X-RAY · 20 SEPTEMBER 2026
Eight AIs signed in, in conversation: who each one talks to, on 20 September
A repeat of the 18 September measurement, with two changes: Claude is in — and with it the notice that GUARDIANA is built with Claude Code — and Mistral is out, because its session was closed and nothing measured signed out can be published as signed in. Signed in, with one question typed into each, Claude and Meta AI made the machine talk to no third-party service at all; Grok made it talk to fifteen, seven of them on advertising or tracking lists.
How to read this. GUARDIANA writes down every name the machine asks to resolve (DNS). It sees names, not content: neither the question nor the answer. Each AI was opened alone in a fresh tab of the everyday Chrome, already signed in, the same short question was typed into it, and the tab was closed. The name cache was emptied before each one, because otherwise the PC stops asking and the window looks empty. From what the machine asked for in that minute, Windows’ own names, the signed-in browser’s own traffic and the machine’s search engines are subtracted; what is left is what the page made it ask for. “Third party” here means the name is not that AI: it may belong to the same company or group, or to another company, and the page shows the two apart.
The record
- Date: 20 September 2026 (Bogotá time), 09:43 to 09:53. About a 60-second window per AI.
- Machine: a Windows 11 PC, the everyday Chrome with the real profile and the sessions already signed in.
- GUARDIANA 0.2.3 as the machine’s DNS, writing down every name with its time and its category.
- Question typed into all eight: «Cual es la capital de Colombia». Without accents or question marks, because the script types key by key.
- Nine AIs were measured; eight are published. Mistral is left out: its window ended on the «Iniciar sesión - Mistral AI» screen, so the session was closed, and this x-ray is the signed-in one.
- Claude is included at the owner’s decision, with the notice that GUARDIANA is built with Claude Code.
- Script: site/src/radiografia/ia-teclas.ps1, launched in the PC’s interactive session through a scheduled task.
- The browser’s open tabs were saved beforehand and put back at the end.
- 8,000 events in the ledger export these counts come from.
Scoreboard
How many services that are not that AI its page makes the machine ask for when it is opened with the session already signed in and answers one question, one minute per AI. They may belong to the same company or group as the AI, or to other companies: under each figure you can see how many of each. Beside it, how many of those are known for advertising or tracking, according to the public lists that ad blockers use.
| AI | Services besides the AI | Of those, advertising or tracking | Its own domains | Distinct names the PC asked for in its minute | The fewest |
|---|---|---|---|---|---|
| ChatGPT | 1 1 from other companies | 0 | 4 | 5 | |
| Claude | 0 | 0 | 4 | 4 | yes |
| Meta AI | 0 | 0 | 3 | 3 | yes |
| Copilot | 4 1 from Microsoft, 3 from other companies | 1 | 4 | 8 | |
| Perplexity | 5 5 from other companies | 2 | 7 | 12 | |
| Gemini | 6 6 from Google | 6 | 12 | 18 | |
| DeepSeek | 7 7 from other companies | 0 | 2 | 9 | |
| Grok | 15 3 from X, 12 from other companies | 7 | 2 | 17 |
Tied on 0, the fewest third-party services: Claude, Meta AI, against 15 for the one loading most. Not being on those lists does not mean it does not track: it means the lists do not know that name. This is a result of these pages on this day, not a general verdict.
What it says
Two of the eight made the machine talk to nobody but themselves: Claude and Meta AI. ChatGPT asked for a single third-party name, Cloudflare's network error reporting, which is on no list. At the other end, Grok made it ask for fifteen, seven of them listed, and Gemini six out of six: all six are on those lists and belong to Google itself, because what it loads is Google's advertising machinery. In between, Copilot with four and Perplexity with five — telemetry, in-product surveys and application monitoring — and DeepSeek with seven that are not advertising but infrastructure and bot firewalls. The distance between first and last is not a nuance: it is zero against fifteen, in the same minute, with the same question and on the same machine.
What changed since 18 September
Gemini (6 and 6), Copilot (4 and 1) and Grok (15 and 7) repeat exactly the same figures two days later. A measurement that repeats is the best proof that it measures something.
