Spread Privacy Sign Up Information

• Want to see what Twitter *thinks* they know about you? Stuart Langridge found this enlightening page listing your so-called interests. Although you can't stop the data collection completely, you can stop personalization based on it: Settings ? Content preferences [twitter.com]
• This quiz from the EFF gives you an idea of which US government agencies may have access to your photo for facial recognition purposes, without you ever having to opt in or give consent. [whohasyourface.org]
• Android user? Wirecutter has steps you can take to improve your privacy, including:
  • Enable two-factor authentication
  • Set a strong passcode
  • Consider a third-party messaging app
  [thewirecutter.com]
  (Side note: You can boost your privacy further with our app.)
• Using Zoom? There are new features in place to better protect your privacy & keep trolls out, e.g.:
  • Turn off chat autosave
  • Turn off attention tracking
  • Keep the meeting ID private
  [eff.org]
  We have suggestions for Zoom alternatives too.
• Sites like Quibi inadvertently leaked users' email addresses. ".entering your email address while signing up for a new service [.] can lead to companies like Google, Facebook & Twitter keeping tabs on your browsing and shopping habits too." - Zach Edwards [engadget.com]
• With kids online more, Leah Plunkett calls on companies to:
  1. Switch default settings to not collect or share info.
  2. Be more transparent about privacy practices.
  3. Be proactive about safeguarding children.
  We think these should apply to everyone, not just children. [cnn.com]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

You, or someone you know, has signed you up for the DuckDuckGo privacy newsletter. If at any point in time you wish to stop receiving these emails, you can opt-out using the link in the footer or unsubscribe here.

It may surprise you that ads can still follow you around in "Incognito" and other "private browsing" modes.

That''s because Incognito mode isn''t really private.

Incognito mode only deletes your local search and browsing history - just the content on your computer. Websites, search engines, internet service providers, and governments can still easily track you across the web.

That''s why it''s important to use privacy alternatives that don''t share your personal information, such as DuckDuckGo for search.

Using Incognito mode to keep you private online is kind of like using a bucket to put out a raging fire:

If you didn't know that private browsing isn't private, you're not alone! 67% of people who use private browsing over-estimate the protection that private browsing modes offer.

You can install the DuckDuckGo extension to help you remain private online, so you won''t become part of a scary statistic. Welcome to the Duck Side!

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

Computers, smartphones and internet-connected gadgets have made our lives easier to the point where we''d be stuck without them. The flip side is the more we rely on them, the more data passes through them and potentially out of our control. Sadly, these devices are often poorly privacy protected, for example a 2016 study of Android devices showed a shocking 34% of users don''t even have a passcode set!

But never fear - we''re here to help you avoid being a scary statistic. We''ve compiled step-by-step guides to protecting your privacy on these devices:

• iOS
• Android
• Mac
• Windows 10
• Windows 7
• Linux

We encourage you to go through the guides relevant for your devices for specific tips including screenshots, though regardless of device, here are some steps that everyone should take:

1. Set a password or passcode.
2. Encrypt your computer and phone.
3. Don''t use an admin account for daily use.
4. Remove unneeded apps and extensions.
5. Keep your devices up-to-date.
6. Review which apps can access your personal data.
7. Use a mobile app or browser extension that protects your privacy as you surf the web.

These steps are simple, quick, and yet go a long way to keeping your personal information safe and helping you sleep soundly at night.

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

In our last email, we showed how to delete your Google Search History.

This limits the information that Google has to sell to advertisers. But, they likely still have an advertising profile on you.

We''ve mentioned before that as an advertising company Google has trackers on more than 2.2 million websites and 1 million apps. They collect information about you as you surf across the net and use this to compile your "Ad Settings."

This is really just a way for them to sell your profile of interests to advertisers for top dollar.

1. Navigate to Google''s Ad Settings page.
2. Scroll down, and toggle "Ads Based on Your Interest" to off.
   
3. Then, scroll down more, and click the blue button to "opt-out of signed out ads." Turn off the toggles on that page too.
   

Tracking is creepy, but luckily, you''ve switched to the Duck Side, and so now your searches are completely anonymous. DuckDuckGo protects your search history from everyone - even us!

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

Over the past 100 days or so, we''ve been on a whirlwind tour of privacy together.

We''ve looked at industry practices, common misconceptions, and how to protect yourself online, so you''re now well equipped to improve privacy, not just for yourself, but your friends and family too!

Even though this is the last email for now, we don''t want our privacy journey together to be over. We''d love to hear suggestions for other topics, and based on your responses, we''ll produce more, similarly useful privacy content. If you'd like to help, please fill out the brief anonymous survey below:
www.surveymonkey.com/r/5RFHXRW

In the mean time, check out our blog for all the emails we''ve sent, plus other privacy-related content.

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

Follow us on Twitter

• "Google and Fitbit need the European Commission's approval before they can merge" so Privacy International has put forth this petition to demand the merger, which would give Google access to Fitbit user health data, is blocked. Sign here: [action.privacyinternational.org]
• Facebook allows users to opt-out of political ads, but "the absence of [real] transparency in the context of increasingly data-driven elections concerns users and democracy alike. [This solution] does nothing about the targeting itself," says Privacy International. [privacyinternational.org]
• From CCPA in the United States to New Zealand's recent amendments to its Privacy Act, governments are continuing to put regulations in place to ensure privacy as an fundamental right. [news.microsoft.com]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• A reminder to stay privacy-minded at protests. The digital footprint you create can be tracked with digital surveillance tools, leaving you and others vulnerable to identification, monitoring, and other unintended consequences. The Markup explains how to protect your data. [themarkup.org]
• If you haven''t decided to delete Facebook yet, take a step toward better protecting your privacy with the new 'Manage Activity' feature, which "allows users to [delete or archive] posts... and makes it easier for users to manage bulk posts at once." [mashable.com]
• Sadly, fraudsters have exploited COVID-19 for new scams, the latest of those centered around state contact-tracing initiatives. To protect yourself:
  • Don''t click links in suspicious texts.
  • Use two-factor authentication (2FA) where possible.
  • Keep your software & operating system up-to-date.
  [wired.com]
• Companies aren''t required to get permission for data collection/sharing, regularly opting users in by default. Privacy legislation, like Senator Sherrod Brown''s new proposal or our Do Not Track Act, would put power in users'' hands. [washingtonpost.com]
• Norway''s contact tracing app was suspended by the country''s data protection authority, with claims that it "poses a disproportionate threat to user privacy" by using real-time GPS location tracking & using user data for research purposes without consent. [techcrunch.com]
• Privacy is for everyone. It''s not about status, its about fundamental human rights. [elle.com]

And finally, we''re proud to help Apple identify trackers to block in upcoming iOS 14, giving hundreds of millions of people more simple privacy without any trade-offs. [twitter.com]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

Now that we''ve busted major privacy myths in our Privacy Mythbusting series, this email begins our third series, focusing on practical steps you can take to stay private online.

There are many times when you want to have a chat in private, such as when you have something confidential to say or you simply don''t want the world listening in. Hey, that''s what social media''s for!

Imagine you have a personal butler, eager to run errands on your behalf. You want to send a private message, so you put a hand-written note in an envelope and give it to your butler for delivery, hiding its contents from plain sight. There is a risk, however, that your butler could be bribed, threatened, or just plain nosy, deciding to read your message before delivering it, and perhaps sharing it with others. Not so private after all...

The way people have historically gotten around this problem is sealing the letter in wax, to discourage people from prying.

Today, online messaging is similar, with messaging apps serving as your butler. Instead of sealing an envelope, though, you can use "encryption" to ensure your message remains private. Encryption is simply a means of converting text into a jumble of letters and numbers that''s unreadable to anyone without the key to unlock it. If only you and the receiver have the key, then only the two of you can get access to your private message, and not the messaging service (butler) or anyone else. This is known as "end-to-end encryption." Great news: there''s software freely available that can do this for you automatically!

If you''d like an easy way to use secure, end-to-end encrypted messaging, we highly recommend Signal. It''s free, open source, and available from the iPhone and Android app stores. Not only that, it also allows you to make secure voice calls. Your butler would approve!

