ChatGPT privacy center

ChatGPT Privacy Center: What It Is, How to Open It, and What It Doesn’t Change

By Muhammad Ramzan Aatish

ChatGPT Privacy Center: What It Is, How to Open It, and What It Doesn’t Change

When did you last touch your ChatGPT privacy settings without hunting through three menus first?

If the answer is never, the ChatGPT Privacy Center was built for you. Probably.

The ChatGPT Privacy Center is a new page inside ChatGPT that gathers every privacy control into one place and explains what each one does. It changes nothing on its own. It deletes nothing. It only shows you where the switches live. That sounds modest, and it is. It also arrived during the noisiest stretch ChatGPT privacy has seen in a while: an investigation revealed hundreds of contractors reading real user conversations; a proposed class action followed two days later accusing OpenAI of never properly disclosing it; then, the next week, the hub started rolling out.

The ChatGPT Privacy Center Is a Map, Not a Switchboard

OpenAI announced the hub in ChatGPT’s release notes, careful about what it is not. This is no new dashboard. Your ChatGPT privacy settings remain in Settings, exactly where they were. The ChatGPT Privacy Center explains what each control does and walks you to it. That is the entire job description.

Inside, everything is sorted into three groups. Personalized chats and ads covers Memory, personalized ads, and location. Chat privacy holds a single topic, temporary chat, with a button to start one on the spot. Data use and access covers connected apps and plugins, multi-factor authentication, model improvement, and exporting or deleting your data. Seven topics total. Each one opens a short panel with a few questions and a Manage button. The button carries a small arrow, because it takes you out of the center and into Settings.

The ChatGPT Privacy Center reaches signed-in users on the Free, Go, Plus, Pro, and Business plans, on the web and in the iOS and Android apps. Enterprise, Edu, and Healthcare accounts are out. The rollout is gradual, and OpenAI says so itself: if you do not see it yet, it may simply not have reached your account or app version. What you see can also shift with your plan, region, and workspace settings.

Four short principles sit at the bottom of the page: OpenAI does not sell your data or share conversations with advertisers, it secures information with encryption and monitoring, you control your data, and you control whether your chats improve its models. None of that is new. A page built to explain existing settings was never going to contain surprises.

Opening the ChatGPT Privacy Center Takes About Ten Seconds

How to open it

  1. On the web: open your account menu, select Help, then Privacy center.
  2. On iPhone: open Settings, then Privacy Center.
  3. On Android: open Settings, then Privacy center.
  4. On desktop: open the Help menu and it sends you to the browser. Or skip the menus entirely: chatgpt.com/privacy-center.

Reading Notebookcheck’s walkthrough of the launch, what stuck with me was a small, concrete detail. Their reviewer opened the ChatGPT Privacy Center the morning after it appeared, in a European account on the free plan, and found the whole thing already localized. The observation they led with was the Manage button’s little arrow. It tells you the truth about the page before you read a word: every change happens somewhere else. They also named the two stops that repay the minute they cost, multi-factor authentication and the connected-apps list. I would add a third. We will get to it.

If the entry is missing on your account, give it time. The rollout is gradual, and a missing menu item is a waiting game, not a malfunction.

The Week Before It, Nobody Was Talking About a Menu

To understand why a settings index landed like news, rewind about a week. 404 Media’s Joseph Cox published an investigation into an internal OpenAI program called Project Lily, built from leaked documents and conversations with people who do the work. The shape of it: hundreds of contractors, hired through a staffing firm and paid through an AI-training vendor at rates above fifty dollars an hour, reading real ChatGPT prompts, sometimes whole conversations, then summarizing what the user wanted and scoring the model’s replies on a one-to-seven scale. The goal was steering ChatGPT away from sycophancy and from pretending to be human.

OpenAI’s defenses were on the record. Reviewers do not see usernames, and conversations pass through an automated Privacy Filter first. But the company acknowledged to 404 Media that sensitive details can still slip through the filter. Reviewers also see something else above each prompt: a “user memories” summary that can reveal what someone has used ChatGPT for before and roughly where they live. Strip the username all you want. The little bio pinned above the chat does its own talking.

Reading Cox’s investigation, the line that stayed with me was not a number. It was a contractor’s answer when asked whether users know humans read their chats: “No… I don’t think they would imagine some contractor somewhere is analyzing the conversations.” The whole story in one sentence. Most of ChatGPT’s users picture a private exchange with a machine. The investigation showed a workforce in the loop.