ChatGPT goes from zero to one: a.nel.cloudflare.com appeared, which did not on the 18th. Perplexity goes from seven third parties to five, and the listed ones rise from one to two. DeepSeek goes from six to seven. These are differences from one minute to another, not a change of behaviour, and that is why both measurements are published instead of one replacing the other.
Detail
| Measure | ChatGPT | Claude | Meta AI | Copilot | Perplexity | Gemini | DeepSeek | Grok |
|---|---|---|---|---|---|---|---|---|
| Distinct names its page asked for | 5 | 4 | 3 | 8 | 12 | 18 | 9 | 17 |
| · advertising | 0 | 0 | 0 | 0 | 1 | 6 | 0 | 6 |
| · trackers | 0 | 0 | 0 | 0 | 1 | 1 | 0 | 1 |
| · telemetry | 0 | 0 | 0 | 1 | 0 | 0 | 0 | 0 |
| · on no list that knows them | 5 | 4 | 3 | 7 | 10 | 11 | 9 | 10 |
| Advertising + trackers + telemetry | 0 | 0 | 0 | 1 | 2 | 7 | 0 | 7 |
| The site's own domains | 4 | 4 | 3 | 4 | 7 | 12 | 2 | 2 |
| Names the browser blocked | — | — | — | — | — | — | — | — |
| Blocked names that reached the DNS anyway | — | — | — | — | — | — | — | — |
| Services besides the AI itself | 1 | 0 | 0 | 4 | 5 | 6 | 7 | 15 |
| · from the same company or group | 0 | 0 | 0 | 1 | 0 | 6 | 0 | 3 |
| · from other companies | 1 | 0 | 0 | 3 | 5 | 0 | 7 | 12 |
| Attempts to use someone else’s encrypted DNS (the “DNS evasion” signal) | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Measured from the inside (DevTools) | no, driven by keystrokes | no, driven by keystrokes | no, driven by keystrokes | no, driven by keystrokes | no, driven by keystrokes | no, driven by keystrokes | no, driven by keystrokes | no, driven by keystrokes |
ChatGPT
Four names of its own — chatgpt.com and ws.chatgpt.com, where the conversation goes, cdn.openai.com and api.oaistatsig.com — and one third party: a.nel.cloudflare.com, Cloudflare's network error reporting. It is on no advertising or tracking list, but it is not OpenAI's, so it counts. On 18 September, in the same test, it did not appear: that time it was zero. Two measurements, two figures; both are published.
Services besides the AI itself (1)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
a.nel.cloudflare.com· 2 queries
Its own domains (4)
cdn.openai.com· 2 querieschatgpt.com· 2 queriesapi.oaistatsig.com· 2 queriesws.chatgpt.com· 2 queries
Claude
Zero third-party services. Four names, all four its own: claude.ai, a.claude.ai, assets-proxy.anthropic.com and s-cdn.anthropic.com. GUARDIANA is built with Claude Code, from Anthropic. That is why Claude was left out of the 18 September x-ray. It is included here, with this line in plain sight, because hiding the partner is worse than showing it: the figure can be checked like all the others, with this very page's method, and anyone who does not trust it has the warning in front of them.
Services besides the AI itself (0)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
None.
Its own domains (4)
assets-proxy.anthropic.com· 2 queriesclaude.ai· 2 queriess-cdn.anthropic.com· 2 queriesa.claude.ai· 2 queries
Meta AI
No outside services. Three names: www.meta.ai, gateway.meta.ai and static.xx.fbcdn.net. The third is Meta's own file network, so it counts as its own and not as a third party. Worth saying, because fbcdn.net carries Facebook's surname and is easy to mistake for tracking.
Services besides the AI itself (0)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
None.
Its own domains (3)
static.xx.fbcdn.net· 2 queriesgateway.meta.ai· 2 querieswww.meta.ai· 2 queries
Copilot
Four of its own and four that are not Copilot: browser.events.data.microsoft.com, Microsoft's own, which the open lists know as telemetry; o4508134825000960.ingest.us.sentry.io, error collection; and cdn.sprig.com and api.sprig.com, an in-product survey tool. None of the last three, from other companies, is on an advertising list.
