DuckDuckGo Browser Found to Be Allowing Microsoft Trackers on Third-Party Sites Despite Privacy-First Claims

DuckDuckGo Founder and CEO has acknowledged the issue and said that it's due to a "search syndication contract" with Microsoft.

By Jagmeet Singh | Updated: 26 May 2022 17:55 IST

DuckDuckGo Browser Found to Be Allowing Microsoft Trackers on Third-Party Sites Despite Privacy-First Claims

DuckDuckGo browser for both Android and iOS devices is found to have the privacy infringement

Highlights

DuckDuckGo browser allows Microsoft trackers to run, a researcher found
Gabriel Weinberg has tried to give clarification on the matter
DuckDuckGo search engine does not have the same issue

DuckDuckGo browser, which is claimed to be a privacy-first offering, is found to be using a partial treatment on its tracking protection and not restricting Microsoft trackers from loading on third-party websites. The issue has been spotted by a researcher on the DuckDuckGo browser available for both Android and iOS devices. However, the privacy issue is claimed to not affect the DuckDuckGo search engine, which competes against Google and Microsoft's Bing by offering an all-private option.

Researcher Zach Edwards shared his findings on Twitter through which it has been revealed that the DuckDuckGo browser for mobile devices is not blocking scripts owned by Microsoft on non-Microsoft sites. The researcher demonstrated the issue by visiting Facebook's Workplace.com site on the browser. While it notified about blocking Google and Facebook trackers, the browser did not mention any details about blocking trackers from Microsoft.

The researcher showed that both Android and iOS versions of the DuckDuckGo browser did not restrict data transfers to Microsoft's LinkedIn and Bing ads.

You can capture data within the DuckDuckGo so-called private browser on a website like Facebook's https://t.co/u8W44qvsqF and you'll see that DDG does NOT stop data flows to Microsoft's Linkedin domains or their Bing advertising domains.

iOS + Android proof:
????????????‍????????⛈️⚖️???????????? pic.twitter.com/u3Q30KIs7e
— ℨ???????????? ???????????????????????????? (@thezedwards) May 23, 2022

Interestingly, DuckDuckGo says on app store listings that its mobile browser offers "seamless protections from third-party trackers while you search and browse." This is, however, apparently not the case.

DuckDuckGo Founder and CEO Gabriel Weinberg responded to Edwards' thread on Twitter to acknowledge that the browser does allow Microsoft trackers to load on third-party websites. He said that it happens due to the "search syndication agreement" between Microsoft and DuckDuckGo that prevents the latter from restricting Microsoft scripts on non-Microsoft sites.

However, the executive added that the company had been "continually pushing and expects to be able to do more soon" on the matter.

Giving further clarity on the issue that has resulted in a strong criticism among DuckDuckGo users and privacy advocates, Weinberg said on Reddit that the company was working with Microsoft to reduce or remove the limitation.

"I understand this is all rather confusing because it is a search syndication contract that is preventing us from doing a non-search thing. That's because our product is a bundle of multiple privacy protections, and this is a distribution requirement imposed on us as part of the search syndication agreement that helps us privately use some Bing results to provide you with better private search results overall," he explained.

Primarily, the major concern with not restricting Microsoft from loading its trackers on third-party websites is due to DuckDuckGo's claims of being a privacy-focussed browser. Weinberg said that the company was working on updates to its app store descriptions to make things clear to users.

It is important to note that while the DuckDuckGo browser has been allowing Microsoft trackers on third-party websites, Weinberg claimed that this is not the case with its search engine.

"To be clear, when you load our search results, you are completely anonymous, including ads. We also block third-party cookies in our browsers, including those from Microsoft-owned properties," he said on Twitter.

However, it is worth noting here that since DuckDuckGo uses Microsoft Advertising platform on its search engine, Microsoft gets access to users' IP address and user-agent string the moment they click on any ads available on search results. It has been defined in the search engine's privacy policy.

Weinberg acknowledged this limitation and pointed out that there are many constraints that are limiting DuckDuckGo from offering full-fledged protection to users.

But nonetheless, the way the browser did not provide any clarity to users until the privacy concern brought into limelight by the researcher questions the fairness of DuckDuckGo for its users. Microsoft also — as one can expect — has maintained its silence on the matter.

We discuss the best of Google I/O 2022 on Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.