{"id":6757,"date":"2026-10-28T08:15:50","date_gmt":"2026-10-28T08:15:50","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study"},"modified":"2026-10-28T08:15:50","modified_gmt":"2026-10-28T08:15:50","slug":"ai-chatbots-leak-conversations-to-ad-trackers-study","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/ai-chatbots-leak-conversations-to-ad-trackers-study","title":{"rendered":"AI Chatbots Leak Conversation Titles and Prompts to Ad Trackers, Study Finds"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n<ul class=\"wp-block-list\"><li><strong>The audit:<\/strong> Stony Brook University researchers tested 42 AI chat platforms in May 2026, 25 general-purpose assistants and 17 specialized health, legal and education bots.<\/li><li><strong>The leak:<\/strong> 21 platforms sent conversation titles to third-party trackers, and 9 sent users&#8217; verbatim prompts. On almost every leaking platform the user&#8217;s email address went out as well.<\/li><li><strong>Who receives it:<\/strong> More than 70% of tracker traffic went to four companies: Google, Microsoft, ByteDance and Meta. The paper is accepted at IEEE Symposium on Security and Privacy 2027.<\/li><\/ul>\n\n\n<p class=\"wp-block-paragraph\">People tell AI chatbots things they would never type into a search engine. A new measurement study by Paschalis Bekos, Billy Tsouvalas, Nick Nikiforakis and Michalis Polychronakis of Stony Brook University, &#8220;Penny for Your Prompts&#8221;, shows that on many platforms this context does not stay between user and chatbot. Advertising and analytics scripts embedded in the chat interfaces pick up conversation titles and prompts and send them to third parties, often together with an identifier that links them to a real person.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udd2c What the study shows<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The team used an instrumented browser with consent banners accepted, logged in with dedicated test accounts and submitted test prompts from a US East vantage point between May 6 and 20, 2026. They then searched all outgoing network traffic for the prompt text, the generated conversation title and the account email address, including encoded and hashed forms.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1344\" height=\"768\" src=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/chart-ai-chatbot-tracker-leakage.webp\" alt=\"Grouped bar chart of how many AI chat platforms leaked data: among 25 general-purpose platforms, 13 sent conversation titles and 4 sent verbatim prompts to trackers, 11 of the leakers also sent the email address and 8 sent both to the same company; among 17 task-specific platforms the counts are 8, 5, 8 and 7.\" class=\"wp-image-6755\" srcset=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/chart-ai-chatbot-tracker-leakage.webp 1344w, https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/chart-ai-chatbot-tracker-leakage-300x171.webp 300w, https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/chart-ai-chatbot-tracker-leakage-1024x585.webp 1024w, https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/chart-ai-chatbot-tracker-leakage-768x439.webp 768w\" sizes=\"auto, (max-width: 1344px) 100vw, 1344px\" \/><figcaption class=\"wp-element-caption\">i10X chart based on data from Bekos, Tsouvalas, Nikiforakis &amp; Polychronakis (2026), arXiv:2610.37467, Sections 4.1 and 4.2.<\/figcaption><\/figure>\n\n\n<ul class=\"wp-block-list\"><li><strong>Heavy tracking per prompt:<\/strong> General-purpose platforms triggered 540 network requests per prompt on average, 118 (22%) of them to trackers. The sessions reached 153 unique tracker domains, 13 per session.<\/li><li><strong>Prompts in the clear:<\/strong> Four general-purpose platforms leaked raw prompts. You.com sent the prompt in 92 requests per prompt to Google, partly because it sat in the page URL; Writesonic sent it to three different endpoints.<\/li><li><strong>Linkable to a person:<\/strong> 11 of the 13 leaking general-purpose platforms also exposed the user&#8217;s email address. On 8 of them, the same company received both, sometimes in the very same request, as with Writesonic and You.com.<\/li><li><strong>Specialized bots are worse:<\/strong> Health, legal and education platforms averaged 353 requests per prompt, with 39.7% going to trackers. 8 of 17 leaked conversation titles and 5 leaked verbatim prompts; all 8 also sent the email address.<\/li><li><strong>Sensitive examples:<\/strong> Health chatbots leaked verbatim prompts such as &#8220;I&#8217;ve been feeling really anxious and having trouble sleeping lately&#8221;, and legal bots sent prompts discussing a user&#8217;s immigration status. Conversation content always went out in plaintext; education and legal platforms mostly hashed the email (SHA-256), while the leaking health platform sent it unencrypted. The legal chatbot AI Lawyer sent the conversation title and the email to Meta and ByteDance in the same request.