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

• Your Technology Is Tracking You. Take These Steps For Better Online Privacy [npr.org]
  "The more I understood how my info was being collected, shared and sold, the more I wanted to protect my privacy," says Laurel Wamsley. Her tips:
  • Practice good security hygiene
  • Use a private browser (like DuckDuckGo)
  • Use encrypted messaging apps (like Signal)
• Students Are Rebelling Against Eye-Tracking Exam Surveillance Tools [vice.com]
  "We must do better than subjecting our students to surveillance and violations of their privacy. better than allowing algorithmic policing through biometric surveillance as the new normal." Why students are rejecting surveillance tools.
• Locking Down Social Media [eff.org]
  This quick course from the EFF teaches you how to protect your privacy on social media. It covers:
  • Identifying what info to protect and changes to make to do so
  • The various ways commonly used social media platforms describe important privacy settings
• Augmented Reality Must Have Augmented Privacy [eff.org]
  "AR is location tracking on steroids." As augmented reality inches toward becoming an everyday reality, Katitza Rodr?guez and Kurt Opsahl urge that strong privacy regulations and privacy-by-design engineering practices are put in place.
• How do you talk online privacy with kids? [tampabay.com]
  In a study of elementary schoolchildren, 20% had given their phone number to strangers online! Pat Craven from the Center for Cyber Safety and Education has tips to help parents & educators instill good privacy habits including:
  • Discuss what personal info is
  • Show interest in tech & games

Our thoughts

A statement from Gabriel Weinberg, our CEO and founder, on the recently announced U.S. Department of Justice antitrust case against Google:

"The US Department of Justice is saying in no uncertain terms that Google used, and continues to use, anti-competitive tactics to maintain its search monopoly. While Google's anti-competitive practices hurt companies like us, the negative impact on society and democracy wrought by their surveillance business model is far worse. People should be able to opt out in one click.

Historians will hopefully look at this as the beginning of the end of the surveillance economy. But the only way that happens is through action that achieves meaningful results, and we are in support of such efforts by regulators across the globe."

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Kindle Collects a Surprisingly Large Amount of Data [nullsweep.com]
  DuckDuckGo''s Charlie Belmer found out that Amazon Kindles track essentially "every tap and interaction someone makes while reading." Opt out by going to Settings > Preferences > Privacy Settings on your Amazon devices and apps.
• Going To A Protest? Keep Your Smartphone From Being Used As A Tracking Device [forbes.com]
  "The simple act of bringing a smartphone to a protest introduces opportunities to be tracked," says Mike Fong. His tips to protect your privacy when attending a protest include:
  • Turn off location services
  • Turn off WiFi
  • Turn off Bluetooth
• Could dynamic pricing be influencing how much you pay for your plane ticket? [washingtonpost.com]
  "Airlines... started to set fares dynamically, showing different customers different fares based on what they know about them & on market demand."
  Side note: You can avoid data-collecting trackers with the DuckDuckGo app/extension.
• When Private Security Cameras Are Police Surveillance Tools [wired.com]
  "Civil rights activists warn that once installed, [private security] cameras often are used for other tasks, like monitoring protests, and can become a system of warrantless surveillance, particularly for communities of color," says Sidney Fussell.
• Proctoring Apps Subject Students to Unnecessary Surveillance [eff.org]
  To be surveilled continuously or to fail the class? That should never be the question.

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Amazon Sidewalk Is Coming - and Not Everyone Will Be Happy [slashgear.com]
  Amazon''s localized network, Sidewalk, will be turned on by default for Echo, Ring, and other Amazon device users. ".proximate Sidewalk devices can collaborate, even if they're not necessarily your own," warns Chris Davies. He also explains how to turn it off.
• The Smoking Gun in the Facebook Antitrust Case [wired.com]
  "Facebook's takeover of the social networking market has inflicted a very specific harm on consumers: It has forced them to accept ever worse privacy settings," says Dina Srinivasan. Gilad Edelman covers how privacy erosion on Facebook led to the U.S. antitrust case.
• Nintendo Switch Now Sends Data to Google (Unless You Turn It Off) [nintendoenthusiast.com]
  U.S. Nintendo Switch users: "Nintendo implemented Google Analytics on the eShop. [to opt-out] manually go into your account settings on Switch and turn off the ''Google Analytics Preferences'' option."
  And MakeUseOf has more Switch privacy tips.
• How Retailers Track Your Every Move in Exchange for Coupons and Convenience [vox.com]
  "Stores collect and use customer data that inform every stage of the shopping process - customers are more likely to buy more things and give stores even more data," says Sara Morrison.
  Side note: You can shop more privately with our mobile app and browser extension.
• Big Tech''s Latest Moves Raise Health Privacy Fears [ft.com]
  Companies are after your health data. Nick Couldry and Ulises Ali Mejias urge regulators to act: ".no data relating to an individual's health should be gathered, stored or processed without that person's explicit, continuing and effective consent."

And finally.

• Glossary of Privacy Terms [iapp.org]
  Privacy terminology is not always the most intuitive. Here''s a handy glossary from the International Association of Privacy Professionals (IAPP) to help you brush up on your knowledge.

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

Privacy Mythbusting #3: Anonymized data is safe, right? (Er, no.)

Companies often tell you that sharing your data is safe because they "anonymize" it by first removing or obfuscating your personal information. However, this depersonalization leads to only partial anonymity, as companies still usually store and share your data grouped together. This data group can be analyzed, and in many cases, then linked back to you, individually, based on its contents.

Deanonymizing data has been studied for a long time. In 1990, Carnegie Mellon University researcher Latanya Sweeny showed that with just a list of gender, date of birth, and five digit zip code, you can uniquely identify, thereby deanonymizing, 87% of Americans!

Data deanonymization of this nature has taken place time and time again when companies release so-called "anonymized data," even with really good intentions such as for research purposes. For example, even though every effort was taken to anonymize data, people were still deanonymized through Netflix recommendations and AOL search histories.

Now imagine what happens when companies don''t even make that effort when sharing your anonymized data. It''s like trying to win a game of hide-and-seek like this:

Fig 1: Hide and Seek Champions

The only truly anonymized data is no data, so when asked to check boxes to share data "anonymously" - don't. Oftentimes you can be re-identified. That''s why at DuckDuckGo we throw out your personal information every time you search, making sure we don''t store anything that could be tied together to identify you. We protect your search history from everyone - even us!

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

• TikTok Expands Parental Controls to Include Search, Commenting and Account Privacy [techcrunch.com]
  Have a teen on TikTok? While we''d advise deleting the app altogether, at the very least use Family Pairing, which allows parents to control teens'' privacy settings - like making their account private and controlling who can see/comment on their videos.
• To Track or Not to Track? Towards Privacy-Friendly and Sustainable Online Advertising [panoptykon.org]
  A report by the Panoptykon Foundation looks into privacy-friendly advertising, i.e. contextual rather than behavioral, and the findings are positive, matching our own experience: It *is* possible for sites to make money with ads while respecting users'' right to privacy.
• Streetlight Spy Cameras Have Led to a Massive Privacy Backlash in San Diego [vice.com]
  In response to police using San Diego''s "smart streetlights" as a crime-solving tool, "the San Diego city council unanimously passed two privacy ordinances aimed at providing transparency into the use of surveillance tech by police," Katy Stegall reports.
• IAPP Visions of Privacy [iapp.org]
  Congratulations to IAPP (International Association of Privacy Professionals), celebrating their 20th anniversary with a free-to-download publication of privacy thought-leaders looking back on the last 20 years of privacy, and what lies ahead.
• What''s in Store for Privacy in 2021 [darkreading.com]
  With 2021 just around the corner, the Dark Reading blog looks ahead to upcoming privacy-related issues, including:
  • Greater adoption of privacy regulations
  • Increased concern about the consequences of AI
  • Focus on the privacy of employees (in addition to consumers)

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Incognito mode isn''t private. It never was. [cnet.com]
• This guide from Vann Vicente helps put you in control of your LinkedIn privacy settings, including:
  • How others see your profile and network information
  • How others see your LinkedIn activity
  • How LinkedIn uses your data
  [howtogeek.com]
• "Police depts are using drones... if the practice becomes normalized, we could see police use drones that can identify civilians using facial recognition or that can access the data on your mobile while they're flying by," warns Thor Benson. [dailydot.com]
• Online shopper? Using these privacy best practices also helps protect you when making purchases online:
  • Visiting HTTPS versions of websites
  • Create strong, unique passwords
  [pcmag.com]
• The EFF profiles the privacy and other concerns with so-called "immunity passports" - digital proof of immunity to COVID-19 in order to access locations. [eff.org]

And finally, we''re fighting alongside everyone who believes privacy online should be simple and available to everyone. [wired.co.uk]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Covering your webcam can stop hackers from spying on you in one way, but our friends at Mozilla point out that this privacy tactic must be done in tandem with several others (e.g. setting strong passwords) to effectively protect yourself online. [mozilla.org]
• An audit of the social network shows that Facebook isn''t taking issues around hate speech, bias, polarization, and diversity seriously enough. [vox.com]
• A comprehensive account from Thorin Klosowski on how facial recognition works (plus its history and future), and steps to protect yourself from the invasive, largely unregulated tech on your devices (including home surveillance) and sites/apps you use. [nytimes.com]
• Can websites ditch creepy ads and still make money? Dutch broadcaster NPO saw their revenue increase after switching to contextual ads rather than ones that track users. A report by Brave shows this was more than a short-lived bump, even during a pandemic. [techcrunch.com]
• "Ring promises to offer a feeling of safety to its users. The definition of safety here is not unanimous though. There have been reports of racial profiling on the app, with the great majority of people being reported as ''Suspicious'' being people of color." [privacyinternational.org]
• California resident? CCPA became legally enforceable on July 1, giving you access to and the right to delete data collected by businesses online and the ability to opt-out of the sale of your personal info. Here''s how to exercise your rights. [sfchronicle.com]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

Privacy Mythbusting #2: My password keeps me safe. (Not necessarily!)

