One quirk here is that they say "This website has no tracking or analytics." but Brave is showing Double Click / Google Ads? Might be an oversight!
back
2 comments
i think this is the culprit:
<iframe width="560" height="315" src="https://www.youtube.com/embed/_1Y8PwD5XDs" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>
a thing to keep in mind is that accelerometer access has recently been shown to leak enough information about passwords to compromise them
it is the embedded YouTube video most likely :)