<\/li><\/ul>\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Tracker company<\/th><th>Share of tracker requests<\/th><\/tr><\/thead><tbody><tr><td>Google<\/td><td>41.8%<\/td><\/tr><tr><td>Microsoft<\/td><td>12.2%<\/td><\/tr><tr><td>ByteDance<\/td><td>8.6%<\/td><\/tr><tr><td>Meta<\/td><td>8.3%<\/td><\/tr><\/tbody><\/table><figcaption class=\"wp-element-caption\">Share of all tracker requests on the 25 general-purpose platforms. Google alone received 230 context-bearing requests across 8 platforms. Source: Bekos et al. (2026), Section 4.1.<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u2705 Why it matters: chat logs as ad signals<\/h2>\n\n\n<ul class=\"wp-block-list\"><li><strong>Not a hack, but default tooling:<\/strong> The leaks come from ordinary marketing and analytics tags. On 8 of 9 platforms analyzed in detail, scripts read the browser&#8217;s page title, which many chat apps set to the conversation title. Meta&#8217;s pixel queried the title on 5 platforms; Microsoft Clarity&#8217;s session recording captured on-page text including the raw prompt.<\/li><li><strong>Contradicting privacy policies:<\/strong> Several platforms state in their policies that they do not sell or share conversation data for advertising, while their pages send that data to ad networks.<\/li><li><strong>Big names affected, then fixed:<\/strong> During the study period, ChatGPT and Grok also had trackers collecting conversational context. Both removed them, which the authors verified before submission.<\/li><li><strong>Disclosure:<\/strong> The authors notified all affected platforms. Manus, Kimi, QuillBot and SciSpace forwarded the reports, Genspark and Chaton acknowledged them and TheLawGPT fixed the issue.<\/li><\/ul>\n\n\n<h2 class=\"wp-block-heading\">\ud83e\uddea Method in brief<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Sample:<\/strong> 42 web chat platforms with free accounts, general-purpose ones selected from SimilarWeb&#8217;s popularity ranking; general-purpose platforms were tested with a Gmail and a non-Gmail account. <strong>Instrumentation:<\/strong> the instrumented browser VisibleV8 logged network traffic and every JavaScript API access. Third-party domains were mapped to their parent companies and checked against the Disconnect and DuckDuckGo Tracker Radar lists. <strong>Detection:<\/strong> searches for prompt, title and email in raw, URL-encoded and hashed form. <strong>Attribution:<\/strong> separate sessions for five interactions (prompt submission, chat navigation, chat deletion, scrolling, button click) to isolate what triggers a leak. <strong>Review:<\/strong> accepted at IEEE S&amp;P 2027 with artifact badges for availability, functionality and reproducibility; the artifact is on <a href=\"https:\/\/zenodo.org\/records\/22831655\" rel=\"noopener\">Zenodo<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u2753 What remains open<\/h2>\n\n\n<ul class=\"wp-block-list\"><li><strong>A snapshot:<\/strong> One vantage point in the US, two weeks in May 2026 and a limited number of sessions per platform. Tracker setups change often, as the ChatGPT and Grok fixes show.<\/li><li><strong>Consent accepted:<\/strong> All tests accepted cookie banners. Users who reject tracking may see less leakage, which the study did not measure.<\/li><li><strong>Web only:<\/strong> Mobile apps, desktop clients and paid tiers were not tested.<\/li><li><strong>What trackers do with it:<\/strong> The study shows data arriving at third parties, not how it is stored, combined or used for ad targeting.<\/li><\/ul>\n\n\n<h2 class=\"wp-block-heading\">\ud83e\udded Context: privacy beyond model training<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Debates about chatbot privacy have mostly focused on whether providers train models on user conversations. This study points to a more mundane channel that web privacy researchers know from health and tax websites: third-party pixels on the page itself. With AI assistants now handling medical and legal questions, the same tags carry far more sensitive content. More research on how AI affects users and markets is collected under <a href=\"\/news\/category\/society-economy\">Society &amp; Economy<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udee0\ufe0f What it means for users and platform operators<\/h2>\n\n\n<ul class=\"wp-block-list\"><li><strong>For users:<\/strong> Rejecting non-essential cookies, using tracker blockers and avoiding names or identifying details in prompts reduce exposure. Assume the conversation title may be visible to third parties.<\/li><li><strong>For operators:<\/strong> Do not put conversation titles or prompts in page titles or URLs, disable autocapture and session replay on chat views, and audit which tags run on authenticated pages.<\/li><li><strong>For health and legal services:<\/strong> Treat chat pages like patient portals: no advertising pixels at all.