If you''ve ever used the same password on more than one website, then your accounts may be compromised due to data leaks. Once a hacker gets your login information from a single site, they can try it on other sites. Many hackers use automated tools to cycle through leaked password lists, trying them on many popular websites.

You may have heard of a few of the high profile data leaks in the past few years, such as:

• LinkedIn
• Adobe
• Dropbox
• Tumblr
• SnapChat
• Neopets
• Minecraft

Believe it or not, there have been over 200 major websites that have had their data leaked over the past few years, enabling your passwords to be used by hackers.

In 2013, Microsoft security research Troy Hunt built the site Have I Been Pwned? that allows you to check if your password has ever been leaked. (Fun fact: "Pwned," derived from owned, is video game slang for when someone is utterly defeated!)

How can you stay safe in a world of data leaks?

• Use a different password on each website.
• Use a password manager like LastPass that generates secure passwords and stores them for you safely.
• Use two-factor authentication (2FA) wherever possible. You can check if major sites have 2FA available at https://twofactorauth.org/

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

• The Cost of the "New Way to Message on Instagram" [eff.org]
  Instagram user? We advocate avoiding in general since they''re owned by Facebook, but nevertheless beware of notifications to "upgrade" to the new messenger: 1) It links Instagram to Facebook messenger and 2) doesn''t let you switch back.
• Police Will Pilot a Program to Live-Stream Amazon Ring Cameras [eff.org]
  "Now, our worst fears have been confirmed. Police in Jackson, Mississippi, have started a pilot program that would allow Ring owners to patch the camera streams from their front doors directly to a police Real Time Crime Center," says Matthew Guariglia.
• To Head Off Regulators, Google Makes Certain Words Taboo [themarkup.org]
  Google''s attempt to appear innocent in antitrust investigations? Just stop employees from sounding guilty. "Taboo words include ''market,'' ''barriers to entry,'' and ''network effects,'' which is when products become more valuable as more people use them."
• Portland, Maine Has Voted to Ban Facial Recognition [theverge.com]
  "Portland is just the latest city to swear off [facial recognition technology], following previous bans by Boston, San Francisco, and Portland, Oregon," says Russell Brandom. Let''s hope this moves to the federal level!
• All the Ways Slack Tracks You - and How to Stop It [wired.com]
  Using Slack at work? Matt Burgess breaks down how it tracks you & who can see your data/messages, advising "If you really need to send that bitchy message, it may be worth considering a different, encrypted platform. Or really, just not saying it at all."
• Is Your Favorite Podcast Tracking You? [themarkup.org]
  "At least for now, podcasting is still a fairly private activity, in that it doesn't produce much data on its own," says Adrianne Jeffries, but "companies are devising ways to provide advertisers with data that will persuade them to spend more."

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• What do Spotify, Venmo, Tinder, TikTok & DoorDash have in common? Their apps all crashed last week because they send data to Facebook, and Facebook had a bug! Since tracking code is in so many apps, we strongly recommend deleting apps you rarely use. [arstechnica.com]
• Phone-based scams are becoming increasingly sophisticated and hard for even experts to detect. If you get a call from a financial institution, the best defense is to hang up and call them back, using a number you look up yourself online. [krebsonsecurity.com]
• Public health apps, e.g. for coronavirus, can only work if people trust them, and that trust has to be built on well-thought-out safeguards. Now is "a crucial time to decide what standards to have in place on how our data is handled," reports Alfred Ng. [cnet.com]

Our thoughts

• Your online activity should not be under constant surveillance. We''re proud to sign this letter in support of protecting search and browsing history. [twitter.com]

And finally, Google''s search preference menu for Android in the EU is currently an auction with only four options. This creates false scarcity to boost its revenue and suppress competition, especially suppressing private search engines. That''s because private search engines will not be able to afford the bidding process long-term as they make less money per search relative to search engines that exploit personal information as their business model. A much better way to give consumers choice is to allow unlimited options, for free.

We''ve gathered new data showing that with unlimited options (available by scrolling) and better design (e.g. search engine descriptions shown by default), 24% of people select Google alternatives (the most frequent by far being a private search engine). This is 8x the current 3% combined mobile market share of these alternatives. [spreadprivacy.com]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Facebook testing implications of privacy invading tech by invading people's privacy [vice.com]
  Privacy washing, the attempt to invoke privacy to help a brand but not actually deliver it to consumers, is effectively what Facebook is doing with "Project Aria".
• How to guard your social feeds against election misinformation [vox.com]
  Want to stop misinformation in your social feed? Rebecca Heilweil says "social media companies don''t usually consider inaccurate info to be enough of a reason to remove a post." Follow her steps to take limiting your exposure into your own hands.
• Poll: majority of Americans concerned about Big Tech's economic, political power [politico.com]
  A recent US poll by Data for Progress found that:
  • 66% support a rule that search engines give consumers the best info over promoting their own products in results.
  • 60% favor a "choice screen" on smartphones, rather than having Google set as the default.
• 'Ripped the Band-Aid on some hard decisions': How The New York Times is reshaping its ad business for a cookie-less world [digiday.com]
  The New York Times discovered that respecting consumers'' right to privacy is not just the right thing to do, it''s good for business too.
• How to protect your family's privacy during remote learning [nytimes.com]
  Are your children remote learning? Be mindful of protecting their privacy. Parenting reporter Christina Caron''s tips include:
  • Talk to your children about what privacy means to them
  • Discuss when and how often to use a camera
  • Check out the tools they''ll be using

Our thoughts

Congress releases blockbuster tech antitrust report [theverge.com]
We're thrilled the US House antitrust subcommittee has joined governments around the world in recognizing that Google used, and continues to use, anti-competitive tactics to maintain their search monopoly. Now Congress must act. How? Let''s get rid of search defaults and allow people to pick their preferred search engine. This can reduce Google's market share by more than 20%. Consumers should have the power to easily choose a private search engine.

And finally.

DuckDuckGo Founding Member in Global Privacy Control (GPC) Standards Effort [spreadprivacy.com]
We''re proud to be a founding member of a new effort to create a simple browser-oriented setting to easily express your preference for privacy, called Global Privacy Control (GPC). With privacy regulations such as GDPR & CCPA, consumers have more rights to limit the sale and sharing of personal data, but people must invoke most online privacy rights manually, website by website. We believe GPC is a better way, making online privacy simple & accessible to everyone.

When set, Global Privacy Control sends a "do not sell or share" signal from your browser. It''s initially supported by early-adopting sites such as the New York Times, and is the result of work by multiple organizations to create what we hope will become a widely-adopted standard. You can use GPC now in the DuckDuckGo mobile app and desktop browser extension by going to Settings -> Global Privacy Control to enable.

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• U.S. court: Mass surveillance program exposed by Snowden was illegal [reuters.com]
  Finally! "The Ninth Circuit [US Court] said the warrantless telephone dragnet that secretly collected millions of Americans' telephone records violated the Foreign Intelligence Surveillance Act and may well have been unconstitutional."
• Creepy 'geofence' finds anyone who went near a crime scene [wired.com]
  Reported by Sidney Fussell: law enforcement increasingly uses "geofence" warrants on Google to get info on all devices near crimes, an invasion of privacy leading to false accusations. Two judges have now said one such request is unconstitutional in the US.
• PopID's face-based payments pose privacy and security risks [venturebeat.com]
  Beware PopID: the fast-growing face-based payment system "would do well to provide greater transparency regarding how it collects, stores, & processes facial data," says Kyle Wiggers. He outlines its risks, including bias, data ownership, & privacy.
• Apps for children must offer privacy by default [bbc.com]
  The UK gets a regulation, like COPPA in the US, to protect kids online: "a code of practice outlining how children''s data should be protected has come into force and firms have 12 months to comply with the new rules."
• How Netflix film The Social Dilemma probes the dark side of tech [ft.com]
  If Netflix''s "The Social Dilemma" opened your eyes to the Internet''s manipulation/targeting, you can download our free mobile app or browser extension to protect yourself online.

