msP0200scriptcdn.robinhood.cominitiated by cdn.robinhood.comhttps://cdn.robinhood.com/…/static/…
V:R0050959msP0200fetchsentry.ioinitiated by cdn.robinhood.comhttps://sentry.io/api/…?…
V:R0051963msP0200fetchapi.usercentrics.euNot attributedhttps://api.usercentrics.eu/settings/…
V:R00521,014msP0200fetchapi.usercentrics.euNot attributedhttps://api.usercentrics.eu/settings/…
V:R00531,095msP0200documentapp.usercentrics.euinitiated by cdn.robinhood.comhttps://app.usercentrics.eu/…
V:R00541,239msP0200imageapp.usercentrics.euNot attributedhttps://app.usercentrics.eu/…?…
V:R00551,240msP0200fetchapi.usercentrics.euNot attributedhttps://api.usercentrics.eu/…
V:R00561,275msP0200fetch*.*.usercentrics.euNot attributedhttps://*.*.usercentrics.eu/…/en?…
V:R00571,425msP0201fetch*.*.*.usercentrics.euNot attributedhttps://*.*.*.usercentrics.eu/…

This versioned report is currently retained in the public corpus. Follow the currently retained site history, repeat the same public route when it is available, or request a transparent evidence correction.

Integrity and provenance

Evidence receipt

Open report JSONOpen provenance sidecarPrintable versionDownload PDF + evidenceOpen PDF
Report ID
20260814-35f5cfba85407573498330b34519fab2
Site
robinhood.com
Latest visit
Schema
v2 schema (r2)
Verify recorded provenance

Baseline visit

Started
Run quality
cut short: fingerprinting evidence was censored before completion — the in-page fingerprint observer did not finish (recorded loss count: 1); recorded by the scanner
Scanner
playwright-chromium
Browser
151.0.7922.34
Redaction
version 4
Methodology
shields-request-context-v2-adblock-rust-0.13.2-request-method-v1-playwright-1.62.1+subject-validity-v2+detector-coverage-v2+phase-kernel-v2+boundary-state-v1+consent-r2-v4+resource-budget-v1+proxy-traffic-v1+service-worker-block-v1+detector-accountability-v1+service-role-taxonomy-v1
Detector registry
node-detectors-v4100de91713270067dff4f5ecebeea61d330982c7a5aa33395bae3dd604adedd2
Tracker catalog digest
e94970de235fc80254de8ed99b94316a252e52aa1c2e748c8fbfc3c093b908f4
Brave-list instrument
engine adblock-rust-0.13.20f52cc524a8999a1022279aca74003ece9720f267bc678430727b7312d43f0ac
Normalization
redaction-v4+allowlists-v3:269f631f04090ce582644ee3cf0e5c5b6bb425dc4929bc283607b808bc9322a9+public-string-policy-v3:6c78c05523e1f16c88264d0144af33587bd6dc11e04d337a6af2d58190639266+tldts@7.4.10+node-evidence-policy-v1+r2-http-status-compat-v1

Variant visit

Started
Run quality
complete; recorded by the scanner
Scanner
playwright-chromium
Browser
151.0.7922.34
Redaction
version 4
Methodology
shields-request-context-v2-adblock-rust-0.13.2-request-method-v1-playwright-1.62.1+subject-validity-v2+detector-coverage-v2+phase-kernel-v2+boundary-state-v1+consent-r2-v4+resource-budget-v1+proxy-traffic-v1+service-worker-block-v1+detector-accountability-v1+service-role-taxonomy-v1
Detector registry
node-detectors-v4100de91713270067dff4f5ecebeea61d330982c7a5aa33395bae3dd604adedd2
Tracker catalog digest
e94970de235fc80254de8ed99b94316a252e52aa1c2e748c8fbfc3c093b908f4
Brave-list instrument
engine adblock-rust-0.13.20f52cc524a8999a1022279aca74003ece9720f267bc678430727b7312d43f0ac
Normalization
redaction-v4+allowlists-v3:269f631f04090ce582644ee3cf0e5c5b6bb425dc4929bc283607b808bc9322a9+public-string-policy-v3:6c78c05523e1f16c88264d0144af33587bd6dc11e04d337a6af2d58190639266+tldts@7.4.10+node-evidence-policy-v1+r2-http-status-compat-v1

Recorded provenance is self-reported measurement metadata, not a cryptographic attestation. The public versioned report JSON contains the retained public evidence; see the methodology for interpretation and retention limits.

This report covers what the scanner measures, not everything a site can do. 16 browser surfaces are not instrumented at all (Every page except the one that was scanned; Anything that only loads after scrolling or interaction; Why a request happened, as a causal chain; and 13 others), 3 capabilities are declined by policy, and 3 are outside what any single visit can see. Their absence from this report is not evidence that they did not occur. Read the published coverage boundary.

Detector accuracy is unmeasured. No calibration study currently publishes a precision or recall for the detectors on this page, so a detector match here is a recorded observation, not a calibrated classification. How detector accuracy is measured.

Approved use boundary: This report is investigative evidence that requires independent corroboration. It is not a standalone legal determination and not the sole exhibit in a legal proceeding. Recorded in this project's release manifest on .

Reports record one automated visit per condition; visits may be incomplete. Results describe these visits, not everything a site can do.