X-RAY · 20 SEPTEMBER 2026
Eight AIs signed in, in conversation: who each one talks to, on 20 September
A repeat of the 18 September measurement, with two changes: Claude is in -- and with it the notice that GUARDIANA is built with Claude Code -- and Mistral is out, because its session was closed and nothing measured signed out can be published as signed in. Signed in, with one question typed into each, Claude and Meta AI made the machine talk to no third-party service at all; Grok made it talk to fifteen, seven of them on advertising or tracking lists.
How to read this. GUARDIANA writes down every name the machine asks to resolve (DNS). It sees names, not content: neither the question nor the answer. Each AI was opened alone in a fresh tab of the everyday Chrome, already signed in, the same short question was typed into it, and the tab was closed. The name cache was emptied before each one, because otherwise the PC stops asking and the window looks empty. From what the machine asked for in that minute, Windows' own names, the signed-in browser's own traffic and the machine's search engines are subtracted; what is left is what the page made it ask for. "Third party" means the name does not belong to that AI's company.
Scoreboard
How many services that are not that AI its page makes the machine ask for when it is opened with the session already signed in and answers one question, one minute per AI. Beside it, how many of those are known for advertising or tracking, according to the public lists that ad blockers use.
| AI | Services besides the AI | Of those, advertising or tracking | Its own domains | Distinct names the PC asked for in its minute | The fewest |
|---|---|---|---|---|---|
| ChatGPT | 1 | 0 | 4 | 5 | |
| Claude | 0 | 0 | 4 | 4 | yes |
| Meta AI | 0 | 0 | 3 | 3 | yes |
| Copilot | 4 | 1 | 4 | 8 | |
| Perplexity | 5 | 2 | 7 | 12 | |
| Gemini | 6 | 6 | 12 | 18 | |
| DeepSeek | 7 | 0 | 2 | 9 | |
| Grok | 15 | 7 | 2 | 17 |
Tied on 0, the fewest third-party services: Claude, Meta AI, against 15 for the one loading most. Not being on those lists does not mean it does not track: it means the lists do not know that name. This is a result of these pages on this day, not a general verdict.
What it says
Two of the eight made the machine talk to nobody but themselves: Claude and Meta AI. ChatGPT asked for a single third-party name, Cloudflare's network error reporting, which is on no list. At the other end, Grok made it ask for fifteen, seven of them listed, and Gemini six out of six: every third-party name it loads is on those lists, because what it loads is Google's advertising machinery. In between, Copilot with four and Perplexity with five -- telemetry, in-product surveys and application monitoring -- and DeepSeek with seven that are not advertising but infrastructure and bot firewalls. The distance between first and last is not a nuance: it is zero against fifteen, in the same minute, with the same question and on the same machine.
ChatGPT
Four of its own names -- chatgpt.com and ws.chatgpt.com, which carry the conversation, cdn.openai.com and api.oaistatsig.com -- and one third party: a.nel.cloudflare.com, Cloudflare's network error reporting. It is on no advertising or tracking list, but it is not OpenAI's, so it counts. On 18 September, in the same test, it did not appear: that day it was zero. Two measurements, two numbers; both are published.
Third parties in this run: cloudflare.com.
Claude
Zero third-party services. Four names, all four its own: claude.ai, a.claude.ai, assets-proxy.anthropic.com and s-cdn.anthropic.com. GUARDIANA is built with Claude Code, by Anthropic, which is why Claude was left out of the 18 September x-ray. It is included here, with this line in plain sight, because hiding the partner is worse than showing it: the figure can be checked like any other, with the method on this page, and anyone who does not trust it has the notice in front of them.
Meta AI
Zero third parties. Three names: www.meta.ai, gateway.meta.ai and static.xx.fbcdn.net. The third is Meta's own file network, so it counts as its own and not as someone else's; saying so matters, because fbcdn.net carries Facebook's surname and is easy to mistake for tracking.
Copilot
Four of its own and four third parties: browser.events.data.microsoft.com, which the open lists know as telemetry; o4508134825000960.ingest.us.sentry.io, error collection; and cdn.sprig.com and api.sprig.com, an in-product survey tool. None of the last three is on advertising lists.
Third parties in this run: sprig.com, microsoft.com, sentry.io.
Perplexity
Seven of its own names and five third parties, two of them listed: browser-intake-datadoghq.com (tracker, application monitoring) and static.cloudflareinsights.com (advertising). The other three: fscdn.eppo.cloud and sdk-api-v1.singular.net, product and campaign measurement, and www.dubcdn.com.
Third parties in this run: browser-intake-datadoghq.com, eppo.cloud, singular.net, cloudflareinsights.com.
