DuckDuckGo Help Pages

How does Duck.ai protect my privacy?

Duck.ai does not record or store any of your chats, and your conversations are not used to train chat models by DuckDuckGo or the underlying model providers (for example, Open AI and Anthropic).

All chats are anonymized by DuckDuckGo. Metadata that contains personal information (for example, your IP address) is completely removed before prompting the model provider. This means requests to Anthropic, OpenAI, and together.ai (which hosts Meta Llama and Mistral on their servers) appear as though they are coming from DuckDuckGo rather than individual users.

In addition, we have agreements in place with all model providers that further limit how they can use data from these anonymous chats, including the requirement that they delete all information received once it is no longer necessary to provide responses (at most within 30 days with limited exceptions for safety and legal compliance).

Zero provider visibility chat models

Requests to Tinfoil (which hosts gpt-oss-120b on their servers) are also anonymized and, additionally, are processed in a Trusted Execution Environment such that Tinfoil cannot see your prompts or the model’s response. Chat models that support this (currently, gpt-oss-120b) are labeled "zero provider visibility" in Duck.ai.

You can read the Duck.ai Privacy Policy and Terms of Use here.