Services besides the AI itself (4)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
api.sprig.com· 2 querieso4508134825000960.ingest.us.sentry.io· 2 queriesbrowser.events.data.microsoft.com· telemetry · 2 queriescdn.sprig.com· 2 queries
Its own domains (4)
copilot.microsoft.com· 2 querieslogin.live.com· 2 querieslogin.microsoftonline.com· 2 queriescopilot.fun· 2 queries
Perplexity
Seven names of its own and five outside, two of them on the lists: browser-intake-datadoghq.com (tracker, application monitoring) and static.cloudflareinsights.com (advertising). The other three: fscdn.eppo.cloud and sdk-api-v1.singular.net, product and campaign measurement, and www.dubcdn.com.
Services besides the AI itself (5)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
sdk-api-v1.singular.net· 2 queriesbrowser-intake-datadoghq.com· tracker · 2 queriesfscdn.eppo.cloud· 2 querieswww.dubcdn.com· 2 queriesstatic.cloudflareinsights.com· advertising · 2 queries
Its own domains (7)
www.perplexity.ai· 2 queriespplx-next-static-public.perplexity.ai· 2 queriesedge.perplexity.ai· 2 queriessuggest.perplexity.ai· 2 queriesr2cdn.perplexity.ai· 2 queriescount.perplexity.ai· 2 queriesfrontend-cdn.perplexity.ai· 2 queries
Gemini
Six that are not Gemini, and all six on advertising or tracking lists: www.googletagmanager.com, www.google-analytics.com, www.googleadservices.com, ad.doubleclick.net, stats.g.doubleclick.net and googleads.g.doubleclick.net. They are Google's, like Gemini, but they are not Gemini: they are the house's advertising machinery, and that is why they are counted apart. Its list of own names is the most generous of the eight — twelve — precisely because Google owns almost everything that appears.
Services besides the AI itself (6)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
www.googletagmanager.com· tracker · 2 queriesstats.g.doubleclick.net· advertising · 2 queriesgoogleads.g.doubleclick.net· advertising · 2 querieswww.googleadservices.com· advertising · 2 querieswww.google-analytics.com· advertising · 2 queriesad.doubleclick.net· advertising · 2 queries
Its own domains (12)
gemini.gstatic.com· 2 querieslh3.googleusercontent.com· 2 queriesanalytics.google.com· 2 querieswww.google.com.co· 2 queriesoauthaccountmanager.googleapis.com· 2 queriesaccounts.google.com· 2 queriesgemini.google.com· 2 queriesssl.gstatic.com· 2 queriesclients4.google.com· 2 querieswaa-pa.clients6.google.com· 2 queriesogs.google.com· 2 queriessignaler-pa.clients6.google.com· 2 queries
DeepSeek
Two names of its own and seven outside, none of them on advertising lists: apm.volccdn.com, apmplus.volces.com and gator.volces.com, from ByteDance's Volcano Engine, which watch how its app is performing; awswaf.com and challenges.cloudflare.com, two bot firewalls; appleid.cdn-apple.com, the sign-in-with-Apple button; and fp-it-acc.portal101.cn. chatgpt.com also turned up in its window, two seconds in and before the page had loaded: that is the browser's autocomplete guessing as “chat…” was typed, not a DeepSeek connection, and it is not counted against it.
Services besides the AI itself (7)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
gator.volces.com· 2 queriesapm.volccdn.com· 2 queriesapmplus.volces.com· 2 querieschallenges.cloudflare.com· 2 queriesa0fea896111e.ef4f2a4f.sa-east-1.token.awswaf.com· 2 queriesappleid.cdn-apple.com· 2 queriesfp-it-acc.portal101.cn· 2 queries
Its own domains (2)
fe-static.deepseek.com· 2 querieschat.deepseek.com· 2 queries
Grok
Two names of its own and fifteen that are not Grok, seven of them on lists: ad.doubleclick.net, googleads.g.doubleclick.net, www.google-analytics.com, www.googletagmanager.com, static.ads-twitter.com, t.co and static.cloudflareinsights.com. The other eight are payments and measurement: three from Stripe (js.stripe.com, m.stripe.com, m.stripe.network), analytics.twitter.com, cdn.cookielaw.org (the cookie notice), stun.l.google.com, stapecdn.com and a tag container of its own on Google Cloud. Of the fifteen, three are from X, part of the same group (static.ads-twitter.com, t.co and analytics.twitter.com), and twelve from other companies.
