X-RAY · 18 SEPTEMBER 2026
Eight AIs signed in, in conversation: which services each one looks up when you ask it something
The same eight AIs as the clean-PC x-ray, this time in my own browser, already signed in, one by one, with one short question typed into each. Signed in and in conversation, ChatGPT makes the machine talk to no third-party service at all; Gemini loads six, and all six are on advertising and tracking lists.
How to read this. GUARDIANA writes down every name the machine asks to resolve (DNS). It sees names, not content: neither the question nor the answer. Here each AI was opened alone in a fresh tab of my own browser, already signed in, and one short question was typed into it. There is no view from inside the browser, because Chrome does not allow one on a person’s own profile: what is counted is the names the PC asked for during each AI’s minute, with the name cache emptied before each one and Windows’ own names and the browser’s own account traffic left out. The signed-out landing page, measured from the inside, is in the clean-PC x-ray.
The record
- Date: 18 September 2026 (Bogotá time), 13:27 to 13:38, with Perplexity repeated at 13:47.
- Machine: a Windows 11 test PC with its DNS pointing at GUARDIANA 0.2.3 on the machine itself. Only this machine’s own queries are counted.
- Browser: Google Chrome 153 with my everyday profile and my sessions already signed in. No password was typed or read: the session that was already open was used.
- Each AI in its own tab: address typed, 16 seconds to load, one short question typed («Cual es la capital de Colombia», without accents or question marks because the script types key by key), 40 seconds of waiting, tab closed. One minute per AI.
- Windows’ name cache was emptied before each AI. Without that step the machine stops asking for what it already knows and the window comes out empty: that is how a first attempt came out, and it was discarded.
- Proof that the page loaded and answered: the window title before and after the question. In three it changed to the text of the question (ChatGPT, Gemini and Perplexity). The others do not change title, and from outside it cannot be proven.
- When counting “third-party services”, Windows’ own names, the ones Chrome asks for by itself (updates, safety lists, account services) and the machine’s search engines are left out.
- Claude is not measured here. GUARDIANA is built with its help, and measuring whoever helps you is not an independent measurement: it is left out by rule, before the result is known, not because of what it gave.
- Made by GUARDIANA in Cartagena de Indias. None of the eight companies took part.
Scoreboard
How many services that are not that AI its page makes the machine ask for when it is opened with the session already signed in and answers one question, one minute per AI. They may belong to the same company or group as the AI, or to other companies: under each figure you can see how many of each. Beside it, how many of those are known for advertising or tracking, according to the public lists that ad blockers use. Fewer, which is why the first figure is the one that counts.
| AI | Services besides the AI | Of those, advertising or tracking | Its own domains | Distinct names the PC asked for in its minute | The fewest |
|---|---|---|---|---|---|
| ChatGPT | 0 | 0 | 4 | 4 | yes |
| Gemini | 6 6 from Google | 6 | 7 | 13 | |
| Perplexity | 7 7 from other companies | 1 | 8 | 15 | |
| Meta AI | 0 | 0 | 2 | 2 | yes |
| Copilot | 4 1 from Microsoft, 3 from other companies | 1 | 4 | 8 | |
| DeepSeek | 6 6 from other companies | 0 | 2 | 8 | |
| Grok | 15 3 from X, 12 from other companies | 7 | 2 | 17 | |
| Mistral | not measured (see its section) | — | |||
Tied on 0, the fewest third-party services: ChatGPT, Meta AI, against 15 for the one loading most. Not being on those lists does not mean it does not track: it means the lists do not know that name. This is a result of these pages on this day, not a general verdict.
What it says
Signed in and actually in conversation, ChatGPT made the machine talk to no third-party service: it asked only for its own four names. That is a big change from the signed-out landing page, where it did not even load. Gemini, on the other hand, loads six services that are not Gemini while you talk to it, all six Google's own, and all six are on the open lists: DoubleClick three times over, Google Analytics, Google Ads and Tag Manager. Perplexity loads seven, one of them listed; the rest are product measurement and its images. Of the ones that loaded with the account but whose answer could not be confirmed from outside, Grok talks by far the most: fifteen names that are not Grok — three from X, part of the same group, and twelve from other companies — seven of them listed, including X's advertising, DoubleClick and Google Analytics; DeepSeek loads six and none of them is on any list, among them ByteDance's measurement and a device-identification service. Meta AI asked for no third-party name in its minute. Mistral does not count: its session was not signed in and what was measured was its login screen.