Gemini
Six third parties, and all six on advertising or tracking lists: www.googletagmanager.com, www.google-analytics.com, www.googleadservices.com, ad.doubleclick.net, stats.g.doubleclick.net and googleads.g.doubleclick.net. They belong to Google, as Gemini does, but they are not Gemini: they are the house's advertising machinery, which is why they are counted apart. Its own-name list is the most generous of the eight -- twelve -- precisely because Google owns almost everything that shows up.
Third parties in this run: doubleclick.net, google-analytics.com, googleadservices.com, googletagmanager.com.
DeepSeek
Two names of its own and seven third parties, none on advertising lists: apm.volccdn.com, apmplus.volces.com and gator.volces.com, from Volcano Engine (ByteDance), which do its application monitoring; awswaf.com and challenges.cloudflare.com, two bot firewalls; appleid.cdn-apple.com, the sign-in-with-Apple button; and fp-it-acc.portal101.cn. chatgpt.com also appeared in its window, two seconds in and before the page had loaded: that is the browser's omnibox guessing as "chat..." was typed, not a connection of DeepSeek's, and it is not counted against it.
Third parties in this run: awswaf.com, volccdn.com, volces.com, cdn-apple.com.
Grok
Two names of its own and fifteen third parties, seven of them listed: ad.doubleclick.net, googleads.g.doubleclick.net, www.google-analytics.com, www.googletagmanager.com, static.ads-twitter.com, t.co and static.cloudflareinsights.com. The other eight are payments and measurement: three from Stripe (js.stripe.com, m.stripe.com, m.stripe.network), analytics.twitter.com, cdn.cookielaw.org (the cookie notice), stun.l.google.com, stapecdn.com and a tag container of its own on Google Cloud.
Third parties in this run: stripe.com, doubleclick.net, twitter.com, cookielaw.org.
What can be claimed
- Signed in and answering a question, Claude and Meta AI made this machine look up no service that was not their own.
- Grok made it look up fifteen third-party names, seven of them on open advertising or tracking lists; Gemini six, and all six on those lists.
- Gemini's six third parties belong to Google, but they are not Gemini: they are advertising and measurement.
- All of this is what the machine asked for. That a name appears does not say what was sent, or whether anything was sent.
What cannot be claimed
- That the machine went on to connect to those services, or that it sent anything: what is seen here is that the machine asked for the name. A connection almost always follows, but a browser also looks names up ahead of time and sometimes never uses them.
- What is sent once there is a connection, or what is written in the conversation: GUARDIANA sees names, not content.
- That an AI with zero third-party names collects nothing: it can do so through its own domains, and that is not visible here.
- That these numbers are anyone's numbers: they depend on the account, the country, the browser's extensions and the minute.
- That Mistral is better or worse than the rest: it was not measured signed in, so it is not here.
- That the question was answered in all eight: in three the window title changed to the answer (ChatGPT, Claude, Gemini) and in the other five it never changes, answer or not. The window is measured all the same, because what is counted is what the page made the machine ask for while it was open.
The record
- Date: 20 September 2026 (Bogotá time), 09:43 to 09:53. About a 60-second window per AI.
- Machine: a Windows 11 test PC with its DNS pointing at GUARDIANA 0.2.3 on the machine itself. Only this machine's own queries are counted.
- Browser: the everyday Chrome with the real profile and the sessions already signed in. No password was typed or read: the session that was already open was used.
- Question typed into all eight: "Cual es la capital de Colombia".
- Nine AIs were measured; eight are published. Mistral is left out: its window ended on the "Sign in - Mistral AI" screen, so the session was closed, and this x-ray is the signed-in one.
- Claude is included at the owner's decision, with the notice that GUARDIANA is built with Claude Code.
- Script: site/src/radiografia/ia-teclas.ps1, launched in the interactive session through a scheduled task.
- The browser's open tabs were saved beforehand and put back at the end.
- 8,000 events in the ledger extract these counts come from.
Data and method
Full data: ocho-ia-con-tu-cuenta-al-conversar-2026-09-20.csv (name, category, whether it belongs to the maker and, per AI, queries and whether its page asked for it). Method: each AI opened in its own tab of the everyday Chrome (real profile, sessions already signed in) with site/src/radiografia/ia-teclas.ps1, launched as a scheduled task in the machine's interactive session: name cache emptied before each one, the address typed into the omnibox, 16 seconds of waiting, the same question typed, 40 more seconds and the tab closed. Each AI's window is read from GUARDIANA's ledger, only what this machine asked, minus Windows' names, the signed-in browser's own and the machine's search engines. The list of open tabs was saved beforehand and put back at the end. The tools are in the program's repository (site/src/radiografia/); anyone can repeat the test with Guardiana installed.
Brands named as the names of their owners. If you are the maker and something here is inaccurate, write to hola@guardianagroup.com: it is corrected, with the date.