And finally, new in iOS 14, Apple now allows you to set certain browsers as the default browser (other than Safari), and DuckDuckGo Privacy Browser is now an approved default browser. Also new in iOS 14, our browser provides home screen search widgets that allow you to search privately right from your home screen. Read more on our blog. [spreadprivacy.com]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Another day, another reason to stop using Google. "The complaint. centers around the allegation of unlawful and intentional interception and collection of confidential data even when the user has followed Google recommendations to prevent this." [forbes.com]
• "Your phone''s the ideal tool for advertisers and data brokers - collecting your info and serving you ads based on it. This is usually done through software development kits (SDKs)." Sara Morrison on how this works & how to minimize SDK tracking. [vox.com]
• Contact tracing apps collect highly sensitive information about users that could not only be exposed to third parties, but are vulnerable to attacks from hackers. Tim Starks addresses why it is so critical to have strong privacy legislation around these apps. [politico.com]
• A great example of government intervention making a positive difference for privacy. [venturebeat.com]
• Listen to Gigi Sohn talk to Color of Change''s Brandi Collins about how civil rights protestors & communities of color are historically surveilled, how modern tech made spying ubiquitous, and how protestors can protect themselves. [podcasts.apple.com]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Six Reasons Why Google Maps Is the Creepiest App on Your Phone [vice.com]
  "Google Maps knows everything," says Sebastian Meineck. "Ask yourself how much personal data you're willing to sacrifice [for] convenience."
  Side note: At DuckDuckGo, we offer a private mapping alternative (for business lookup, route planning, etc.).
• Facebook''s Data-Tracking Tool "Centra" Might Collect More Information Than You Realize [distractify.com]
  Facebook tracks you - not just on its sites - across the *entire Internet.* Also: "[Facebook] Centra tracks different profiles that a user visits, their message recipients, their linked accounts, pages they visit around the web with Facebook buttons," says Senator Josh Hawley.
• U.S. Military Buys App Tracking Data From Private Services [axios.com]
  U.S. military (& very likely not just the U.S. military) is buying location data from companies. "Though legal, the purchase of these data tracking services raises serious civil liberties and privacy questions," says Zach Dorfman.
• How Private Is My Pay App? [themarkup.org]
  "Using a payment app of any kind always introduces a middleman: an agent that uses data to execute a demand," explains Sara Harrison, "not all apps treat that data the same way." If you use PayPal, Venmo, etc., here''s how to keep your info more private.
• AI''s First Amendment Theory Threatens Privacy - and Free Speech, Too [slate.com]
  Clearview AI claims using face data without permission is protected by the 1st Amendment, but Ramya Krishnan and Jameel Jaffer say "extraction of biometric data from photos scraped from the internet does not belong to any recognized mode of expression."
• Reclaim Your Face [reclaimyourface.eu]
  A coalition is asking EU citizens to petition for a ban on biometric mass surveillance, demanding:
  • Transparency into facial recognition
  • An end to discrimination and unfair treatment
  • End using the general public as mass surveillance test subjects
• How Do Biased Algorithms Damage Marginalized Communities? [npr.org]
  The coded gaze, Joy Buolamwini''s term for algorithmic bias, "can lead to exclusionary experiences and discriminatory practices" on a mass scale. Watch her TED talk to learn about the dangers of this unseen force.

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Attending a protest? Protect your data. [theverge.com]

  "Companies can even sell [demographic data from protesters'' cellphones] to the government, which can use it for law & immigration enforcement," and there is no federal regulation stopping them. [buzzfeednews.com]

• Contact tracing apps from Bahrain, Kuwait, and Norway "tracked users' locations in near real-time by frequently uploading GPS coordinates to a central govt server," Amnesty International found. [amnesty.org]

  MIT Technology Review is keeping track of more apps here: [flourish.studio]

• Oracle runs one of the biggest hidden tracking networks (led by their subsidiary BlueKai), and some of that data has been exposed online. [techcrunch.com]

  (Side note: You can block BlueKai (and other) tracking networks with our mobile app & browser extension.)

• Due to pressure from members of Congress and the public, Zoom will make end-to-end encryption available to ALL users, free and paid. [bloomberglaw.com]

  Look out for app updates and one-time opt-in details, coming soon. [zoom.us]

• "[COVID-19] testing raises novel privacy issues because of the scale of the data collection, the non-traditional methods and reasons for its collection, and the benefits and risks to sharing the data widely," says IAPP (International Association of Privacy Professionals). They highlight privacy questions we should be asking. [iapp.org]
• Are you fed up with companies selling your personal data for profit? Are you a resident of California? If you answered yes to these questions then this is a good week. From July 1, the CCPA (California Consumer Privacy Act) started being enforced. [bizjournals.com]
• This useful guide from the EFF was put together to help protect the digital privacy of black, trans, disabled, and other historically targeted communities in physical and digital spaces. [eff.org]
• In the US? Fight For The Future lets you easily send a message to your members of Congress to push them to support the legislation to stop facial recognition, a surveillance technology that "is unreliable, unjust, and a threat to basic rights & safety." [banfacialrecognition.com]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Why Using Google VPN Is a Terrible Idea [protonvpn.com]
  Give us a minute. just silent screaming over this oxymoron: Google VPN! ProtonVPN, a competitor, explain why using it is a terrible idea.
• You Should Avoid WhatsApp''s Disappearing Messages [androidauthority.com]
  WhatsApp''s Disappearing Messages only disappear after seven days and media will still be saved to your phone by default. "You're better off using Snapchat, Telegram, and Signal if you really want more peace of mind," says Hadlee Simons.
• DHS Authorities Are Buying Moment-By-Moment Geolocation Cellphone Data to Track People [buzzfeednews.com]
  A US Department of Homeland Security memo reveals Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP) are buying geolocation data to track people, report Hamed Aleaziz and Caroline Haskins. "This raises concerns about dragnet collection of Americans' highly private location info." says Nathan Freed Wessler, an attorney with the ACLU who specializes in privacy issues.
• Good Reports: Tech That Works Better for You [goodreports.com]
  ".Big Tech products continually show a shocking lack of respect for users, communities, even democratic society." Check out Mark Hurst''s Good Reports to "get off Big Tech products" and onto "genuinely good, helpful, non-toxic tools".
• Google Document Reveals Targeted Campaign Against EU Lawmakers, Report Says [cnbc.com]
  A report from the Financial Times reveals Google strategy aimed at weakening support for new EU rules curbing big tech's power. "Google is looking to ''increase pushback''," says Silvia Amaro. And here''s the FT report (paywall).
• Why Getting Paid for Your Data Is a Bad Deal [eff.org]
  "Data dividends run down the wrong path to exercising control, and would dig us deeper into a system that reduces our privacy to just another cost of doing business. Privacy should not be a luxury." - Hayley Tsukayama

And finally.

We''re hiring! Apply to join our fully remote, fast-growing team helping millions get the privacy they deserve online. View our open positions here.

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

Last email we discussed the ads that track you across the internet. But, did you know this tracking can actually cost you money?!

Retailers are increasingly charging "personalized" or "dynamic" prices based on your online footprint. They manipulate prices, trying to charge you the max they think you're willing to pay. You could be sitting right next to someone, looking at the same online product, and be charged more just because of a website you visited.

You''re probably familiar with how common this practice is in the airline industry. That''s all thanks to Google''s ITA QPX Software; which provides solutions to airlines to price "by market segment, point-of-sale, channel and even user."

That profit comes right out of your pocket because they decided you were willing to pay more for your flight based on tracking.

The worst part is, this sneaky pricing tactic has long been used in other industries. The Wall Street Journal ran a study on the matter as far back as 2012:

And the dynamic pricing trend only continues to grow more and more aggressive! If you haven't installed a browser add-on or use a mobile browser that blocks tracking, such as our extension and app, then now might be a good time.

