01
Who is responsible
OpenPetAI is the data controller for the information described here. It is an independent community project operated in the United Kingdom and is not affiliated with OpenAI.
The secure privacy request form is the contact route for the controller. It creates a private reference in the admin queue and does not publish your message.
02
Information collected
- When you sign in: a site-specific ChatGPT user ID, email address and, when available, full name.
- When you vote: the pet, your upvote or downvote, your site-specific user ID and timestamps. Download totals count successful download requests without storing a downloader identity.
- When you submit: creator credit, pet name, description, moods, licence choice, image file, file size and hash, timestamps, review status and the policy version accepted.
- When an admin adds a profile photo: the image, a random public reference and its update timestamp. The account email and ChatGPT user ID are not attached to the public image.
- When you report content: the pet, reason, explanation, optional reply email and, when signed in, your site-specific user ID.
- When you make a privacy request: name, reply email, request details, status and response notes.
- For abuse prevention: a short-lived one-way hash derived from an account or network identifier. The raw network identifier is not stored in OpenPetAI's database.
03
Why it is used
Provide the serviceProcess submissions, preserve creator credit, record votes and download totals, rank pets, display approved pets and optional admin profile photos, and provide account controls. Basis: performing the user agreement.
Keep the community safeValidate files, prevent duplicate or excessive uploads, review submissions, investigate reports and enforce the rules. Basis: legitimate interests in operating a safe service and, where applicable, legal obligations.
Handle rights and complaintsVerify and respond to privacy, safety and ownership requests. Basis: legal obligations and legitimate interests.
OpenPetAI does not sell personal information or use it for targeted advertising.
04
Hosting and sharing
Approved creator credit, pet details, selected licence, image, aggregate vote score and download total are public. An admin profile photo is also public when that admin chooses to add one. Individual vote choices, account email, ChatGPT user ID, pending files, reports and privacy requests are not public.
OpenAI Sites and its infrastructure providers process information to authenticate visitors, host the application, store database records and serve files. Their current privacy and data-processing terms govern where infrastructure data is processed and the safeguards used for international transfers.
Information may also be disclosed where required by law, to protect someone from serious harm or to establish or defend legal rights.
05
How long information stays
- Pending submissions are removed after 180 days if no decision is made.
- Rejected submissions and their files are removed 90 days after rejection.
- Approved submissions remain while published, until the creator removes them or a valid moderation/removal request is completed.
- An admin profile photo remains until that admin replaces it, removes it or deletes their OpenPetAI data.
- Your vote remains until you change or remove it, delete your account data, or the connected pet is removed. Aggregate download totals follow the connected pet.
- Closed content reports are retained for up to 365 days; closed privacy requests for up to 730 days.
- Rate-limit records expire within 2 days.
Deletion from active storage is automatic or immediate through account controls. Infrastructure backups and security logs may follow the hosting providers' own limited schedules.
06
Your choices and rights
Depending on the circumstances, UK data protection law gives you rights to access, correct, erase, restrict or object to processing, and to complain about how information is handled.
You may also complain to the UK Information Commissioner's Office. OpenPetAI may need to verify identity before disclosing or changing personal information.
07
Cookies and similar technology
OpenPetAI currently uses no advertising or analytics cookies. The hosting and ChatGPT sign-in flow may use cookies or similar storage that are strictly necessary for authentication, security and remembering a signed-in session.
Because non-essential tracking is not used, OpenPetAI does not show a consent banner. If analytics, advertising or other non-essential technology is added later, it will remain off until the visitor makes a clear choice.
This notice may change as the service develops. Material changes will be dated and, where appropriate, shown before a creator next submits.