🛡️ Privacy & Prompt Safety When Using Online AI Services
🔐 Key Rule
Prompts and responses are not stored permanently. Once the server responds, the data only exists on your device. However, even with trusted platforms, never include sensitive personal data like your full name, ID numbers, or location.
Want to stay private? Learn how to run models locally: /r/LocalLLaMA
⚠️ Server Logs and Prompt Leaks
Errors during AI inference can unintentionally leak prompts to temporary server logs. This was recently fixed, but such incidents reveal why you should treat all input as visible to the server.
Logs aren’t persistent or public, but for debugging purposes, admins may have to log input temporarily to stop abuse or crashes.
🧩 Using Third-Party AI Generators (e.g. Perchance)
- Generators can be coded to send your input elsewhere.
- Perchance allows viewing all code behind a generator for transparency.
- Public generators are harder to exploit without being noticed.
- Example: Custom CSP added to restrict external access
- Context: See Lemmy post
👾 Risks from Hacking & Popularity
Popular services are targets for hacking. If chat history is tied to user accounts (emails, phones), a breach can expose all that. Even well-intentioned developers can't prevent this 100%.
Perchance does not associate chat requests with user accounts – all AI plugin requests are anonymous.
🧠 User Ratings and Plugin Tracking
responseObj.submitUserRatinglets users rate AI responses.- Ratings may temporarily store responses to evaluate different model settings.
- Developers are encouraged to warn users not to rate prompts with private info.
- Future updates may enforce this with warning banners.
📊 Aggregate Statistics & Rate Limiting
- Aggregate stats (e.g. NSFW ratio) help developers detect bugs.
- Tracked by regex and algorithm, not by prompt text.
- IP request counts are tracked for rate limiting.
- Stats and IP counters are reset every 2 days. No prompt/IP association is stored.
💸 Ads, Privacy, and Sandboxing
Perchance shows ads to fund the expensive AI plugins. But unlike most ad-funded sites:
- Ads are sandboxed in separate
iframes. - They can't access prompt data or chats.
- Ad code only sees the URL – nothing more.
- Uses a reputable ad provider (same as Reuters & Aljazeera).
TL;DR:
- 🛑 Don't input personal or sensitive data into online AI prompts.
- 🧠 Run models locally with resources like /r/LocalLLaMA if privacy is essential.
- 💻 Always inspect or assume online generator code is unsafe by default.
- 🔐 Even the best system can get hacked — your best defense is not sharing personal info at all.
Comments
Post a Comment