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

• In addition to accusations of breaking children''s privacy laws that we shared a few weeks ago, TikTok has now been caught repeatedly copying the contents of your phone clipboard. Time to decide whether the privacy risks are worth it. Our opinion: no. [forbes.com]
• "Be honest-have you ever read a privacy disclosure? Even once?" asks Senator Sherrod Brown. "Privacy is a civil right. But corporations force you to sign it away every day." His U.S. bill proposes taking the burden away from consumers and moving it to companies. [wired.com]
• Before seeing a doctor in the pandemic, understand there are privacy concerns. "[Relaxed HIPPA regulations in the US] mean health care providers can experiment with telehealth, and business associates work more closely with health authorities, with much less risk." [themarkup.org]
• Registered voter in the UK? Open Rights Group can help determine what data political parties gather about your social status, family life, and religious and political views. "You have the legal right to see the personal data political parties hold on you." [openrightsgroup.org]
• As businesses shift online due to COVID-19, they face new privacy risks. Cillian Kieran provides simple steps to compliance:
  • Understand how vendors/partners use customer data
  • Have a clear privacy policy
  • Elect a Data Protection Officer (DPO)
  [hbr.org]
• Experts weigh in on how tech can be used for good: "Historically we have mastered technologies - so I am optimistic we can do this, too... innovation can make significant positive changes... Maybe DuckDuckGo and Firefox can show the way," says Adam Powell. [pewresearch.org]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

When data is encrypted, it turns into a seemingly random collection of characters, unless of course you have the decryption key! This is commonly used in messaging apps (read here for how), but it''s also easy to encrypt all the data on a device, thanks to this usually being built-in to its operating system. So now there''s no excuse not to protect your privacy in this manner!

Follow the steps below for encrypting the devices relevant for you. Once complete, you will only need to enter a password when turning on or waking up your device to automatically decrypt your data.

How to encrypt your Mac

1. Go to System Preferences > Security & Privacy > FileVault
2. Click "Turn On FileVault."
3. IMPORTANT: Make a note of the recovery key that is displayed and store it away from your Mac.
4. Wait for encryption to complete, but it's OK to continue using the computer.

See more tips to protect your privacy on Mac.

How to encrypt your Windows device

Note: BitLocker may not be available in all versions of Windows.

1. Go to Control Panel > BitLocker Drive Encryption.
2. Click "Turn on BitLocker" next to the drive you want to encrypt.
3. Enter a long and varied alphanumeric password or passphrase.
4. IMPORTANT: Make a backup of the recovery key using one of the displayed methods.
5. Choose whether to encrypt used disk space only (faster) and start the encryption process.

See more tips to protect your privacy on Windows 7 and Windows 10.

How to encrypt your iPhone

1. Go to Settings > Touch ID & Passcode.
2. Press "Turn Passcode On" if not enabled already.
3. Press "Passcode options" to choose a custom numeric or alphanumeric code (recommended).
4. Confirm your device is encrypted by scrolling to the bottom of the Settings > Touch ID & Passcode screen. You should see the "Data protection is enabled" message.

See more tips to protect your privacy on iPhone.

How to encrypt your Android device

1. Plug in the device to charge the battery (required).
2. Make sure a password or PIN is set in Security > Screen lock.
3. Go to Settings > Security.
4. Press the "Encrypt phone" option.
5. Read the notice and press "Encrypt phone" to start the encryption process.
6. Remember to keep the phone plugged in until complete.

See more tips to protect your privacy on Android.

And for further information, this guide to encryption is recommended.

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

• Your weather app is selling you out [gizmodo.com]
  "Weather apps deserve their own little corner in hell," Shoshana Wodinsky says of The Weather App''s latest data-mining tactic: using 3rd party data focused on user shopping habits. Search "weather" at DuckDuckGo to receive updates without tracking.
• How HTTPS works [howhttps.works]
  An animal-filled comic about how HTTPS works & why it''s essential to your privacy? Yes please!
  Side note: Our app/extension, with Smarter Encryption technology built in, enforces an encrypted HTTPS connection to websites when possible.
• DWF is no longer using Google Analytics [dazzlewhilefrazzled.com]
  This is the type of announcement we love to see. There are ethical alternatives (like Matomo Analytics) to Google Analytics. See also our list of privacy-friendly substitutes for living Google-free.
• YouTube unlawfully violates kids' privacy, new $3.2B lawsuit claims [arstechnica.com]
  "The real price of YouTube 'free' services is kids addicted, influenced, & exploited. It's already unlawful to data-mine children under 13. But Google won't clean up its act until forced by the courts," says Cori Crider. Kate Cox explains the UK lawsuit.
• Strava app shows your info to nearby users unless this setting is disabled [bleepingcomputer.com]
  Using Strava (the running app)? Its "Flyby" feature has default visibility set to "Everyone", revealing what you look like and where you run to others. To make it private, go to Settings -> Privacy Controls -> Flyby -> No One.
• Ireland's data watchdog slammed for letting adtech carry on 'biggest breach of all time' [techcrunch.com]
  "September 2020 marks two years since my formal complaint to the Irish Data Protection Commission about the 'Real-Time Bidding' data breach. This submission demonstrates the consequences of two years of failure to enforce," says Dr Johnny Ryan, senior fellow at the Irish Council for Civil Liberties (ICCL).

Our thoughts

• As Predicted, Google's Search Preference Menu Eliminates DuckDuckGo [spreadprivacy.com]
  The Q4 2020 results of Google's search preference menu auction in the EU have just been released and, as we predicted, DuckDuckGo has been eliminated in most countries. Alternative search engines that put people and their privacy ahead of profits have been boxed out by Google due to their auction model, which we believe is fundamentally flawed. It incentivizes search engines to be worse on privacy, to increase ads, and to not donate to good causes, because, if they do those things, then they could afford to bid higher. The end result is less competition in the search market, making it harder for consumers to get simple privacy protection.

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• "Now, more than ever, citizens must be able to hold those in power accountable and inspire others through the act of protest." If participating, please check out the EFF''s surveillance self-defense guide for attending a protest. [eff.org]
• The Chinese city of Hangzhou plans to turn it''s contact-tracing app into a permanent health tracker. This is a warning sign for nations using surveillance tech to combat COVID-19: "temporary" security measures can outlast the pandemic. [thenextweb.com]
• While posting pictures on a personal Facebook account might seem innocent, "it's still something that can have pretty far-reaching implications in the non-personal realm." This Netherlands ruling sets a necessary precedent for protecting minors online. [msn.com]
• "The next time you get a data breach notification, read between the lines. By knowing the common bull**** lines to avoid, you can understand the questions you need to ask." Check out Zack Whittaker''s guide to decoding a data breach notice here: [techcrunch.com]
• A report by the ACLU urges regulators to "skeptically scrutinize" the mass use of thermal screening devices for COVID-19 safety measures due to potential inaccuracies, a false sense of security, and privacy implications. [cbsnews.com]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Did you know Google Analytics is the biggest tracker on the web? Website owners: Knowing you''re sharing your users'' data with Google should be enough to stop using Google Analytics but just in case, Marko Saric has more reasons that go beyond privacy. [plausible.io]
• 52% of people surveyed by Pew Research Center decided NOT to use a product/service because of concerns about personal data collection. Yes, people do value their privacy & yes, companies are losing out if they don''t take measures to show respect for privacy. [pewresearch.org]
• "The federal government must provide leadership, coordination, and guidance to ensure that contact tracing efforts are effective and do not infringe upon individuals' civil liberties, including the right to privacy," said US Senator Edward Markey. [reuters.com]
• A recent survey shows consumer confusion around online data collection practices - only 24% thought companies sell their data to third parties & 44% didn''t know how to opt out. [niemanlab.org]
  (Side note: You can protect your personal info with our app and extension.)
• Setting a shining example to app developers, dating app Scruff turned down multiple offers to sell users'' location data, choosing instead to respect their privacy while still increasing revenue. [protocol.com]
• Apple and Google recently announced plans for a joint project to track the spread of the coronavirus. Russell Brandom delves into how it works and whether we can trust it. [theverge.com]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Clearview AI (yes, them again) are now pitching their facial recognition technology to track people with coronavirus. Having your identity linked with your location & health records, without oversight, is a huge risk that cannot easily be undone. [nbcnews.com]
• Before buying old phones, check whether they can be updated with the latest privacy & security enhancements. Support can be short-lived for Android in particular. Andrew Hoyle explains the risks and, if you can''t use a newer phone, how to protect yourself. [cnet.com]
• With more people working from home, more employers are invasively monitoring employees. It doesn''t have to be this way. Our organization (DuckDuckGo) has been 100% remote for a decade without any monitoring. It''s all about trust. [washingtonpost.com]
• "All the new coronavirus protocols that companies are considering for their workers and customers - from contact tracing and temperature-taking to heat mapping and ''immunity passports'' - have privacy and civil liberties implications." - Jennifer Kingson [axios.com]
• 66% of people surveyed said they "always or mostly use the same password or a variation" across different websites. [theregister.co.uk]
  Don''t make it easy for hackers. Use a password manager together with our password generator.
• Zoom''s growing popularity brought its privacy practices under scrutiny, revealing a larger issue: most software has not been made secure by default. "Zoom's case has made more obvious that security & privacy are not optional but what people truly need." [privacyinternational.org]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Google is giving data to police based on search keywords, court docs show [cnet.com]
  Whereas our privacy policy is simple: We don't track you. Ever.
• Free, Privacy-First Analytics for a Better Web [cloudflare.com]
  If your business "relies" on Google for Analytics, consider switching over to Cloudflare''s new privacy-first tool: No tracking individual users, no cookies, & no "fingerprinting" individuals via their IP address.
• Social Cooling - Big Data''s unintended side effect [socialcooling.com]
  "In our data-driven world, privacy is the right to be human (without the judgement and bias of algorithms)." Here''s how social cooling works and why it is important for us to all take action against it now.
• Land of The Free... Information [marieclaire.com]
  "I'm inspired by this quote from Gabriel Weinberg," says Mary Stone Ross: "''Everyone knows what you do in the bathroom, but you still close the door.'' In other words, your info may not be a secret, but it should remain private." Here she makes the case for US privacy legislation.
• Online learning''s toll on kids'' privacy [axios.com]
  As schooling moves online, new inequalities are being created in kids'' data privacy protections, says Ashley Gold: "For under-resourced school districts, it''s unlikely someone will have the time and expertise to make evaluations."

