Necessary technology, without an advertising layer.

What this notice covers

Cookies are small browser records used by websites and service providers. Similar technologies include local or session storage, request or session identifiers, pixels, and scripts that store information on or read information from a device. This notice covers technology used in connection with this website and its restricted administrative areas.

Our current position

The site currently uses only technologies needed to host and deliver pages, protect the service, and authenticate authorized administrators. Our site code does not currently deploy analytics cookies, advertising pixels, retargeting tags, or technology for cross-site behavioral advertising.

Because current site-controlled uses are strictly necessary rather than optional analytics or marketing, we do not ask visitors to “accept” a broad set of nonessential cookies that is not present. If we add a nonessential purpose, we will update this notice and provide an appropriate choice before that technology is activated.

Hosting, delivery, and security

ChatGPT Sites hosts and operates the website. The hosting layer may use short-lived or persistent technical identifiers for request delivery, load balancing, security, abuse prevention, error detection, and service continuity. Those identifiers may accompany technical information such as an IP address, browser and device type, requested page, timestamp, referring page, and request or session identifier.

Some of this processing happens at the hosting layer. We may not directly access every technical identifier, log entry, exact cookie name, or provider retention setting involved in delivering the service. OpenAI processes website-hosted information under the terms and data-processing addendum applicable to the site account.

Restricted administrator authentication

Restricted administrative areas use Sign in with ChatGPT. Authentication and session technology is necessary to complete sign-in, maintain the authorized session, apply administrator access controls, support sign-out, and protect submitted information. The site uses the approved administrator's ChatGPT user identifier, email address, and name, if available, for these purposes.

OpenAI separately operates the ChatGPT account and sign-in experience. Its own domains and services may use cookies under OpenAI's notices. Sign in with ChatGPT does not by itself give this website access to ChatGPT conversations, memory, files, tokens, or billing information.

Categories used today

Strictly necessary hosting. Technology required to route a request, serve a page or file, balance service capacity, and maintain availability.

Security and integrity. Technology used to reject abuse, protect forms and administrative actions, detect faults, and maintain a secure session.

Administrator authentication. Technology used only when an authorized administrator signs in to a restricted area and while that authenticated session remains active. Cookie names, domains, and lifetimes can be assigned or changed by the hosting or authentication service. We therefore describe verified purposes here rather than publishing a static list of names that could be inaccurate. We review the live deployed site and will update this notice if a new purpose or material category appears.

Technologies not currently used

We do not currently use site-controlled technologies for audience analytics, advertising measurement, interest-based advertising, retargeting, data-broker enrichment, social-media tracking, or recognizing a visitor across unrelated websites. We also do not load a LinkedIn, Meta, X, or similar advertising pixel merely because a visitor views a page or a sharing link.

The newsletter subscription form records the email address, consent version and time, source, and subscription status in our database. It does not require an analytics or advertising cookie, and the website does not currently use a pixel to collect newsletter-open activity through its pages.

If optional analytics are added later

Before introducing optional analytics or marketing technology, we will review the provider, purpose, information collected, applicable retention, and legal requirements. Where consent is required, optional technology will remain off until the visitor makes a choice, and rejecting nonessential technology will be as readily available as accepting it.

We will also provide a way to revisit the choice, honor applicable opt-out preference signals, and update both this Cookie Notice and the Privacy Notice. A material new purpose will not be treated as covered by a visitor's earlier use of the site.

Browser controls and necessary technology

Most browsers allow a user to view, block, or delete cookies and clear local site data. Blocking technology needed for authentication, security, or request delivery may prevent a restricted area or other part of the site from working correctly. Browser instructions vary by product and version.

Deleting an administrator session or choosing to sign out should end the local authenticated session, although OpenAI may separately maintain the user's ChatGPT account session under its own settings and notices.

Do Not Track and Global Privacy Control

We do not currently track visitors over time and across unrelated websites for targeted advertising. Because we do not engage in that activity, a legacy browser “Do Not Track” signal does not alter our present site practices.

We do not sell or share personal information for cross-context behavioral advertising. If a future practice is subject to a legally recognized opt-out preference signal, such as Global Privacy Control, we will process that signal as required and explain whether it applies to the browser, device, account, or other relevant context.

External and social-sharing links

A standard outbound link to LinkedIn, X, Facebook, or another service does not give us access to a visitor's account. If a visitor chooses the link, the destination may receive the page URL, IP address, browser information, and other information under its own privacy and cookie notices. We favor ordinary outbound links over embedded social-media tracking scripts.

Live review and changes

This notice is based on the purposes verified in the live site rather than a generic inventory. We review browser storage, response headers, third-party requests, and authenticated administrator flows when deploying a material change. Exact hosting-level names and lifetimes may change without changing their strictly necessary purpose.

If a change introduces a new purpose or materially affects visitor choice, we will revise this notice, update the “Last updated” date, and provide the required preference or consent mechanism before the optional technology runs.

Questions and requests

To ask about a cookie, session identifier, browser record, or related privacy choice, use our privacy request formand select “Privacy / data request.” If possible, include the observed name, domain, and approximate date without sending account credentials, identity documents, or other sensitive information.