FREE & OPEN SOURCE · NO ACCOUNTS · ZERO TELEMETRY

Fill the Sky
with Noise.

A browser extension that defeats mass surveillance profiling — by randomizing your digital fingerprint and flooding tracking systems with decoy data they can't ignore.

⚡ Install Free ★ View Source
Works in Firefox & Chrome · 100% free forever · No sign-up needed
🎭 Canvas RANDOMIZED 🖥️ WebGL SPOOFED 🎵 AudioContext NOISED 💻 Hardware MASKED ⏱️ Timing JITTERED 🔌 WebRTC BLOCKED 📍 Timezone SPOOFED 🇳🇺 Language SPOOFED 🗺 Geolocation FAKED 📷 EXIF STRIPPED 🌐 Noise SENT 🔑 URL Params STRIPPED 🗑 Storage CLEARED 🎭 Canvas RANDOMIZED 🖥️ WebGL SPOOFED 🎵 AudioContext NOISED 💻 Hardware MASKED ⏱️ Timing JITTERED 🔌 WebRTC BLOCKED 📍 Timezone SPOOFED 🇳🇺 Language SPOOFED 🗺 Geolocation FAKED 📷 EXIF STRIPPED 🌐 Noise SENT 🔑 URL Params STRIPPED 🗑 Storage CLEARED
The Problem

Palantir is building a dossier on you.
Right now.

⚠️ What surveillance systems already know about you

Companies like Palantir Technologies sell software to ICE, law enforcement, and intelligence agencies that integrates hundreds of data sources — your social media posts, location history, browser fingerprint, photo metadata, and even Medicaid records — into a single identity profile.

This data comes from the open web. From your browser. From photos you uploaded years ago that contain GPS coordinates of your home. From the unique digital fingerprint your browser leaves on every website you visit — one that works even in incognito mode.

You never agreed to this. CHAFF is your legal right to fight back.

$2B+
Palantir's US government contracts
400+
Data brokers selling your profile right now
23
Active privacy shields in the extension
0
Federal data privacy laws in the US
How It Works

The radar still sweeps. The sky is just full of noise.

CHAFF doesn't block tracking — it makes tracking unreliable. Every signal surveillance systems depend on becomes statistically meaningless.

STEP 01
Randomize Your Fingerprint
Every website you visit gets a slightly different browser fingerprint — canvas hash, WebGL renderer, hardware specs. Cross-site identity tracking becomes impossible.
STEP 02
Flood with Noise
While you browse normally, CHAFF silently visits unrelated pages in the background. Your behavioral profile in surveillance databases becomes incoherent noise.
STEP 03
Strip Hidden Data
Every photo you upload has GPS coordinates, device model, and timestamps removed automatically before it leaves your browser. Invisible. Instant.
STEP 04
Protect Your IP
WebRTC — a browser feature routinely exploited to reveal your real IP address even through a VPN — is blocked from leaking your location.
Features

Everything surveillance systems use against you. Neutralized.

23 active shields across 7 toggleable modules. Every technique surveillance systems use against you — neutralized.