Our thoughts

• Dear Google: We Agree Search Competition Should Be "Only 1 Click Away" - So Why Is It 15+ on Android? [spreadprivacy.com]
  To fend off antitrust complaints, Google has claimed search competition is "only 1 click away." As if! In reality, it takes 15+ clicks to make DuckDuckGo Search (or any other alternative) the default on Android devices.

And finally.

• Plan Your Route Privately: DuckDuckGo Now Has Driving & Walking Directions [spreadprivacy.com]
  And finally, we''re excited to announce that DuckDuckGo Search now includes route planning for location-related searches. The perfect tool for people who want interactive maps with privacy protection at the same time.

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Google''s own engineers said the company ''confuses users'' on privacy settings, now the subject of a lawsuit [businessinsider.com]
  A Google engineer on Google''s location tracking settings: "Speaking as a user, WTF? More specifically I thought I had location tracking turned off on my phone."
• iOS 14: This Hidden New Feature Is A Momentous Leap For iPhone Privacy [forbes.com]
  iOS 14 will give users the ability to give apps their approximate location, without revealing where they are, reports Kate O''Flaherty.
  Not an iPhone user? The New York Times'' Jennifer Valentino-DeVries shares how to opt out of location tracking.
• Fearing coronavirus, a Michigan college is tracking its students with a flawed app [techcrunch.com]
  Albion College is requiring students to download and install contact tracing app Aura, and we''re happy to hear parents are protesting. "The app is designed to track students' real-time locations around the clock, and there is no way to opt out."
• Privacy considerations to keep in mind with Amazon''s Halo [cnbc.com]
  "[Amazon] changed expectations around convenience and personalized recommendations and is now selling a device and membership to collect some of the most intimate health details of a person's life."
• I Just Got a COVID-19 Test. Who Now Knows I Got It? [themarkup.org]
  Companies like Quest Diagnostics and LabCorp profit off your medical data. and they''re major providers of private COVID-19 tests. "Health info is supposed to be impossible to trace back to patients; it doesn''t always work out that way," says Colin Lecher.
• What If Technology Belonged to the People? [vice.com]
  "Networked platforms [treat individuals as] consumers in a market bidding for commodities like housing and healthcare, not citizens with certain rights and privileges. [They]. have no motive other than scale and market dominance," says Edward Ongweso Jr.
• Remote Learning During Pandemic Brings Privacy Risks [wsj.com]
  When it comes to apps and digital tools for kids'' remote learning "there's just a need for more plain language, guidance, training and resources to better make sure that student privacy is protected." David Uberti urges regulators to do their part.

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

We hope you enjoyed our first series of privacy tips to help reduce your online footprint. This email begins our second series about busting privacy myths.

Privacy Mythbusting #1: Nobody else cares about privacy! (Umm, yes they do.)

When was the last time you spoke with your friends or family about internet privacy? Sadly, for most people, the answer is never. In general, people believe that only a small percentage of people care about privacy, and while we know that isn''t true, it is something that keeps most people from talking about privacy.

In Jan 2017, the IDC found that 84% of consumers expressed concern for their personal information, and 70% reported greater concern than just a few years ago.

And it's not all talk. Over 20% of people are using tracker blocking software, and many are taking other measures as well such as using DuckDuckGo. People are taking action.

So maybe you didn''t share DuckDuckGo because you thought no one would care? But, now that you know most people do, it is time to stand up and spread the word.

Challenge: Share DuckDuckGo with 3 friends or family members who you think deserve to be more private online. And no, your cat, "Whiskers J. Snuggleworths the 3rd" doesn''t count!

Fig 1: Whiskers J. Snuggleworths III.

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

Privacy Mythbusting #4: I can''t be identified just by browsing a website. (If only!)

When we first released our study on private browsing modes, a lot of people were shocked to see that websites could still track them even when they blocked cookies and used private browsing (aka "incognito mode").

To see for yourself, check out Nothing Private, an example site that showcases private browsing tracking in the real world.

The main method used to uniquely identify and track people while using private browsing is called "browser fingerprinting." Just as each person has a unique fingerprint, so does every browser. Websites can look at version numbers of your browser, the plugins it uses, and dozens of other points of browser information to create a unique ID, a browser fingerprint, that can then be used to track you.

Want to see some of the more interesting things that can be used in browser fingerprinting? Check out the interactive site ClickClickClick that shows you this information as you interact with it in real time. It''s spooky!

Fig 1: Spookers - The Spooky Internet Tracking Dog

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

• How to blur your house on Google Street View (and why you should) [mashable.com]
  "Whatever the reason, it''s relatively easy to request Google blur out the image of your home or apartment on Google Street View." Jack Morse shares the steps to take.
• How to boost WhatsApp's privacy and better protect your data [wired.co.uk]
  If you must use WhatsApp (as opposed to a secure alternative like Signal) follow these tips from Matt Burgess to boost your privacy, including:
  • Turn off cloud backups
  • Turn on Two-Factor Authentication
  • Limit what others see about you in Privacy Settings
• Target.com changes prices based on your local market [reddit.com]
  Your location data can be a threat to your privacy AND your wallet. Price changes based on profile data is a real thing.
• Meet the Star Witness: Your Smart Speaker [wired.com]
  Police have learned to amend warrants to gain access to data from personal devices, including smart speakers. Sidney Fussell reports this practice is growing, and can include information like Internet queries, food orders, and overheard conversations.
• Your digital privacy is under attack. Can anything be done to protect it? [zdnet.com]
  "Intelligence services [globally] should be kept in check by an international body with the power to make sure governments don''t misuse personal data for surveillance purposes, said the Council of Europe''s data protection committee chairs."
• Why Facebook's opt-out of political ads is a short-sighted solution [privacyinternational.org]
  #StopHateForProfit demands Facebook stop the spread of hate and electoral misinformation on its platform before the US presidential election. Letting users opt-out of political ads "lacks meaningful and equal transparency" says Privacy International.

And finally, this year, through our annual donations program, we''re proud to donate $750,000 to diverse organizations working for better privacy, digital rights, greater competition in online markets, and access to information free from algorithmic bias. Read more on our blog. [spreadprivacy.com]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

It''s easy to underestimate how awesome encrypted internet connections are. Sure, they may not sound exciting, but without them, things like our financial details, medical histories, and relationship problems would all be visible to internet providers, or even people on the same network as you. Without secure connections, when you''re checking your bank statement in a coffee shop, Secretive Sam in the corner could be checking your bank statement too!

Such eavesdropping is prevented by visiting a website over a secure connection. When you do so, only the website''s domain name is visible to others (e.g. the "duckduckgo.com" part), and not the page content itself, or any other data such as search terms you might send with it or type into the page after it loads. As long as your connection is encrypted, everything after the domain name cannot be seen by any servers in between you and the website.

