Hi everyone,
I’d like to bring attention to a privacy issue with Brave’s Private Windows with Tor: locale, language, and timezone are leaked, which can help fingerprint/deanonymize users within the small Tor user pool.
Original bug report (open since 2021, priority P2):
This was confirmed reproducible by the original reporter again in 2021, and I’ve confirmed it’s still reproducible as of today (2026) on Brave Nightly 1.93.35 / Chromium 149.
Related feature request (proposed solution):
The proposal is to add an option to force English language for all Private Windows with Tor, similar to how Tor Browser handles this by default — since Tor Browser standardizes the language to reduce fingerprinting.
Given this has been tagged with feature/tor/leakproofing and priority/P2 for 5 years without resolution, I wanted to raise visibility here in case the community team can help escalate it to the engineering team.
Thanks for reading!