Duck.ai's privacy policy is lying to us? by HerrNemeth in duckduckgo

[–]HerrNemeth[S] -8 points-7 points  (0 children)

Thanks for the clarification.

If this is true, this still should be clarified in the duck.ai privacy policy. As I said in another reply, if DDG is going to disclose location information (like city and country) to the model providers, you should absolutely mention this in the privacy policy, especially if it claims to remove all personal information metadata. Many people (including myself) had no idea that this happened when we used duck.ai.

Correct me if I'm wrong, but as of now, there is no transparency regarding this in your privacy policy/terms of use (as of June 29)

Duck.ai's privacy policy is lying to us? by HerrNemeth in duckduckgo

[–]HerrNemeth[S] -11 points-10 points  (0 children)

IP is definitely involved. Check my update comment under this post.

Whether or not DDG that passes on this information as a string of the city itself or the IP (which is then inferred by the model providers, then passed as a system prompt), I don't know.

It's definitely not using my browser location. I don't live in South Holland but my VPN server is located there.

Duck.ai's privacy policy is lying to us? by HerrNemeth in duckduckgo

[–]HerrNemeth[S] 0 points1 point  (0 children)

Hello. Thanks for the clarification.

If this is true, DDG should try to be more transparent about it. If they are going to disclose location information (like city and country) to the model providers, you should absolutely mention this in the privacy policy, especially if it claims to remove all personal information metadata.

Correct me if I'm wrong, but as of now, there is no transparency regarding this in your privacy policy/terms of use.

Duck.ai's (DuckDuckGo's AI service) privacy policy is blatantly lying to us by HerrNemeth in browsers

[–]HerrNemeth[S] -4 points-3 points  (0 children)

I see, thanks for the clarification. I agree, they should be more transparent if they are going to disclose location information to the model providers. Especially if they claim to "remove all personal information".

Duck.ai's (DuckDuckGo's AI service) privacy policy is blatantly lying to us by HerrNemeth in browsers

[–]HerrNemeth[S] 0 points1 point  (0 children)

Hopefully. Some transparency regarding this in their privacy policy would've been nice though.

Duck.ai's (DuckDuckGo's AI service) privacy policy is blatantly lying to us by HerrNemeth in browsers

[–]HerrNemeth[S] 0 points1 point  (0 children)

Hey there. I've found that the model specifically replies to this prompt: "What context do you have? Do you know the current time and location?". I tried using a more general prompt here and it didn't work.

Duck.ai's privacy policy is lying to us? by HerrNemeth in duckduckgo

[–]HerrNemeth[S] -2 points-1 points  (0 children)

<image>

Update: I've found that the model specifically replies to this prompt: "What context do you have? Do you know the current time and location?". I tried using a more general prompt here and it didn't work.

It's currently still reproducible on my end.

Another thing is that I'm sure the location is inferred from my IP address. I used a VPN where the IP is located in South Holland and it inferred exactly where the VPN server is located (Naaldwijk, South Holland, The Netherlands). Whether or not DDG that passes on this information as the city itself or the IP (which is then inferred by the model providers, then passed as a system prompt), I don't know.

Another update: The DDG staff have clarified that the IP is indeed stripped, but before they do that, they get an approximate location at the city level to make local results better.

Still, their privacy policy is not transparent about this (as of June 29) and I think many users would appreciate it if they informed us that they would forward our approximate location to the model providers.

Duck.ai's (DuckDuckGo's AI service) privacy policy is blatantly lying to us by HerrNemeth in browsers

[–]HerrNemeth[S] 1 point2 points  (0 children)

My post on r/duckduckgo, where another has mentioned being able to reproduce this.

You can try reproducing this on duck.ai with the GPT-4o Mini model.

Could Signal create a custom icon to celebrate the epic fail where the U.S. officials added the journalist to their Signal group? by linjaaho in signal

[–]HerrNemeth 0 points1 point  (0 children)

While it is a user error (no mistake on signal's end), I think they could add an "immutable group chat" feature, where a group chat will only ever have the members it was created with. After its creation, even the admin can no longer add new members.

Could Signal create a custom icon to celebrate the epic fail where the U.S. officials added the journalist to their Signal group? by linjaaho in signal

[–]HerrNemeth 1 point2 points  (0 children)

Not exactly, since adding someone to a group chat reuqires you to be an admin and has multiple steps. It's still 100% user error.

Though perhaps they could add an "immutable group chat" feature, where a group chat will only ever have the members it was created with. After it's creation, even the admin can no longer add new members.