An apt metaphor is checking your locked luggage at an airport. Anyone can read the tag on your suitcase to see where it''s heading, but the contents are locked away and can''t be seen by other travelers or airport staff. On the other hand, data sent over an unsecure connection would be like a transparent suitcase with everything on show - even those embarrassing but oh-so-comfy pyjamas!

So, how can you make sure you''re using a secure connection? Unfortunately this relies on websites supporting the ability to do so, though fortunately it''s easy to check! In your web browser (the software you use to see websites), just look for a padlock or the text "https" (and not just "http") in the address bar at the top of the browser.

The good news is that now more than 60% of web traffic is securable. In other words, most web browsing can be done over an encrypted connection. However, not all websites send you to their secure version by default, so we recommend using our mobile app and browser extension which, along with other privacy features, automatically forces a secure connection when there''s one available.

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

• Facebook inadvertently brings humor to 2020 with the news they''re going to sue the EU for. wait for it. invasion of privacy! [bbc.com]
• Google continues to abuse its market power, says Adrianne Jeffries and Leon Yin. "If Google can train you, don't go to Genius, don't go to TripAdvisor, don't go to the restaurant's website, just come to Google-always come to Google-then they win." [themarkup.org]
• If you use voice apps with Google Assistant and Amazon Alexa, privacy risks increase. "In their survey of voice app privacy policy content, researchers found the bulk didn't clearly define what data collection the apps were capable of," says Kyle Wiggers. [venturebeat.com]
• Good news for US and EU citizens as Privacy Shield, which allowed transfer of personal data between those regions, is scrapped. The US government needs to pass "meaningful, strong, and comprehensive privacy legislation" and curtail its surveillance, says Access Now. [accessnow.org]
• Now it''s Australia''s turn to take Google to court for privacy violations. "The ACCC considers that consumers effectively pay for Google's services with their data, so [.] Google increased the 'price' of Google's services, without consumers' knowledge." [abcnews.go.com]
• If your site is used by children in the US, you need to comply with the Children's Online Privacy Protection Act (COPPA). The National Law Review has a rundown. [natlawreview.com]

And finally, a study by KPMG found that almost 9 out of 10 Americans agree that privacy is a human right - that''s promising news! [techrepublic.com]

If you''re concerned about your privacy online, but don''t know how to take control, here are our 5 simple tips. [spreadprivacy.com]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

Recently, we explained how to choose a good VPN (Virtual Private Network), noting that a VPN''s privacy policy should be a major factor in your choice. That''s because a VPN is run by a single organization that could potentially monitor or log your traffic. If you want to try to protect your internet activity from everyone, you need to send your traffic through layers of different entities, so no one can track what you''re doing, not even a VPN provider. Thankfully there''s technology that does just that, and it''s called Tor, formerly The Onion Router. Layers. Onion. Get it?

Here''s how it works differently than a VPN. Imagine you want to send a letter anonymously. You could use a trusted courier to deliver it directly without others knowing or revealing your identity. That''s roughly how a VPN works. Alternatively, you could use the regular postal service, dropping the letter in a mailbox from which it gets routed through various post offices until it reaches its destination. That''s roughly how Tor works.

So what''s the catch? Why isn''t everyone using Tor? Well, like the letter analogy above, your data is taking the scenic route to get to its destination, not the fast, direct route. This longer route makes surfing the internet slower. You also need to connect to the Tor network before you start browsing, similar to connecting to a VPN, although Tor software makes this easy with options for desktop and mobile:

• Tor Browser: A complete anonymizing browser for Windows, Mac and Linux.
• Orbot: Tor connection for Android, to use with your existing browser.
• Onion Browser: A Tor browser for iOS.

While Tor can''t guarantee anonymity, it''s the best choice for protecting your identity online.

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

Remove Google from your life? Yes, it can be done!

Google trackers have been found on 75% of the top million websites. This means they are not only tracking what you search for, they''re also tracking which websites you visit, and using all your data for ads that follow you around the internet. Your personal data can also be subpoenaed by lawyers, including for civil cases like divorce. Google answered over 150,000 such data requests in 2019 alone!

More and more people are also realizing the risk of relying on one company for so many personal services. If you''re joining the ranks of people who''ve decided Google''s data collection has become too invasive, here are some suggestions for replacements with minimal switching cost. Most are free, though even those that are paid are worth it - the cost of not switching is a cost to your personal privacy, and the good news is we have a choice!

Google Search -> DuckDuckGo (free)
Let''s start off with the easiest one! Switching to DuckDuckGo not only keeps your searches private but also gives you extra advantages such as our bang shortcuts, handy Instant Answers, and knowing you''re not trapped in a filter bubble.

Gmail, Calendar & Contacts -> FastMail (paid), ProtonMail (free with paid options), Tutanota (free with paid options)
We host @duckduckgo.com addresses on FastMail, an independent, paid service that also includes calendar and contacts support across all devices. There are also several ways to get encrypted email between trusted parties by integrating PGP encryption tools. Even more private email alternatives are ProtonMail and Tutanota, both of which offer end-to-end encryption by default.

YouTube -> Vimeo (free with paid options)
For videos that are only on YouTube (unfortunately, a lot), you can search for and watch them on DuckDuckGo for better privacy protection via YouTube''s "youtube-nocookie" domain. If you''re creating and hosting video yourself, however, Vimeo is the best-known alternative which focuses on creators.

Google Maps -> Apple Maps (free), OpenStreetMap (free)
For iOS users, Apple gives you an alternative built in via Apple Maps, so no installation is necessary. For wider device support, check out OpenStreetMap (OSM) which is more open, though may not have the same ease-of-use or coverage quality as Apple Maps.

Google Drive -> Resilio Sync (free with paid options), Tresorit (paid)
Resilio Sync provides peer-to-peer file synchronization which can be used for private file storage, backup, and file sharing. This also means your files are never stored on a single server in the cloud! The software is available for a wide variety of platforms and devices, including servers. An alternative cloud storage and backup service with end-to-end encryption is Tresorit.

Android -> iOS (paid)
The most popular alternative to Android is of course iOS, which offers easy device encryption and encrypted messaging via iMessage by default. We also have tips to increase privacy protection on your iPhone or iPad.

Google Chrome -> Safari (free), Firefox (free), Brave (free)
Safari was the first major browser to include DuckDuckGo as a built-in private search option. A more cross-device compatible browser is Mozilla''s Firefox, an open source browser with a built-in tracker blocker in private mode. Brave goes one step further with tracker blocking switched on by default. There are also many more browsers that come with DuckDuckGo as a built-in option.

Blogger -> Ghost (paid), WordPress (free with paid options)
Ghost is both a hosted (paid) and self-installable blogging platform, tracker-free by default and run by a non-profit foundation. We like it so much we use it for our own blog! A free alternative is WordPress, powering an estimated 33% of the world''s websites. It''s also available both for self-installation and as a hosted service with no third-party trackers by default. The community is huge with extensive multilingual documentation and many themes to choose from.

Google Hangouts/Meet -> Jami (free), Apple FaceTime (free), Microsoft Teams (free with paid option)
Jami is a cross-platform service that offers end-to-end encryption, and its privacy policy states that the only data it collects is "anonymous and aggregated data for the analysis of Jami website visits statistics." If everyone involved has access to an Apple device, FaceTime is another alternative that is easy-to-use and supports end-to-end encryption. For enterprise-level support, Microsoft Teams is widely used and they state that they do not use your Teams data to serve ads, or to track participant attention.

Google Duo and Android Messages -> Signal (free)
There are several services offering private messaging but, as we''ve mentioned before, Signal gets our recommendation. It offers free, end-to-end encryption for both messages and private calls. It''s also recommended by Edward Snowden and renowned security expert Bruce Schneier, among others.

Google Groups -> MeWe (free with a paid version), Discourse (paid, or free if self-installed)
MeWe is a social network based around groups that can be made private or public. Their privacy policy makes clear that they don''t collect or share personal data. Alternatively there''s Discourse, which is an open source discussion platform, offering public and private conversations with a trust system and spam protection. Paid hosting is offered but the software is also freely available for administrators to host on their own servers.

Google Analytics -> Fathom (paid), Simple Analytics (paid)
If you run a website that uses Google Analytics, you''re letting Google collect data on every visitor, which they can then tie to data collected from millions of other websites. Switching to Fathom or Simple Analytics will still give you visibility into how visitors are using your website, but you''ll also be respecting their right to privacy. Both of these services are GDPR-compliant by default, do not use cookies and therefore don''t require those annoying cookie agreement popups.

