Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
Google AI Privacy

Did ChatGPT Conversations Leak... Into Google Search Console Results? (arstechnica.com) 51

"For months, extremely personal and sensitive ChatGPT conversations have been leaking into an unexpected destination," reports Ars Technica: the search-traffic tool for webmasters , Google Search Console.

Though it normally shows the short phrases or keywords typed into Google which led someone to their site, "starting this September, odd queries, sometimes more than 300 characters long, could also be found" in Google Search Console. And the chats "appeared to be from unwitting people prompting a chatbot to help solve relationship or business problems, who likely expected those conversations would remain private." Jason Packer, owner of analytics consulting firm Quantable, flagged the issue in a detailed blog post last month, telling Ars Technica he'd seen 200 odd queries — including "some pretty crazy ones." (Web optimization consultant Slobodan ManiÄ helped Packer investigate...) Packer points out "nobody clicked share" or were given an option to prevent their chats from being exposed. Packer suspected that these queries were connected to reporting from The Information in August that cited sources claiming OpenAI was scraping Google search results to power ChatGPT responses. Sources claimed that OpenAI was leaning on Google to answer prompts to ChatGPT seeking information about current events, like news or sports... "Did OpenAI go so fast that they didn't consider the privacy implications of this, or did they just not care?" Packer posited in his blog... Clearly some of those searches relied on Google, Packer's blog said, mistakenly sending to GSC "whatever" the user says in the prompt box... This means "that OpenAI is sharing any prompt that requires a Google Search with both Google and whoever is doing their scraping," Packer alleged. "And then also with whoever's site shows up in the search results! Yikes."

To Packer, it appeared that "ALL ChatGPT prompts" that used Google Search risked being leaked during the past two months. OpenAI claimed only a small number of queries were leaked but declined to provide a more precise estimate. So, it remains unclear how many of the 700 million people who use ChatGPT each week had prompts routed to Google Search Console.

"Perhaps most troubling to some users — whose identities are not linked in chats unless their prompts perhaps share identifying information — there does not seem to be any way to remove the leaked chats from Google Search Console.."

Did ChatGPT Conversations Leak... Into Google Search Console Results?

Comments Filter:
  • by registrations_suck ( 1075251 ) on Sunday November 09, 2025 @03:53AM (#65783666)

    Giving your information to Google and expecting it to be private is like going to a whore house expecting to be loved.

    Just not happening.

    You're engaging in a transaction. Your Information for Google's service, or money for sex. That's all that's going on. Any expectations beyond that are simply unrealistic.

    • by Anonymous Coward
      Who in the fucking fuck is putting "extremely personal and sensitive" information into ChatGPT?

      Apparently ChatGPT is nothing more than a test to find the world's stupidest people.
    • Sometimes ChatGPT does search the web, but I believe it uses Bing not Google. Microsoft has a private Bing search that comes with privacy contracts to prevent leaking of corporate secrets.

      I suppose ChatGPT could use Google sometimes too, or it could be that some researcher at OpenAI took conversation excerpts and put them into a Google search box.

  • Leak means it was unintentional. IMO, it was no leak.

    • by Anonymous Coward

      Leak means it was unintentional. IMO, it was no leak.

      I just took a leak. It was intentional.

    • by PDXNerd ( 654900 )

      Information is the most valuable commodity in silicon valley at the moment and becoming more valuable every day... If ChatGPT provided information to google in a way that allows google to enhance their own competition to GPT, then it was indeed a leak.

  • What if I like that I can influence the AI and have it influence others?

    What if I convince ChatGPT that printing a strong, generous, inflation-indexed basic income is good policy, and ChatGPT starts convincing others?

    • >What if I like that I can influence the AI and have it influence others?

      So you think asking a LLM one question is going to "influence" it?

      Then *you* have done a good deed in the world?

      I wont be precious and just ask leading questions, I'll answer them too.

      No. With billions of other garbage questions being asked, and assuming that the questions become training data, your single question will have no measurable impact. It's like saying, if I have a conversation with my friend, will my member of Parliament
    • You have the moral conviction of a child and the social reach of Open Sim City. You pledge alligators to red flags. Was NOAA not paid to monitor your status? Rock the bot, CPR-man!
  • I hope EU regulators comes down on them like a tonne of bricks for GDPR violations. https://commission.europa.eu/l... [europa.eu]
  • Wonder what the technological results of all this will be in 3 years with ChatGPT6 or Gemini5, if Google hasn't taken that to it's graveyard already.