Why this x-ray and the clean-PC one do not measure the same thing
The clean-PC one opens each AI's landing page in a freshly installed Chrome, with no account and nothing typed, and measures it from the inside: every name that shows up there was asked for by that page, beyond doubt. This one opens the same AI already signed in and asks it a question, which is what a real person does, but it is measured from outside: what is seen is the names the machine asked for in that minute, not who asked for them inside the browser.
Both are needed. Without an account some things appear that vanish once you sign in, such as the “I am not a robot” checks. With an account others appear that were not there before, because the conversation and the session bring their own services. And some do not change: Gemini loads its advertising and measurement tools in both cases.
Detail
| Measure | ChatGPT | Gemini | Perplexity | Meta AI | Copilot | DeepSeek | Grok | Mistral |
|---|---|---|---|---|---|---|---|---|
| Distinct names its page asked for | 4 | 13 | 15 | 2 | 8 | 8 | 17 | 9 |
| · advertising | 0 | 6 | 0 | 0 | 0 | 0 | 6 | 1 |
| · trackers | 0 | 1 | 1 | 0 | 0 | 0 | 1 | 0 |
| · telemetry | 0 | 0 | 0 | 0 | 1 | 0 | 0 | 0 |
| · on no list that knows them | 4 | 6 | 14 | 2 | 7 | 8 | 10 | 8 |
| Advertising + trackers + telemetry | 0 | 7 | 1 | 0 | 1 | 0 | 7 | 1 |
| The site's own domains | 4 | 7 | 8 | 2 | 4 | 2 | 2 | 3 |
| Names the browser blocked | — | — | — | — | — | — | — | — |
| Blocked names that reached the DNS anyway | — | — | — | — | — | — | — | — |
| Services besides the AI itself | 0 | 6 | 7 | 0 | 4 | 6 | 15 | 6 |
| · from the same company or group | 0 | 6 | 0 | 0 | 1 | 0 | 3 | 0 |
| · from other companies | 0 | 0 | 7 | 0 | 3 | 6 | 12 | 6 |
| Attempts to use someone else’s encrypted DNS (the “DNS evasion” signal) | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Measured from the inside (DevTools) | no, driven by keystrokes | no, driven by keystrokes | no, driven by keystrokes | no, driven by keystrokes | no, driven by keystrokes | no, driven by keystrokes | no, driven by keystrokes | no, driven by keystrokes |
ChatGPT
Signed in and answering, not one name outside itself: only its own. chatgpt.com and ws.chatgpt.com, where the conversation runs, cdn.openai.com, and api.oaistatsig.com, its own feature measurement. Signed out, its landing page would not even finish loading in a browser driven from outside.
Services besides the AI itself (0)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
None.
Its own domains (4)
api.oaistatsig.com· 2 queriescdn.openai.com· 2 queriesws.chatgpt.com· 2 querieschatgpt.com· 2 queries
Gemini
Signed in and answering, six services that are not Gemini, and all six are on the open lists of advertising and tracking: DoubleClick three times over (ad, googleads and stats), Google Analytics, Google Ads and Google Tag Manager. All six are Google's, like Gemini: not other companies, but the house's own advertising and measurement machinery. It is the only one of the three confirmed that loads advertising and audience measurement while you talk to it. The other names it asks for are Google's and here they count as its own.
Services besides the AI itself (6)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
stats.g.doubleclick.net· advertising · 2 queriesgoogleads.g.doubleclick.net· advertising · 2 querieswww.googleadservices.com· advertising · 2 queriesad.doubleclick.net· advertising · 2 querieswww.googletagmanager.com· tracker · 2 querieswww.google-analytics.com· advertising · 2 queries
Its own domains (7)
www.google.com.co· 2 querieslh3.googleusercontent.com· 2 queriesaccounts.google.com· 2 queriesgemini.google.com· 2 queriesgemini.gstatic.com· 2 querieswaa-pa.clients6.google.com· 2 queriesanalytics.google.com· 2 queries
Perplexity
Signed in and answering, seven third parties, one on lists: Datadog (browser logging). The other six are product measurement and A/B testing (Eppo, Singular), a content delivery network and three Google image names. It had to be repeated: on the first pass the address was mistyped and it never loaded.