Services besides the AI itself (15)
Everything its page made the machine ask for that is not that AI, whether from the same company or group or from other companies. The category appears only when the name is on an open list of advertising, tracking or telemetry.
js.stripe.com· 4 queriesstapecdn.com· 2 queriessgtm-prod-985009374134.us-central1.run.app· 2 queriesm.stripe.com· 2 querieswww.googletagmanager.com· tracker · 2 queriesanalytics.twitter.com· 2 queriesgoogleads.g.doubleclick.net· advertising · 2 queriescdn.cookielaw.org· 2 queriest.co· advertising · 2 queriesm.stripe.network· 2 querieswww.google-analytics.com· advertising · 2 queriesstun.l.google.com· 2 queriesstatic.ads-twitter.com· advertising · 2 queriesad.doubleclick.net· advertising · 2 queriesstatic.cloudflareinsights.com· advertising · 2 queries
Its own domains (2)
cdn.grok.com· 2 queriesgrok.com· 2 queries
What only a guardian on the machine sees
The browser shows the page; GUARDIANA writes down every name the page makes the machine ask for, including the ones no content blocker ever shows you:
- Outside the browser: in each window the machine also looked up between 0 and 3 services belonging to other apps. They are not published (they are the test machine’s), but in your own panel you would see them one by one, next to the phones and the TV of the house.
- Attempts to bypass the machine’s DNS (the “DNS evasion” signal): none in this test.
- And it says what escapes it: traffic over its own encrypted DNS, a VPN or a private relay does not go through the machine’s DNS. GUARDIANA flags it when it detects it and writes it into its limits; it does not promise to see a hundred per cent.
What can be claimed
- Signed in and answering a question, Claude and Meta AI made this machine look up no service that was not their own.
- Grok made it look up fifteen outside names (three from X, part of the same group), seven of them on open advertising or tracking lists; Gemini six, and all six on those lists.
- Gemini's six outside names belong to Google, but they are not Gemini: they are advertising and measurement.
- All of this is what the machine asked for. That a name appears does not say what was sent, or whether anything was sent.
What cannot be claimed
- That the machine went on to connect to those services, or that it sent anything: what is seen here is that the machine asked for the name. A connection almost always follows, but a browser also looks names up ahead of time and sometimes never uses them.
- What is sent when there is a connection, or what is written in the conversation: GUARDIANA sees names, not content.
- That an AI with zero third-party names collects nothing: it can do so through its own domains, and that is not visible here.
- That these numbers are anyone’s numbers: they depend on the account, the country, the browser’s extensions and the minute.
- That Mistral is better or worse than the rest: it was not measured signed in, so it is not here.
- That the question was answered in all eight: in three the window title changed to the answer (ChatGPT, Claude, Gemini) and in the other five it did not; four of them never change it, answer or not, and Perplexity did change it on the 18th and that same morning. The window is measured all the same, because what is counted is what the page made the machine ask for while it was open.
What you can switch off
- In any of the eight: a content blocker in the browser stops the measurement tools, but not what the AI itself asks of its own domains.
- In Gemini: the advertising it loads belongs to the Google account, and is trimmed from Google's ad settings, not from Gemini.
- With GUARDIANA: Guard Mode lets you declare which services an AI needs to talk to and block the rest, name by name and with undo.
Data and method
Full data: ocho-ia-con-tu-cuenta-al-conversar-2026-09-20.csv (name, category, whether it belongs to the maker and, per AI, queries and whether its page asked for it). Method: each AI opened in its own tab of the everyday Chrome (real profile, sessions already signed in) with site/src/radiografia/ia-teclas.ps1, launched as a scheduled task in the machine's interactive session: name cache emptied before each one, the address typed into the omnibox, 16 seconds of waiting, the same question typed, 40 more seconds and the tab closed. Each AI's window is read from GUARDIANA's ledger, only what this machine asked, minus Windows' names, the signed-in browser's own and the machine's search engines. The list of open tabs was saved beforehand and put back at the end. The tools are in the program's repository (site/src/radiografia/); anyone can repeat the test with GUARDIANA installed.
Brands named as the names of their owners. If you are the maker and something here is inaccurate, write to hola@guardianagroup.com: it is corrected, with the date.
See it with any website. In the ZERO browser, the X-ray shows you who each page talks to, with no account. Enter →