August 25, 2026, 3:33 pm | Read time: 2 minutes
Cookies are far from the only way to recognize users on the internet. According to a report, AliExpress used a much more discreet tracking method that even works without stored data in the browser.
Hidden Tracking in the Background
Many websites use cookies to recognize visitors or save settings. However, the Chinese shopping platform AliExpress reportedly employed a different tracking method. Scripts were executed in the background of the website, generating inaudible audio signals without users noticing.
The technology worked according to the report entirely in secret. Although an audio signal was played, the volume was set to zero. Users could neither hear nor detect that audio processing was occurring in the browser. The goal was to uniquely identify devices without relying on traditional cookies.
LibreWolf as a Safer Alternative to Firefox? Advantages and Disadvantages of the Internet Browser
Google Extension Hijacked by Scammers
How Audio Becomes a Fingerprint
The method is based on the fact that each device processes audio signals slightly differently. The processor, sound chip, drivers, operating system, and browser each influence the result in their own way. Although the original signal is identical, small deviations occur.
These differences can be compiled into a digital fingerprint. The website can recognize a device during subsequent visits, even if no cookies are stored. According to the report, data collection was not limited to audio measurements. Information about hardware, display settings, and user interaction with the website was also reportedly collected.
Also of interest: What you need to know when shopping on AliExpress and Temu
Accidental Discovery Sparks Criticism
The method was apparently discovered only by chance. As the tech portal “TechSpot” reports, a developer noticed issues with his Bluetooth headphones whenever a tab with AliExpress was open. The headphones no longer switched correctly between the computer and smartphone. The problem disappeared after closing the website.
During a subsequent examination of the source code, the developer reportedly found scripts that conducted measurements using the so-called Web Audio API. Such digital fingerprints are used, among other things, for fraud detection. However, privacy advocates are critical of the fact that the same technology can also be used to track users without their knowledge and recognize them over extended periods.