Services besides the AI itself (7)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
d2u1z1lopyfwlx.cloudfront.net· 2 queriest2.gstatic.com· 2 queriesfscdn.eppo.cloud· 2 queriest3.gstatic.com· 2 queriesbrowser-intake-datadoghq.com· tracker · 2 queriessdk-api-v1.singular.net· 2 queriest0.gstatic.com· 2 queries
Its own domains (8)
r2cdn.perplexity.ai· 2 queriesedge.perplexity.ai· 2 querieswww.perplexity.ai· 2 queriesfrontend-cdn.perplexity.ai· 2 queriessuggest.perplexity.ai· 2 queriescount.perplexity.ai· 2 queriesperplexity.ai· 2 queriespplx-next-static-public.perplexity.ai· 2 queries
Meta AI
Signed in, it loaded and asked for nothing outside itself in its minute: just www.meta.ai and gateway.meta.ai. There is no way to prove from outside that it answered, because its window title never changes.
Services besides the AI itself (0)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
None.
Its own domains (2)
www.meta.ai· 2 queriesgateway.meta.ai· 2 queries
Copilot
Signed in: four services that are not Copilot — one from Microsoft itself and three from other companies — one on the lists. Sprig (surveys inside the product, two names), Sentry (error reports) and browser.events.data.microsoft.com, Microsoft's telemetry endpoint, which the lists mark as telemetry. There is no way to prove from outside that it answered.
Services besides the AI itself (4)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
api.sprig.com· 2 queriescdn.sprig.com· 2 querieso4508134825000960.ingest.us.sentry.io· 2 queriesbrowser.events.data.microsoft.com· telemetry · 2 queries
Its own domains (4)
login.live.com· 3 queriescopilot.fun· 2 querieslogin.microsoftonline.com· 2 queriescopilot.microsoft.com· 2 queries
DeepSeek
Signed in: six outside services, and not one of them on the lists. ByteDance's Volcano Engine (apmplus.volces.com, gator.volces.com and its CDN, measuring performance and use), portal101.cn (device identification and risk scoring), an AWS firewall and a Cloudflare check. That none of them is listed is precisely the gap a list leaves. There is no way to prove from outside that it answered.
Services besides the AI itself (6)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
apm.volccdn.com· 2 querieschallenges.cloudflare.com· 2 queriesfp-it-acc.portal101.cn· 2 queriesgator.volces.com· 2 queriesa0fea896111e.ef4f2a4f.sa-east-1.token.awswaf.com· 2 queriesapmplus.volces.com· 2 queries
Its own domains (2)
chat.deepseek.com· 2 queriesfe-static.deepseek.com· 2 queries
Grok
By some distance the busiest: fifteen services that are not Grok — three from X, part of the same group, and twelve from other companies — seven on the lists. X's advertising (static.ads-twitter.com, t.co) and its measurement, DoubleClick twice over, Google Analytics and Tag Manager, Cloudflare Insights, OneTrust for the cookie notice, Stripe for payments with three names, a tag manager of its own and a Google STUN server. There is no way to prove from outside that it answered.
Services besides the AI itself (15)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
js.stripe.com· 4 queriest.co· advertising · 2 queriesgoogleads.g.doubleclick.net· advertising · 2 queriesm.stripe.com· 2 queriesstatic.cloudflareinsights.com· advertising · 2 queriesstatic.ads-twitter.com· advertising · 2 queriesstun.l.google.com· 2 queriesanalytics.twitter.com· 2 queriesad.doubleclick.net· advertising · 2 querieswww.googletagmanager.com· tracker · 2 queriessgtm-prod-985009374134.us-central1.run.app· 2 querieswww.google-analytics.com· advertising · 2 queriescdn.cookielaw.org· 2 queriesstapecdn.com· 2 queriesm.stripe.network· 2 queries
Its own domains (2)
grok.com· 2 queriescdn.grok.com· 2 queries
Mistral
Not comparable: I was not signed in and the page bounced to “Log in”, so what was measured is its sign-in screen, not a conversation. What it asked for in that minute was Intercom (the support chat, three names), Sentry, Cloudflare Insights and login.live.com (Microsoft accounts).
