DuckDuckGo confirms a researcher's findings that its browser allows Microsoft trackers on third-party websites, citing a search content agreement with Microsoft
The privacy-focused DuckDuckGo browser purposely allows Microsoft trackers on third-party sites due to an agreement … Source: @thezedwards and @yegg .
BleepingComputerLawrence Abrams
Context & Ripple Effects
DuckDuckGo had made its Tracker Radar database of tracking domains public, reinforcing its position as a company that identifies and blocks web tracking. The confirmed Microsoft carve-out exposed a limit in that promise: a search-content agreement constrained protections in the browser.
The issue became consequential because DuckDuckGo’s privacy positioning depended on consistent third-party tracker blocking. Following criticism, it later announced plans to block Microsoft tracking scripts, turning the disclosure into a test of whether contractual search dependencies could override product commitments.
First-order effects
DuckDuckGo users browsing third-party sites remained exposed to Microsoft tracking scripts that the browser’s broader privacy message led them to expect would be blocked.
Microsoft retained an exception in DuckDuckGo’s browser protections through the search-content agreement, while DuckDuckGo absorbed the immediate credibility cost of disclosing it.
Second-order effects
Public criticism forced DuckDuckGo to remove the Microsoft exception, aligning its tracker-blocking policy more closely with the Tracker Radar-based privacy posture it had promoted.
The reversal made search-syndication terms a visible product-governance issue: DuckDuckGo’s agreements with Microsoft could no longer be treated as separate from browser privacy claims.
Third-order effects
Privacy browsers face a structural tension when a partner that supplies core search content also sets limits on tracking protections; sustained scrutiny favors disclosures and product policies that expose those trade-offs.
As privacy claims become evaluated against exceptions rather than default behavior, differentiation shifts toward whether companies can preserve protections despite dependencies on larger platform partners.
The trend: Privacy products are being judged increasingly on whether commercial platform dependencies create undisclosed exceptions to their user-protection promises.
Sometimes you find something so disturbing during an audit, you've gotta check/recheck because you assume that *something* must be broken in the test. But I'm confident now. The new @DuckDuckGo browsers for iOS/Android don't block Microsoft data flows, for LinkedIn or Bing.🧵 http…
@thezedwards For non-search tracker blocking (eg in our browser), we block most third-party trackers. Unfortunately our Microsoft search syndication agreement prevents us from doing more to Microsoft-owned properties. However, we have been continually pushing and expect to be doi…
This is shocking. DuckDuckGo has a search deal with Microsoft which prevents them from blocking MS trackers. And they can't talk about it! This is why privacy products that are beholden to giant corporations can never deliver true privacy; the business model just doesn't work. ht…
You can capture data within the DuckDuckGo so-called private browser on a website like Facebook's https://workplace.com/ and you'll see that DDG does NOT stop data flows to Microsoft's Linkedin domains or their Bing advertising domains. iOS + Android proof: 👀🫥😮 💨🤡⛈️ ⚖️💸💸 💸 https…
This is... another good reason to avoid DuckDuckGo IMO. It shows that DuckDuckGo is willing to sell out your data for money from Microsoft and not tell anyone about it. If you're still using DDG, consider trying something else ASAP! https://twitter.com/...
🔥🎯⛈️ ⚖️ @ “...But why are we only hearing about this now? We've all seen the ads and billboards—privacy and transparency are the biggest features in DuckDuckGo's browser. Oh, but Microsoft gets an exception, and users aren't allowed to know about it?” https://www.reviewgeek.com/.…
I don't use @DuckDuckGo browser but use their search engine. It's to say until now. They'll lose me as a user even if they don't use MS trackers in the search engine. You can't go after others while hiding your own tracking practices. Pure hypocrisy. https://www.bleepingcomputer…
@BleepinComputer @LawrenceAbrams Because we're doing this above-and-beyond protection where we can, users are still getting significantly more privacy protection with DuckDuckGo than they would using Safari, Firefox and other browsers. Our goal has always been to provide the most…
I spoke too soon @DuckDuckGo updated the Android description this afternoon @ https://play.google.com/... iOS is still the old version @ https://apps.apple.com/... DDG will help you “Escape Website Tracking” + “automatically blocks most hidden third-party tracking...” Most ...🤪🤡 …
DuckDuckGo is contractually banned from blocking Microsoft advertising *Requests* on non-Microsoft-owned domains within the DuckDuckGo browser. DuckDuckGo signed a contract that only allowed them to block cookies. This existing in 2022 is so dangerous & irresponsible. 🥵⛈️⚖ ️ http…
I use DDG myself, appreciate anyone trying to build a viable alternative to Google search's monopoly, and understand that they need to bring in money somehow, but this sort of thing should be more prominently disclosed (and it's obvious why it's not!) https://twitter.com/...
I won't hold my breath that DuckDuckGo will update their own so-called private browser to actually stop data flows to their own ad tech partners, but this is one of those things that makes a privacy auditor ... annoyed? bitter? confrontational? Does Google / Apple care? </🧵> http…
Do you use @DuckDuckGo to avoid tracking? Think twice. This article “DuckDuckGo browser allows Microsoft trackers due to search agreement” https://www.bleepingcomputer.com/ ... is based on the tweet below from 2 days ago. #security #privacy https://twitter.com/...
This seems to be going on at least since Feb 4 2020. I typed “Microsoft and DuckDuckGo have partnered to provide a search solution that delivers relevant advertisements” site: https://duckduckgo.com/ " and searched for the last 22 years: (4/4) https://twitter.com/...
important thread about how DuckDuckGo, the highest profile “pro-privacy” search engine/Google alternative, pokes holes in its own privacy protections in order to let Microsoft conduct ad-based surveillance as part of a business relationship between the two companies https://twitt…
It seems @DuckDuckGo really sold out, here are their own words: https://help.duckduckgo.com/ ... “For ads from Microsoft, you also pass through Microsoft Advertising's platform.” Removed @duckduckgo from my #osint curriculum as a search engine that has no tracking. (3/3) https://…
@thezedwards When you load our search results, you are completely anonymous, including ads. For ads, we worked with Microsoft to make ad clicks protected. From our public ads page https://help.duckduckgo.com/ ..., “Microsoft Advertising does not associate your ad-click behavior w…
@thezedwards We've been working tirelessly behind the scenes to change these requirements, though our syndication agreement also has a confidentially provision that prevents disclosing details. Again, we expect to have an update soon that will include more third-party Microsoft p…