Google Ads & AdSense -> CodeFund
CodeFund is currently limited to developers and designers, but if that''s your audience this is a platform for both advertising and hosting ads with a focus on ethics, using contextual advertising (i.e. based on the content of websites) rather than behavioral. They take steps to avoid tracking users, such as by not saving IP addresses, and the platform code is open source for anyone to verify.

As you can see, moving away from Google needn''t be hard. In fact, you might find you prefer the alternatives while also getting better privacy!

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

You already know that using DuckDuckGo keeps your searches private, though what about when you click on a search result?

Websites you visit, Internet Service Providers (ISPs), or anyone connected to your network, can see your browsing activity through your computer''s virtual ID (IP address). So-called "incognito mode" doesn''t protect you from this snooping - that mode actually doesn''t keep anything private outside of your physical computer!

A Virtual Private Network (VPN) can offer you a degree of anonymity, by masking your computer''s IP address from everyone but the VPN provider. It effectively provides a secret tunnel from your phone or computer to the internet through the VPN, blocking others from peeping in. Everyone then just sees the VPN browsing these sites, and not you personally.

After signing up for a VPN service and enabling it on your devices, your traffic is protected. Note, however, that it''s technically possible for your VPN provider to still spy and record all your internet activity. For this reason, you should fully trust the VPN provider you use.

How to choose from the many VPN providers out there? Here are some important factors to think about:

• Privacy. The first thing to check is what happens to your personal information. We recommend looking for providers that don''t collect or share your personal information at all, so take time to check their privacy policy.
• Cost. There are some free services, but you''re likely to end up paying with personal data, so we recommend looking for a paid service that suits your budget.
• Speed. VPN providers sometimes publish their connection speeds, but the best way to avoid a slow service is to sign up for a trial and run a connection speed test before and after enabling.
• Location. You may prefer VPNs hosted in certain countries for accessing location-specific content, so check their website to see where their servers are. In many cases you''ll be able to choose which country server to connect to.

There are 100s of VPN providers to choose from, so check your favorite review sites for further guidance, such as this VPN comparison chart from PCMag. If you''d prefer an easy choice, TorGuard is what we use internally at DuckDuckGo.

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

Privacy Mythbusting #6: Security equals privacy. (Nope!)

When we talk about online privacy, we often hear responses like: "I''m protected by my antivirus software, spam filter, etc." While security software is important in staying safe online, it is a common misconception that security = privacy. It does not.

A great example is Google''s ad network. While connections to it are securely encrypted, Google''s trackers still appear on 75% of the top million websites, tracking you across the web, inundating you with highly targeted ads that follow you everywhere. There is security, but no privacy.

Another example is the antivirus company AVG (owned by Avast). In 2015, they updated their privacy policy to be more "transparent." Wired magazine rightfully noted something alarming in their new privacy policy:

Security without privacy is like having a house made of bullet-proof glass. Sure, no one is getting inside, but your personal life is still on display.

Fig 1: Stalker-friendly House of Glass

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

• If you run a website that uses reCAPTCHA to distinguish between humans and robots, you''re sending your users'' data to Google. Respect their privacy and look for an alternative. [bleepingcomputer.com]
• ''Incognito mode'' & ad blockers do not protect you from data collection methods (like digital fingerprinting). but you can take back your privacy! [thenextweb.com]
  (Side note: Our app & extension have built-in tracker blocking to truly protect you online.)
• Targeted ads that follow you around based on your web searches are not just annoying, they prey on the vulnerable and can be reminders of trauma in times of suffering. Use a private search engine to avoid these harms. [vox.com]
• COVID-19 social isolation brings a huge demand for online tools, but that''s no excuse for users'' privacy rights to be overlooked. ".[we] need the option to delete user profiles after the crisis has abated, [.] and easy access to what''s been collected." [nytimes.com]
• In the US? Beware of stimulus check scams: "If you receive a text, email or phone call from someone claiming to be from the government with a check for you - do not fall for it. Don''t, under any circumstance, give away your personal info via text, email or phone." [nbcnews.com]

And finally, Vivaldi has released a new version of their browser which incorporates DuckDuckGo Tracker Radar, so more people can enjoy best-in-class tracker protection as they browse the web. [spreadprivacy.com]

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

Privacy Mythbusting #5: I own my personal information. (Not as much as you think.)

When you sign up for a website, you''re often presented with a "Terms of Service" that outlines how your data is collected and used. But, did you know that all that information about you, that you work so hard to protect, is rarely ever your exclusive legal property?

Most websites demand a perpetual license to your information, with rights to use it as they see fit. Some websites even grant themselves the right to sell your data individually, or even use your personal photos in advertisements for their service, all without your permission!

The site "Terms of Service; Didn''t Read" (ToS;DR) helps to summarize and rate terms of services for popular sites. We use their ratings as part of the Privacy Grade we show for websites in our app and browser extension. As an example of the ToS;DR ratings, look at DuckDuckGo compared to Google.

Proudly Private,



Dax the Duck,
Mascot - DuckDuckGo

View this on our blog | Follow us on Twitter

• Facebook ''Secretly'' Tracks Your iPhone Location - This Is How to Stop It [forbes.com]
  "If you tell Facebook not to collect location information from your iPhone, then it doesn't, right? Wrong." Facebook harvests, collects, and stores location metadata from your iPhone photos. Zak Doffman shares some steps you can take to stop them.
• France Fines Google $120M and Amazon $42M for Dropping Tracking Cookies Without Consent [techcrunch.com]
  Yet again (we''ve lost count at this point), Google was caught tracking people without their consent. This time by France and fined ?100 million ($120 million).
• How to Manage Your Privacy Settings for Social Media [hacked.com]
  Social media user? Follow William Worrall''s guide to managing your privacy across Facebook, Twitter, Instagram, Snapchat, and Tik Tok.
  Side note: For a much more private experience, ditch social apps altogether and use their websites within our privacy browser.
• Brittany Kaiser Reveals the Tools She Uses to Protect Her Data Privacy [siliconrepublic.com]
  You don''t have to be a tech whiz to protect your data online - you just have to use the right tools.
• Privacy Group Asks for Investigation Into Software That Spies on Students [vice.com]
  Exam proctoring companies that surveil students are under investigation for deceptive practices. Action could mean "legal accountability for black-box algorithms. in areas like criminal justice, housing, and health care," says John Davisson.

And finally.

• Working from Home? Consider These Privacy-Focused Tools [spreadprivacy.com]
  Did you know DuckDuckGo''s team is fully remote across 17 countries? Here''s our list of work-from-home privacy-focused tools, including:
  • Email ? Fastmail; ProtonMail; Tutanota
  • Chat ? Mattermost; Signal
  • File storage/backup ? Resilio Sync; Tresorit

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog

• Giving Facebook Less Data Is a Good Idea. Even Better: Just Use It Less [fastcompany.com]
  "You should take steps to limit Facebook's data collection. While you can shave the money Facebook makes selling ads targeted to your interests, this tactic isn't as effective as spending less time-or no time at all-on the service." We''re team #DeleteFacebook.
• Hey Alexa, Who Am I Messaging? [threatpost.com]
  Previously, we shared an article about how smart speakers collect voice data, but... "researchers have discovered that devices also may be able to ''hear'' and record what people are typing on nearby smartphones, even amid background noise." Users beware.
• The Real Cost of Smart Speakers [vox.com]
  Voice-activated headphones, rings, eyeglasses and doorbells are very popular, but smart speakers "are so cheap because the real cost is our data." Sam Ellis investigates how much of your voice data is collected and what companies do with it (hint: ad targeting).
• Privacy Matters [privacyinternational.org]
  Let''s all resolve to take care of our privacy in 2021. Privacy International shares why privacy matters, including protecting our development, ensuring our rights are respected, maintaining our standard of living, and so much more.
• 2,000 Parents Demand Major Academic Publisher Drop Proctorio Surveillance Tech [vice.com]
  An open letter from Fight for the Future, signed by 2,000 parents, demands McGraw Hill Publishing end its relationship with Proctorio, test proctoring software under fire for invasive surveillance.
• COVID-19 and Surveillance Tech: Year in Review 2020 [eff.org]
  Looking back at 2020, the Electronic Frontier Foundation (EFF) urges, "we need COVID-specific data privacy legislation" to protect our privacy from misuse of automatic contact tracing apps, surveillance, and immunity passports. "Looking to 2021, we must remain vigilant."

And finally.

It''s easier than you may think to set your devices up for privacy. Follow our handy guides to start off the New Year protected.

Wishing you a happy and safe 2021.

Proudly Private,



Dax the Duck
Mascot - DuckDuckGo

Follow us on Twitter
Learn about privacy on our blog