  • by registrations_suck ( 1075251 ) on Sunday November 09, 2025 @05:32AM (#65783756)

    I used to work in a Google building. In the downstairs lobby, after security and in front of the elevators, they had several large TVs mounted on the walls. They showed, in real time, search terms that were being entered into Google. It was interesting to just stand there for a while and watch how many times per second terms were being entered. I recall "sex with my dog" being a common one.

    I wonder if, these days, they would have something similar but with chat logs from their AI tool (I don't remember which one is theirs), but summarized in some way to make it digestible in this format. For example, "problems with my boss" might be one such summary, where as "sex problems" might be another. I also wonder if people would have objections to this particular use of the data, given that it in no way links backs to individuals who entered it. What do you think? Objectionable or no?

    • I used to work in a Google building. In the downstairs lobby, after security and in front of the elevators, they had several large TVs mounted on the walls. They showed, in real time, search terms that were being entered into Google. It was interesting to just stand there for a while and watch how many times per second terms were being entered. I recall "sex with my dog" being a common one.

      Better keep those bastards away from your dog then! 8^)

    • by Alascom ( 95042 )

      This is false.
      Yes google had a "queries scroll" video display in some lobbies, but it was NOT real time and it was manually curated to only safe examples.
      I know because I was there, I had the code, and I even pulled an April Fool stunt with my own curated "queries".

      As a side note, the very first "slashdot" server sat on a shelf near my workspace at Google.

    • by antdude ( 79039 )

      I remember back in the 90s, search engines' web site(s) [don't remember which one(s)] used to show what people were searching.

  • It is doomed to destroy itself in an infinite loop of regurgitated data until ChatGPT resembles insanity more than useful software, they need a filter so it dont end up feeding itself data
    • by allo ( 1728082 )

      Feeding their own data from the web is not a problem, because it is curated. If you would only train with Outputs that people let's say post on their blogs and Github, the model wouldn't learn new (like new libraries), but refine its usage of what it already knows, because it gets trained on which outputs were usable (while people did not post the crap outputs, thus filtering the bad parts reinforcing only the good ones).

      • What is missing is real world experience, its not like AI/GPT can walk out of a computer into the real world to experience things in real life like humans can, that is a limitation AI will never overcome
        • by allo ( 1728082 )

          I agree. And in general having more input modalities and more input. People put a lot of web content and a lot of books into an LLM, but a human has a lot of interactions of lower quality but A LOT of them.

          When it comes to interaction, there are a few "world models" emerging. I am not sure if they will help other areas of AI or just be useful for things like shown in their demos, but at least it is more than just a huge pile of text/images. One might also be able to generate a lot of experience data just by

  • by mukundajohnson ( 10427278 ) on Sunday November 09, 2025 @06:45AM (#65783814)

    For those not familiar, the Google Search Console has a tab that shows what the user searched for when your page was offered as a result. So when ChatGPT "searches the web", content relevant to your query can end up recorded in the search console for site admins.

    • So then are site admins exposed to the Noise theory of inflation, which they never heard about from mainstream economists?

      • Genuine question: why do you keep diverting the topic into economists via multiple posts? Are you human? Is this some kind of automated political spam?
        • What if capitalism killed my brother and I want revenge?

          • What if people that were really interested in random shit like mountain biking, macrame and golf similarly high-jacked every Internet conversation the way you do about economics and politics? Do you have anything to discuss about the actual topic on this conversation, or just your hobby and unrelated personal interests?
            • I’m sorry for the tragic loss of your brother, by the way. I hope that over time you find some peace, and that your focus on politics and economics does not become a burden to your wellbeing. I genuinely mean that. Take care.
            • Is economics the dominant social force of our time? If I want things to get better, can I do worse than starting by attacking what I see as the root cause of my ills, my brother's ills, and most of the ills that come up in slashdot stories?

  • "Did OpenAI go so fast that they didn't consider the privacy implications" of course they did, privacy is contrary to their data acquisition goal.
    • If I have not identified you as the source of the super secret info that you provided me with, when I tell everyone the super secret info, how is your privacy affected?

      Example:

      You told me you have sex with your dog.

      I go online and say "I know someone who told me he has sex with his dog".

      Where is the privacy diminished?

The IBM 2250 is impressive ... if you compare it with a system selling for a tenth its price. -- D. Cohen

Working...