420 karma · joined April 26, 2017
We will also be sharing more details on the process on data collection in the blog posts scheduled in the next 3 days. Of course, you don't need to trust what we say, all the code used for collecting data is open-source for transparency and auditing: https://github.com/cliqz-oss/browser-core
Lastly, privacy policies are legally binding documents, and we take the law very seriously. We are located in Germany, where privacy laws are as tough as they get (e.g. GDPR was loosely just a re-wording of the existing data protection directive in Germany).
This is still beta, so please keep on using it and we'd love to hear more feedback [beta@cliqz.com].
Disclosure: I work at Cliqz.
I like DuckDuckGo. But unless they build their own search - I think the fundamental problem has not been tackled. There is no good, independent, private search alternative.
[Edit] I am not trying to single out DDG. There are a few replies that either demand for proof (rightfully) or suggest Bing is used only sometimes. I do not have conclusive proof, but have worked on search. Here's a couple of things for the curious:
1. Try to run this test: If you query "what is my ip" in duckduckgo (DDG), or any of the other ones I mentioned, you will notice in the description of one of the top results this IP: 207.46.13.147. It's a BingBot IP [0]. It's a good enough test to spot where results are coming from.
2. Open two browser windows side by side with DDG and Bing. Turn on results for the country you are in in DDG. Look attentively. Try image search.
It is clear that DDG does some re-ranking based on its own, but it's very often the same results.
Recommendation: https://github.com/cliqz-oss/adblocker Should be the fastest adblocker library (used by Ghostery, Cliqz and Brave)
EDIT: (Addendum) - The user would also have the right to ask the first party (airline) to "require" third parties it has shared personal data with, to delete them. Enforcing this however, will be hard.
What if one exclusively collects telemetry IDs (unique per application), with which usage stats are sent. To what extent is this personal data? On who does the burden of proof for 'being able to identify a natural person' fall?