A privacy audit of 9 conversational AI services finds conversation titles, prompts, and screenshots sent to ad trackers
What happened
IMDEA Networks 的研究人员对 ChatGPT、Gemini、Claude 等 9 款对话 AI 做了隐私审计，发现每一家都至少嵌了一个第三方广告或追踪服务。更具体的问题是：9 个网页端里有 6 个、8 个安卓端里有 3 个，会把对话链接、标题、用户输入的提示词甚至截图传给第三方，而且经常附带能定位到具体用户的持久标识符。部分服务还生成了没...
Coverage
Follow the reports to see the story from different sides.
- Hacker News front pagePickA privacy audit of 9 conversational AI services finds conversation titles, prompts, and screenshots sent to ad trackers
Researchers at IMDEA Networks audited nine conversational AI services, including ChatGPT, Gemini, and Claude. Every service embedded at least one third-party ad or tracking service. 6/9 web clients and 3/8 Android clients disclosed conversation URLs, titles, prompts, or screenshots to third parties, often alongside persistent user identifiers. Some providers also exposed entire conversations via public permalinks with no access controls, letting trackers read full threads. Consent choices and subscription tiers directly shaped the tracking surface. The team completed responsible disclosure with affected providers and EU data protection authorities.
Heat over time
Not enough continuous observations to draw a trend yet.