🎭
Canvas Fingerprint Randomization
Adds subtle noise to all canvas toDataURL(), toBlob(), and getImageData() calls. Defeats the most common cross-site tracking technique.
🖥️
WebGL Renderer Spoofing
Randomly returns fake GPU vendor/renderer strings via getParameter(). Prevents GPU-based device identification across sites.
💻
Hardware Fingerprint Masking
Randomizes navigator.hardwareConcurrency, deviceMemory, and plugins. Your device appears as different hardware each visit.
🎵
AudioContext Fingerprint Noise
Adds noise to oscillator frequency, compressor threshold, and output timestamps. Defeats audio-based device fingerprinting.
🌐
Noise Browsing
Silently visits decoy websites via hidden iframes (Chrome) or fetch (Firefox). Floods surveillance systems with fictional browsing behavior.
📷
EXIF Photo Stripping
Automatically removes GPS coordinates and metadata from uploaded images. Prevents location leakage when sharing photos online.
⏱️
Timing Jitter
Adds micro-noise to Performance.now() and Date.now(). Defeats clock-skew fingerprinting that identifies devices by timing precision.
🔌
WebRTC IP Protection
Clears ICE servers from RTCPeerConnection configurations. Prevents your real IP from leaking through browser peer-to-peer connections.
📍
Timezone Spoofing
Returns a random timezone via Intl.DateTimeFormat.resolvedOptions(). Prevents location tracking through timezone detection.
🇳🇺
Language Spoofing
Randomizes navigator.language and navigator.languages. Blocks geo-identification via language preferences.
🗺
Geolocation Spoofing
Returns a plausible fake GPS location when sites request your position. Protects your real physical location from websites.
🚫
Do Not Track Signal
Sets navigator.doNotTrack = '1'. Signals to every website that you do not want to be tracked.
🔋
Battery API Spoofing
Returns randomized fake battery status. Prevents battery-level fingerprinting that uniquely identifies devices.
🎥
Media Device Label Stripping
Strips device labels from enumerateDevices() output. Labels contain unique IDs that can fingerprint your hardware.
💻
WebXR Blocking
Removes navigator.xr API entirely. Prevents VR/AR headset fingerprinting that identifies your hardware setup.
💻
Screen Resolution Noise
Adds subtle random offset to screen.width/height/availWidth/availHeight. Defeats screen-based fingerprinting.
⌨
Touch Points Randomization
Randomizes navigator.maxTouchPoints. Prevents device type identification via touch capability.
🔒
Client Hints Blocking
Blocks navigator.connection API and persistent-storage permission. Prevents Chrome's Client Hints fingerprinting system.
🔑
URL Tracking Parameter Stripping
Removes 30+ tracking parameters (utm_*, fbclid, gclid, msclkid, etc.) from URLs. Prevents cross-site tracking via URL parameters.
🗑
Auto-Clear Storage
Clears cookies, localStorage, sessionStorage, and IndexedDB when tabs close. Prevents persistent tracking via browser storage.
🛡️
Tracking Cookie Cleanup
Automatically deletes known tracking cookies (_ga, _fbp, __utm, etc.) on page hide. Removes surveillance cookies without manual intervention.
💾
Tracking localStorage Cleanup
Removes localStorage items from known trackers (analytics, hotjar, clarity, etc.). Cleans up persistent tracking data.
📋
Session Storage Clearing
Clears sessionStorage on page unload. Prevents session-based fingerprinting persistence.
Install

Up and running in under 2 minutes.

No account. No credit card. No catch. Just download, load, and you're protected.

🦘 Firefox

  1. Download the extension ZIP and unzip it
  2. Type about:debugging in the address bar and press Enter
  3. Click This Firefox
  4. Click Load Temporary Add-on
  5. Select manifest.json from the unzipped folder
  6. The ⚡ CHAFF icon appears in your toolbar

🌐 Chrome / Edge / Brave

  1. Download the extension ZIP and unzip it
  2. Go to chrome://extensions
  3. Enable Developer Mode (toggle, top right)
  4. Click Load Unpacked
  5. Select the unzipped chaff-extension folder
  6. The ⚡ CHAFF icon appears in your toolbar
Our Promise

We practice what we preach.

🔒
Zero Telemetry
We collect absolutely nothing. No analytics, no crash reports, no usage data. Read the source code — it's all there.
📖
100% Open Source
Every line of code is public on GitHub. Reproducible builds. Audit it yourself or have someone you trust do it.
🆑
Free Forever
No premium tier. No subscription. No ads. Privacy is a right, not a product. Funded by donations only.
⚖️
Legally Sound
Reviewed by civil liberties attorneys. No hacking, no impersonation, no fraud. Just noise. Read our full legal analysis.
📺

Down with Big Brother

Watch deep dives into how surveillance systems work, how companies like Palantir track you, and what you can do about it — legally and technically.

▶ Watch on YouTube
GET STARTED

The radar still sweeps.
Make it see nothing real.

Free, open source, and takes 2 minutes to install. No excuses.

⚡ Install CHAFF Free ★ Star on GitHub