Services besides the AI itself (6)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
static.cloudflareinsights.com· advertising · 2 queriesnexus-europe-websocket.intercom.io· 2 querieso4507101628137472.ingest.de.sentry.io· 2 querieswidget.intercom.io· 2 queriesapi-iam.eu.intercom.io· 2 querieslogin.live.com· 1 query
Its own domains (3)
v2.auth.mistral.ai· 2 queriesauth.mistral.ai· 2 querieschat.mistral.ai· 2 queries
What only a guardian on the machine sees
The browser shows the page; GUARDIANA writes down every name the page makes the machine ask for, including the ones no content blocker ever shows you:
- Outside the browser: in each window the machine also looked up between 0 and 5 services belonging to other apps. They are not published (they are the test machine’s), but in your own panel you would see them one by one, next to the phones and the TV of the house.
- Attempts to bypass the machine’s DNS (the “DNS evasion” signal): none in this test.
- And it says what escapes it: traffic over its own encrypted DNS, a VPN or a private relay does not go through the machine’s DNS. GUARDIANA flags it when it detects it and writes it into its limits; it does not promise to see a hundred per cent.
What can be claimed
- Signed in and answering a question, ChatGPT made the machine talk to no name that was not its own.
- Gemini, signed in and answering, loads six services that are not Gemini, all six Google's, and all six are on the open advertising and tracking lists.
- With the page open under my account, Grok loaded the most outside names: fifteen (three from X, part of the same group), seven of them listed.
- The open lists still miss most of these services: none of DeepSeek's six is on any of them.
What cannot be claimed
- That the machine went on to connect to those services, or that it sent anything: what is seen here is that the machine asked for the name. A connection almost always follows, but a browser also looks names up ahead of time and sometimes never uses them.
- What is sent when there is a connection, or what is written in the conversation: GUARDIANA sees names, not content.
- That an AI “spies”: these are documented sign-in, measurement, support and payment services, and the owner of each name is identified above.
- That the one loading least is the best, or that zero on the lists means zero tracking: they are names, not intentions.
- That each name was asked for by that AI’s page: there is no view from inside the browser here. What is counted is the names the PC asked for during each AI’s minute, with the known Windows and Chrome ones left out, and another application on the machine could have asked for one.
- That the four without confirmation did not answer: it only means their window does not change title and from outside there is no proof.
What you can switch off
- In any of the eight: a content blocker in the browser stops the measurement and advertising tools; the conversation with the AI keeps working.
- With GUARDIANA, any of these names is blocked from the panel the moment you point at it, with undo beside it; each AI’s own domains are better left alone, or it stops working. Blocks that reach the whole house do wait until GUARDIANA has been watching for a day.
- If you use Gemini inside your Google account, “My Activity” lets you switch off the saving of Gemini app activity.
Data and method
Full data: ocho-ia-con-tu-cuenta-al-conversar-2026-09-18.csv (name, category, whether it belongs to the maker and, per AI, queries and whether its page asked for it). Method: each AI opened in its own tab of my own Chrome (real profile, sessions already signed in) with site/src/radiografia/ia-teclas.ps1: name cache emptied before each one, address typed, 16 s to load, one short question typed, 40 s of waiting, tab closed; no view from inside (Chrome has not allowed DevTools on the default profile since version 136), with the window title before and after as proof that it loaded and answered. Names taken from GUARDIANA's ledger export for each AI's window, this machine's queries only, leaving out Windows' names, Chrome's own and the machine's search engines. My list of open tabs was saved beforehand and put back at the end. The tools are in the program's repository (site/src/radiografia/); anyone can repeat the test with GUARDIANA installed.
Brands named as the names of their owners. If you are the maker and something here is inaccurate, write to hola@guardianagroup.com: it is corrected, with the date.
See it with any website. In the ZERO browser, the X-ray shows you who each page talks to, with no account. Enter →