WeAreHere Browser Extension and MCP Tools Scan Website Privacy Practices
The wearehere browser extension and its companion tools provide visibility into website privacy practices by scanning for trackers, fingerprinting, data broker connections, and form surveillance. The tools assign privacy scores from 0 (clean) to 100 (full surveillance) based on analysis of 10 categories: cookies, network trackers, hidden trackers, pressure tactics, data brokers, fingerprinting, stored IDs, form surveillance, link tracking, and ToS.
Key Findings from 150 Website Scans
A scan of 150 websites across the US, EU, and Netherlands revealed:
- CNN scored 70 with 64 tracker domains, 10 data brokers, and 26 hidden trackers
- Costco scored 80 with 43 hidden trackers, full device fingerprinting, and data broker connections
- USPS scored 60 with data brokers, fingerprinting, and 8 trackers watching user typing
- Rabobank (Dutch bank) scored 75 with 20 tracker domains, data brokers, and WebGL fingerprinting
- Thuisbezorgd (food delivery) scored 80 with full fingerprint suite and data broker connections
- NBC News scored 80 with 16 trackers watching form input and 3 data brokers
Common Surveillance Techniques Detected
- Fingerprinting (majority of sites): Reads screen, GPU, audio hardware, fonts, and browser config to create unique device ID. No cookies needed, private browsing doesn't help. Costco, Thuisbezorgd, and Zalando use all 5 methods.
- Data brokers (30+ sites): User visits are packaged and sold. CNN connects to 10 data brokers, USPS also connects to data brokers.
- Form surveillance (25+ sites): Trackers activate when users start typing, not when they submit. NBC News has 16 watching user typing.
- Hidden trackers (40+ sites): Invisible pixels, iframes, beacon scripts. CNN has 26, Costco has 43.
Regional Averages and Notable Sites
Average scores by region: US 34, Netherlands 32, EU 25. Least invasive sites: Etsy, Reddit, WhatsApp (5 each). No site scored zero.
Technical Implementation
Two open-source tools power the system:
- barebrowse: Headless browser that navigates like a real user through 30+ obstacle courses including consent banners (29 languages) and bot detection. Uses CDP-direct with no Playwright, no Selenium, and zero dependencies.
- wearehere: Privacy scanner analyzing the 10 categories mentioned above.
Both tools run as MCP servers, enabling any AI assistant to scan sites on command. The browser extension is available for Chrome and Firefox.
Getting Started
Install and configure:
npm install barebrowse wearehere
claude mcp add barebrowse -- npx barebrowse mcpThen use the command: assess https://your-bank.com
Full results for all 150 scanned sites are available at: https://drive.google.com/file/d/1sW0Nx80z6sxSDQvnf7PTPfvKivpo1Y9u/view
The tools are available on npm: barebrowse (npmjs.com/package/barebrowse) and wearehere (npmjs.com/package/wearehere). The extension is on Chrome Web Store and Firefox Add-ons.
📖 Read the full source: r/ClaudeAI
👀 See Also
AutoDream: 11-hook memory system for Claude Code with safety features
AutoDream is an open-source tool that adds project memory persistence and command safety to Claude Code. It uses 11 hooks across 6 events to inject context, block dangerous commands, and survive the /compact operation.
Toothcomb: Open-Source Real-Time Speech Fact-Checker Built with Claude Opus and Sonnet APIs
Toothcomb is an open-source tool that takes a speech transcript, fact-checks claims, detects logical fallacies and manipulative language using Claude Opus API, and supports real-time microphone streaming.
ClawCall Gets Dedicated Phone Numbers: Agents Can Now Reserve a Number for Outbound Calls
ClawCall, the AI phone calling skill for OpenClaw agents, now lets you reserve a phone number by area code. Your agent uses it by default when making calls. 10k downloads, 300 calls/day.
TEMM1E v3.1.0: AI Agent That Self-Fine-Tunes Using User Interactions
TEMM1E v3.1.0 introduces Eigen-Tune, a system that captures LLM interactions as training data, scores quality from user behavior, and fine-tunes local models via LoRA with zero added LLM cost. Tested on Apple M2, it corrected temperature conversions from 72°F = '150°C' to '21.2°C' after 10 conversations.