What's this about?
Researchers examined nine web services and eight Android apps and found third-party advertising or tracking in every tested service. Several disclosed conversation URLs, titles, prompts or screenshots alongside persistent identifiers.
What exactly is a conversation-derived artefact?
It is data created from the chat rather than the raw message alone—for example an auto-generated title, sharing URL or screenshot that may still reveal salary, illness or project details.
What's the community saying?
HN 410 points, 130 comments at selection time.
- Readers focused on public permalinks that exposed whole conversations without access control.
- Many rejected the word “leak,” arguing intentional third-party transmission should be called sharing or selling.
- Others worried that AI chats contain more intimate material than ordinary browsing histories, making familiar ad tracking more dangerous.