Two days later came the lawsuit. Two California consumers filed a proposed class action, Vredenburgh v. OpenAI, alleging the company never adequately disclosed that outside contractors could read, summarize, and score real conversations. The complaint points at the company’s own privacy policy, which names categories of outside data recipients but never specifically names data-annotation or human-evaluation vendors. It asks for damages and for injunctions that would flip the defaults: opt-in consent before human review, and the training toggle off unless you turn it on. All of it is allegation, not verdict. No class has been certified. There is nothing to claim and nothing settled.

The complaint is, at bottom, a disclosure fight: what OpenAI told consumers versus what its reviewers could see.

The record is silent on one point. Nothing in the reporting or the filing claims OpenAI timed the hub to answer them. The sequence is just the sequence: the investigation, the lawsuit two days later, the ChatGPT Privacy Center the next week. I am not connecting those dots beyond that, because there is nothing verified to connect them with.

One caveat before the framing runs away: human review of chatbot data is not new. Canadian privacy regulators confirmed earlier that OpenAI had used a subset of user interactions for model improvement with employee and contractor review, and found the filtering incomplete. What the Lily reporting added was the scale and the mechanics: a codename, a staffing firm, a pay rate, and the memory summary above the prompt.

Three Things the ChatGPT Privacy Center Says Out Loud

Here is where the hub earns its keep: buried in those seven panels are three sentences most users have never seen spelled out, each correcting something people commonly get wrong.

First: deleting a chat does not delete the memory it created. Memory and chat history are separate stores. You can wipe every conversation and still have ChatGPT remember your job title, your preferences, the project you mentioned two months ago. A real cleanup means deleting the saved memory and the chat where you shared it, then checking the memory summary, archived chats, files, and connected apps. The ChatGPT Privacy Center says this outright. Most settings pages never do.

Second, the training toggle only faces forward. Turning off “Improve the model for everyone” keeps future conversations out of model training. It does not pull back chats already used. It does not clear your history. It does not touch your memory settings. People flip that switch expecting a cleanup. Nothing visibly changes, because nothing should. It was never a deletion tool.

Third, and this one surprised me: turning off ad personalization does not turn off ads. On the Free and Go plans, the only plans that show ads at all, switching personalized ads off just changes how ads get picked. You still see them, chosen from the context of your current conversation instead of your profile. The company’s line is blunt about it. The one hard boundary the company does draw: advertisers get none of the underlying material. No chats, no history, no memories, no personal details.

⚠ The button that quietly re-enrolls you
There is one switch the hub cannot protect you from, because it is not a switch at all. Rating a reply with thumbs up or thumbs down lets OpenAI use the entire conversation for training, even if you turned “Improve the model for everyone” off. It comes from OpenAI’s own model-improvement documentation, surfaced in independent coverage of the opt-out’s limits. The fix is behavioral, not technical: skip the feedback buttons on any chat holding something sensitive.

Getting Something Out of the ChatGPT Privacy Center

The hub is most useful as an inventory. Walk the seven topics from top to bottom and hit Manage on each one. In a few minutes you will have touched every one of your ChatGPT privacy settings: memory, ads, location, temporary chat, connected apps, multi-factor authentication, model improvement, export, deletion. Nobody does this for fun. Do it once.

A few stops matter more than others. Turn on multi-factor authentication if it is off. Open the connected-apps list and revoke the apps you authorized long ago and forgot about. Decide on the training toggle with open eyes: off means future chats stay out of training, and everything already there stays put.

For anything genuinely sensitive, use a temporary chat and do not save it afterward. Temporary chats stay out of history, do not build memory, and are not used for training. And remember the warning above: the thumbs-up button feeds training too. On sensitive threads, leave it alone.

If what you want is deletion rather than orientation, the full walkthrough lives in our guide to deleting your ChatGPT data, which covers the three separate systems you have to clear. And if you are wondering whether the grass is more private elsewhere: Anthropic has confirmed it also uses human review to improve Claude. Our Claude vs ChatGPT vs Gemini comparison goes deeper on how the three differ.

The ChatGPT Privacy Center will not make any of those decisions for you. It just finally puts them all in one place where you can see them. A smaller promise than a privacy revolution, and a more useful one than another buried settings menu.

