CarryLabThe test objects are pretend. The storage operations are real.
Updated October 15, 2026 · Independent experiment
CarryLab does not request a real login, upload a browser profile or import a state file. It writes generated test markers when you use the object controls.
What stays in your browser
A trial label is sixteen random hexadecimal characters. Fixture values use the form cl1:trial:kind. The label also appears in the page's query string so you can return to the same comparison. It is not a password or access token. Starting a new trial changes the label but does not erase earlier fixture values; they can then show “Different”.
| Storage | CarryLab name | Cleanup action |
|---|---|---|
| JavaScript memory | Module-local lamp value | Set to null |
| Script-readable cookie | carrylab_ink | Expire cookie |
| HttpOnly cookie | carrylab_guest | Same-origin endpoint expires cookie |
| localStorage / sessionStorage | carrylab-fixture-v1 | Remove the named key |
| IndexedDB | carrylab-fixture-v1 / items / postcard | Delete that object-store entry |
| Cache Storage | carrylab-fixture-v1 | Delete that named cache |
Only these fixtures are read. Unknown values encountered under our names are replaced with “Unrecognized data omitted” in the result. We do not register a service worker. The map's synthetic cache key is /_carrylab/brochure; writing it does not fetch another website.
Requests to the site
Pages, scripts, images and styles are served by Cloudflare. The /lab/api/pass endpoint receives and returns the fabricated guest marker, with no-store responses. It is the one fixture intentionally sent to the server, because HttpOnly cookies cannot be read directly by page JavaScript. No application database stores observations.
Normal hosting infrastructure receives request information such as your IP address, user agent, URL and cookies sent to this origin. The trial label may appear in request URLs or logs. “Synthetic” does not mean the network request is anonymous. This page does not claim a particular Cloudflare log-retention period.
Downloads and other services
The observation JSON is created in your browser and contains the trial, origin, time and seven results. The CLI reproducer runs locally and writes a richer report, synthetic state and disposable profile to the directory it prints. That report may contain local paths. Review files before sharing; the site does not upload them.
Optional referral links navigate to WebTraceCheck or CleanTempMail with the source domain, topic and placement in the URL. Those services handle their own sessions and data. No CarryLab observation is attached.
Clear the fixtures
Open the desk's storage map and use “Clear our fixtures”. Wait for the completed result. This removes our named browser values, not your downloaded files or CLI profile directories. IndexedDB's empty container can remain. Browser settings can remove all site data if you prefer. Close the owned CLI browser before deleting its printed temporary directory.
Questions: support@cleantempmail.com. Please do not include credentials or real authentication state.