This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational infrastructure through which OpenAI collects and maintains activity data. The authorization permits continuous tracking across service usage while preserving users' technical ability to modify cookie acceptance at the browser level.
The updated policy now explicitly states four privacy rights that apply depending on your location and subject to applicable exceptions: the right to know about and access your personal data in portable format, the right to request deletion, the right to correct inaccurate data, and the right to be free from retaliation for exercising these rights. Previously, the policy referenced these rights only through procedural language about how to submit requests. The explicit enumeration establishes clearer notice of what protections the policy recognizes. You can exercise these rights by submitting a request through privacy.openai.com or dsar@openai.com.
View change record →The updated policy now explicitly discloses that OpenAI receives information from advertisers and data partners, including details about purchases you make, and uses this data to personalize ads shown to Free and Go users. Previously, the policy referenced ad effectiveness measurement without disclosing the specific source (advertiser data) or the personalization component. Under the revised terms, Free and Go users can use advertising controls in account settings to control what data OpenAI uses to personalize ads. You can access these controls through your OpenAI account settings to adjust ad personalization.
View change record →The updated policy no longer explicitly states that OpenAI receives information from advertisers and other data partners for ad measurement and improvement, nor does it mention that users can control what data is used to personalize ads shown on the service. The revised terms now establish a broader direct marketing authority, stating the company may promote products and services to users through direct marketing and on third-party properties to assess effectiveness, subject to user choices and controls. The policy adds a reference to a Korea Addendum for Korean users. You can review the linked resources to understand what choices and controls remain available.
View change record →The terms authorize OpenAI to deploy cookies and tracking technologies for activity monitoring by default upon service use. Users retain the ability to adjust browser-level cookie preferences, though the provision does not specify how cookie refusal affects service functionality or feature availability.
How other platforms handle this
We use cookies, web beacons, pixel tags, and other tracking technologies to collect information about your use of our website and Service, including your browser type, referring URL, pages visited, and time spent on pages. We may use this information to analyze trends, administer the site, track use...
We and our third-party partners may use cookies, web beacons, and similar tracking technologies to collect information about your use of the Sites. Cookies are small data files stored on your browser or device. We use both session cookies and persistent cookies. We may also use web beacons, pixel ta...
cookie data, resettable device identifiers, advertising identifiers and other unique identifiers (described below in the section "Cookies and other Technologies").
Monitoring
OpenAI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We use cookies and similar tracking technologies to track activity on our services and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.— Excerpt from OpenAI's OpenAI Privacy Policy
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes the operational infrastructure through which OpenAI collects and maintains activity data. The authorization permits continuous tracking across service usage while preserving users' technical ability to modify cookie acceptance at the browser level.
The terms authorize OpenAI to deploy cookies and tracking technologies for activity monitoring by default upon service use. Users retain the ability to adjust browser-level cookie preferences, though the provision does not specify how cookie refusal affects service functionality or feature availability.
ConductAtlas has identified this type of provision across 71 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.