Security

Did Gemini Know What's in My Private Google Doc? An Unreleased Character Name Surfaced.

An indie developer claims Gemini surfaced an unreleased character name that existed only in a private Google Doc. Google denies it, and the explanation remains unresolved.

· Huuush

Did Gemini Know What's in My Private Google Doc? An Unreleased Character Name Surfaced

Key takeaways

  1. 1An indie developer claims Gemini-based AI search answered with "Vantage Tripod," an unreleased game character name that existed only in a private Google Doc.
  2. 2Google rebutted that it does not use private Docs or Drive to train its foundation models, but the original response could not be reproduced, so the exact path has not been confirmed.
  3. 3Explanations raised include a mix of fan sketches and Discord speculation, hallucination, third-party extensions, and marketing, and the controversy remains unresolved.

A claim from an indie developer has spread: Gemini named a game character that existed only in a private Google Doc. The controversy, which passed 870,000 views, has revived the question "how much of my data can AI see?"

Claim that Gemini knew an unreleased character name from a private Google Doc
The unreleased character name "Vantage Tripod" from a private Google Doc, and the claim that Gemini answered with it (source: X post)

Gemini Said the Name From a Private Document: Where the Leak Suspicion Began

The solo developer of the underwater tower defense game Operation Octo claimed that a player on Discord asked Gemini-based AI search about the game's "future content," and the AI answered with the unreleased character name "Vantage Tripod".

According to the developer, the name was not in the game files, on Steam, in serialized data, or on Discord, and had never been typed into Gemini. The only digital copy was reportedly in the unreleased character list in a private Google Doc. The player is said to have used private browsing.

The game Operation Octo: summary of the developer's claim
The game developer's claim: the character name existed only in a private doc (source: X post)

Google Denied It, but Where Did the Name Come From?

Google rebutted that "private Docs and Drive are not used to train foundation models." Its position is that Gemini accesses Workspace files only when a user explicitly asks, for example for a document summary, and that the data is processed on a one-time basis. It added that only documents whose sharing settings were opened up could be exposed to crawlers.

The problem is that it can't be reproduced. After the controversy grew, Gemini now answers citing a Reddit post as its source, making it impossible to verify how the original response came about. Explanations range from the AI combining character sketches fans had made public and Discord speculation, to hallucination, third-party extensions, and even suspicions of marketing.

Google's rebuttal: denying training on private Docs
Google denied training on private Docs, but the path of the original response remains a mystery (source: X post)

When Personalization Loses Trust: What Users Start Asking

The key point is that "even without reading your files directly, AI can reveal secrets by combining scattered clues." Even if there was no actual breach, it feels like a "leak" to the user. Among developers, some advise encrypting or storing sensitive ideas separately before putting them in Google Docs.

Privacy debate: how much of my data does AI know?
"How much of my data does AI know?" The debate remains unresolved (source: X post)

Before Entrusting Private Documents: The Boundaries to Check

This case showed that "the moment AI seems to know your secrets, privacy anxiety explodes." Google has rebutted the training claim, but until the exact path is known, the question remains: where does the AI's inference end and access begin?

Related: X post

Frequently asked questions

Does Gemini use private Google Docs for training?
Google says it does not use private Docs or Drive to train its foundation models, and that it accesses Workspace files only when a user explicitly asks for something like a summary, processing them on a one-time basis.
Did the character name really exist only in a private document?
The developer claims the name was not in the game files, on Steam, in serialized data, or on Discord, and that the only copy was in a private Google Doc. This is the developer's claim and has not been independently verified.
How did the case end up?
Because the original response could not be reproduced, the exact path was never established, and the question of where AI inference ends and access begins remains unresolved.
How can I protect sensitive ideas?
Among developers, the advice is to encrypt sensitive content or store it separately before putting it in Google Docs.

Related articles