FAQ

Q :Is the ChatGPT Privacy Center a new set of privacy controls?
Ans: No. Your privacy controls still live in Settings. The hub explains what each one does and links to it. The company’s own wording: opening it “does not change your settings, delete your data, or override your organization’s policies.”
Q :How do I open the ChatGPT Privacy Center?
Ans: Web: account menu, then Help, then Privacy center. iPhone or Android: Settings, then Privacy Center. Desktop: the Help menu, or go straight to chatgpt.com/privacy-center. Missing? The rollout is still reaching accounts.
Q :Why can’t I see it on my account?
Ans: Most likely the gradual rollout. OpenAI says the hub is still reaching eligible accounts, and what appears also depends on plan, region, and workspace settings. Enterprise, Edu, and Healthcare accounts do not get it at all.
Q :Do humans really read my ChatGPT conversations?
Ans: Sometimes. 404 Media’s Project Lily investigation found hundreds of contractors reading real prompts, occasionally whole conversations, to rate replies. Usernames are stripped and a Privacy Filter runs first, but OpenAI acknowledged sensitive details can slip through, and reviewers may see a memory summary showing prior usage and rough location.
Q :If I type “keep this between us,” does ChatGPT keep it private?
Ans: Nope. Some of the prompts contractors reviewed contained exactly that request, and a line typed into the chat box does not override backend data collection. If it is sensitive, use a temporary chat. Or do not paste it in at all.
Q :Does turning off “Improve the model for everyone” stop all training use?
Ans: Not quite. It stops future chats from feeding training, but it does not pull back chats already used. And rating a reply with thumbs up or down can put that whole conversation back in. Two gaps, one toggle.
Q :Can I join the Project Lily class action or file a claim?
Ans: No. The case is at the complaint stage: no certified class, no settlement, nothing to file. The allegations are unproven. If that changes, class members would be notified through the court process, not a signup form.

Sources

Every link below was opened and verified before this piece shipped. The first two carry the most weight: 404 Media’s original investigation and OpenAI’s own documentation.

  1. 404 Media: “Inside ‘Project Lily’: The Humans Reading Your ChatGPT Chats,” by Joseph Cox: the original investigation behind this piece’s backdrop: hundreds of contractors reading real prompts, the 1-to-7 scoring, the Privacy Filter’s limits, and the contractor quote used above.
  2. OpenAI Help Center: “Privacy Center in ChatGPT”: the official documentation for the hub: access paths, plan availability, the three groups and seven topics, the Manage button, and the quoted lines on memory, training, ads, and managed workspaces.
  3. Notebookcheck: “ChatGPT’s new privacy center changes none of your settings”: hands-on walkthrough opened in a European Free account the morning after launch: the Manage-button arrow detail, the MFA and connected-apps recommendation, and the ads-personalization mechanics.
  4. TopClassActions: “OpenAI sued over alleged undisclosed human review of ChatGPT conversations”: the Vredenburgh v. OpenAI proposed class action: case number, the disclosure allegations, the claims asserted, and the relief sought.
  5. Moneycontrol: “Humans may be reading some ChatGPT chats: What ‘Project Lily’ report reveals”: corroborating coverage plus the Canadian regulators’ earlier finding that OpenAI used a subset of interactions for model improvement with contractor review.
  6. Cybernews: “ChatGPT chats reviewed by OpenAI human contractors”: corroboration of the reviewer-visible memory summary and the anti-sycophancy training goal; notes OpenAI referred 404 Media to its help page after publication.
  7. Gadgets360: “ChatGPT Gets New Privacy Center With Easy Access to Privacy Controls”: launch coverage: the three categories, per-platform access steps, and the gradual rollout.
  8. mixed-news.com: “ChatGPT’s new Privacy Center reaches five plans, but not Enterprise, Edu or Healthcare” (niche tech outlet; quoted lines attributed to OpenAI docs): plan coverage, the ads rule verbatim, location handling, managed-workspace export limits, and OpenAI’s four privacy principles.
  9. elephas.app: “Is ChatGPT Private After Project Lily? The Thumbs-Up Loophole” (niche product blog; used only where it quotes OpenAI’s own documentation): the thumbs-up/thumbs-down feedback loophole and Temporary Chat mechanics.

The ChatGPT Privacy Center, the Project Lily investigation, and what OpenAI’s privacy hub actually changes: AI Discovery Wire.


Comments

2 responses to “ChatGPT Privacy Center: What It Is, How to Open It, and What It Doesn’t Change”

  1. […] As a step-by-step checklist for how to delete ChatGPT data, though, it is genuinely useful — our full walkthrough of the new ChatGPT Privacy Center covers each section and the three gaps the Center itself […]

  2. […] So before you paste anything sensitive, open the privacy controls and make your own call. We have a full walkthrough of ChatGPT’s privacy center, plus a separate guide on deleting your ChatGPT data entirely if you ever want a clean […]

Leave a Reply

Your email address will not be published. Required fields are marked *