<\/li><li><strong>For regulators:<\/strong> The gap between stated privacy policies and observed data flows is measurable and reproducible.<\/li><\/ul>\n\n\n<p class=\"wp-block-paragraph\">Coverage of the major assistants is on the <a href=\"\/news\/company\/open-ai\">OpenAI<\/a>, <a href=\"\/news\/product\/chat-gpt\">ChatGPT<\/a> and <a href=\"\/news\/product\/grok\">Grok<\/a> hubs.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u270d\ufe0f About the analysis<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This article is based on the full text of &#8220;Penny for Your Prompts: A Measurement Study of Contextual Leakage in AI Chat Platforms&#8221; (arXiv:2610.37467v1, submitted October 27, 2026), including the appendices and the IEEE S&amp;P meta-review. All numbers come from the paper; i10X did not repeat the measurements. The chart and table were created by i10X from figures reported in the paper. AI tools assisted with research and drafting; the selection, fact-checking and final editing were done by the i10X editorial team.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udd2d i10x Perspective<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The finding is less about AI than about the web&#8217;s advertising plumbing meeting a new kind of content. A conversation title such as a health question is a far richer signal than a page view, and the scripts that collect it were never designed with that in mind. The quick fixes by ChatGPT and Grok show the problem is solvable. For specialized health and legal chatbots, removing ad trackers from chat pages should be the minimum standard.<\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>A Stony Brook audit of 42 AI chat platforms found 21 sending conversation titles and 9 sending verbatim prompts to third-party trackers, often with the user&#8217;s email.<\/p>\n","protected":false},"author":2,"featured_media":6756,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"Penny for Your Prompts: A Measurement Study of Contextual Leakage in AI Chat Platforms","paper_url":"https:\/\/arxiv.org\/abs\/2610.37467","pdf_url":"https:\/\/arxiv.org\/pdf\/2610.37467v1","doi":"","arxiv_id":"2610.37467","authors":"Paschalis Bekos, Billy Tsouvalas, Nick Nikiforakis, Michalis Polychronakis","institutions":"Stony Brook University","paper_date":"2026-10-27","venue":"IEEE Symposium on Security and Privacy (S&P) 2027 (accepted; arXiv cs.CR preprint v1)","peer_reviewed":true,"code_url":"https:\/\/zenodo.org\/records\/22831655","data_url":"https:\/\/zenodo.org\/records\/22831655","funding_coi":"NSF (CNS-2211575) and Amazon Research Awards. No competing-interest statement.","figure_license":"Own chart and table compiled from reported figures (no reuse of original figures)","paper_license":"\u00a9 IEEE (arXiv non-exclusive distribution license)","replication":"partial","study_models":"42 web AI chat platforms (25 general-purpose incl. ChatGPT, Grok, DeepSeek, Kimi, Character.AI, You.com, Genspark; 17 task-specific health, legal and education chatbots)","study_sample":"42 platforms measured May 6-20, 2026 from a US East vantage point with consent accepted; Gmail and non-Gmail accounts","footnotes":"","_yoast_wpseo_primary_category":""},"categories":[59,52],"tags":[],"companies":[46,37,42,43,47,38,40],"products":[50,48],"class_list":["post-6757","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-society-economy","category-studies","company-deepseek","company-google","company-meta","company-microsoft","company-moonshot","company-open-ai","company-x-ai","product-chat-gpt","product-grok"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AI Chatbots Leak Prompts to Ad Trackers, Study Finds - i10X News<\/title>\n<meta name=\"description\" content=\"A Stony Brook audit of 42 AI chatbots found 21 sending conversation titles and 9 sending verbatim prompts to ad trackers, often with the user&#039;s email.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AI Chatbots Leak Prompts to Ad Trackers, Study Finds - i10X News\" \/>\n<meta property=\"og:description\" content=\"A Stony Brook audit of 42 AI chatbots found 21 sending conversation titles and 9 sending verbatim prompts to ad trackers, often with the user&#039;s email.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-28T08:15:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/ai-chatbots-leak-conversations-to-ad-trackers-study-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/ai-chatbots-leak-conversations-to-ad-trackers-study#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/ai-chatbots-leak-conversations-to-ad-trackers-study\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"AI Chatbots Leak Conversation Titles and Prompts to Ad Trackers, Study Finds\",\"datePublished\":\"2026-10-28T08:15:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/ai-chatbots-leak-conversations-to-ad-trackers-study\"},\"wordCount\":1188,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/ai-chatbots-leak-conversations-to-ad-trackers-study#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/ai-chatbots-leak-conversations-to-ad-trackers-study-title.webp\",\"articleSection\":[\"Society &amp; Economy\",\"Studies\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-10-28T08:15:50+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/ai-chatbots-leak-conversations-to-ad-trackers-study\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/ai-chatbots-leak-conversations-to-ad-trackers-study\",\"name\":\"AI Chatbots Leak Prompts to Ad Trackers, Study Finds - i10X News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/ai-chatbots-leak-conversations-to-ad-trackers-study#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/ai-chatbots-leak-conversations-to-ad-trackers-study#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/ai-chatbots-leak-conversations-to-ad-trackers-study-title.webp\",\"datePublished\":\"2026-10-28T08:15:50+00:00\",\"description\":\"A Stony Brook audit of 42 AI chatbots found 21 sending conversation titles and 9 sending verbatim prompts to ad trackers, often with the user's email.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/ai-chatbots-leak-conversations-to-ad-trackers-study#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/ai-chatbots-leak-conversations-to-ad-trackers-study\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/ai-chatbots-leak-conversations-to-ad-trackers-study#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/ai-chatbots-leak-conversations-to-ad-trackers-study-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/ai-chatbots-leak-conversations-to-ad-trackers-study-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Illustration: i10X\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/ai-chatbots-leak-conversations-to-ad-trackers-study#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AI Chatbots Leak Conversation Titles and Prompts to Ad Trackers, Study Finds\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AI Chatbots Leak Prompts to Ad Trackers, Study Finds - i10X News","description":"A Stony Brook audit of 42 AI chatbots found 21 sending conversation titles and 9 sending verbatim prompts to ad trackers, often with the user's email.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study","og_locale":"en_US","og_type":"article","og_title":"AI Chatbots Leak Prompts to Ad Trackers, Study Finds - i10X News","og_description":"A Stony Brook audit of 42 AI chatbots found 21 sending conversation titles and 9 sending verbatim prompts to ad trackers, often with the user's email.","og_url":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study","og_site_name":"i10X News","article_published_time":"2026-10-28T08:15:50+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/ai-chatbots-leak-conversations-to-ad-trackers-study-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"AI Chatbots Leak Conversation Titles and Prompts to Ad Trackers, Study Finds","datePublished":"2026-10-28T08:15:50+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study"},"wordCount":1188,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/ai-chatbots-leak-conversations-to-ad-trackers-study-title.webp","articleSection":["Society &amp; Economy","Studies"],"inLanguage":"en-US","dateModified":"2026-10-28T08:15:50+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study","url":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study","name":"AI Chatbots Leak Prompts to Ad Trackers, Study Finds - i10X News","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/ai-chatbots-leak-conversations-to-ad-trackers-study-title.webp","datePublished":"2026-10-28T08:15:50+00:00","description":"A Stony Brook audit of 42 AI chatbots found 21 sending conversation titles and 9 sending verbatim prompts to ad trackers, often with the user's email.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/ai-chatbots-leak-conversations-to-ad-trackers-study-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/ai-chatbots-leak-conversations-to-ad-trackers-study-title.webp","width":1344,"height":768,"caption":"Illustration: i10X"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/ai-chatbots-leak-conversations-to-ad-trackers-study#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"AI Chatbots Leak Conversation Titles and Prompts to Ad Trackers, Study Finds"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"}}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/6757","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=6757"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/6757\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/6756"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=6757"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=6757"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=6757"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=6757"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=6757"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}