Privacy Policy

Who we are

Our website address is: https://openai.mom.

 

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

 

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

 

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

 

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

 

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

 

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

 

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

 

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

# Privacy Policy / 隐私政策

**Last Updated / 最后更新：2026-03-19**

—

## English Version

### 1. Introduction

Welcome to **ChatGPT Lite** (“the Service”, “we”, “our”, or “us”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our web application, which is designed to provide access to OpenAI’s conversational AI capabilities.

By using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Service.

—

### 2. Information We Collect

#### 2.1 Information You Provide
– **Conversation Messages**: The text messages (and images, if using the multimodal vision feature) you send to the chatbot are transmitted to the OpenAI API for processing. We do **not** store your conversation content on our servers.
– **API Keys**: If you provide your own OpenAI API key or Google API key in the Settings, these are stored **locally in your browser** (localStorage) only and are never transmitted to or stored on our servers.
– **Custom Prompts & Settings**: Your custom system prompts, conversation preferences, and application settings are stored **locally in your browser** (localStorage) only.

#### 2.2 Automatically Collected Information
– **Client Identifier (clientId)**: A randomly generated identifier is created in your browser session and sent with each request to enforce rate limiting. This identifier is ephemeral and does not identify you personally.
– **Request Metadata**: Timestamps and cryptographic signatures are generated per request for security verification purposes. These are not stored beyond the duration of each request.
– **IP Addresses**: Your IP address may be logged temporarily on our servers for security monitoring (e.g., detecting invalid or malicious requests). Logs are not retained for extended periods.

#### 2.3 Information We Do NOT Collect
– We do **not** collect your name, email address, or other account information (no user registration is required).
– We do **not** store your conversation history on our servers.
– We do **not** use third-party analytics or advertising trackers.

—

### 3. How We Use Your Information

| Purpose | Data Used |
|———|———–|
| Providing AI chat responses | Your messages are forwarded to OpenAI API |
| Rate limiting & abuse prevention | clientId, timestamps, IP address |
| Security verification | Request signatures (HMAC-SHA256), timestamps |
| Google Search integration (optional) | Your search queries are sent to Google Custom Search API |
| Multimodal image recognition (optional) | Images are forwarded to OpenAI Vision API |

—

### 4. Third-Party Services

#### 4.1 OpenAI
Your conversation messages are sent to **OpenAI’s API** for processing. OpenAI’s data handling is governed by [OpenAI’s Privacy Policy](https://openai.com/privacy). We encourage you to review it.

– If you provide your **own OpenAI API key**, your usage is directly subject to your OpenAI account terms.
– If you use the Service without a personal API key, messages are processed through the operator-configured API key, subject to the operator’s OpenAI usage agreement.

#### 4.2 Google Custom Search (Optional)
If the Google Search plugin is enabled, your search queries are sent to **Google’s Custom Search JSON API**. This is governed by [Google’s Privacy Policy](https://policies.google.com/privacy).

#### 4.3 Hosting & Infrastructure
The Service may be deployed on **Vercel**, **Docker**, or **Kubernetes** infrastructure. Vercel’s data handling practices are governed by [Vercel’s Privacy Policy](https://vercel.com/legal/privacy-policy).

—

### 5. Data Storage & Retention

– **Server-side**: We do not persistently store your conversation data, personal information, or API keys.
– **Client-side (Browser localStorage)**: Your conversations, prompts, settings, and API keys are stored locally in your browser. You can clear this data at any time through your browser settings or by using the application’s export/import and reset features.
– **Rate limit data**: Request timestamps are retained in-memory only for the duration needed to enforce rate limits (up to 24 hours) and are purged automatically.

—

### 6. Data Security

We implement security measures including:
– **HMAC-SHA256 request signing** to verify each request’s authenticity and prevent replay attacks.
– **Timestamp validation** (requests expire after 5 minutes) to prevent replay attacks.
– **Rate limiting** to prevent abuse (5 requests/minute, 20 requests/hour, 50 requests/day per client).
– **HTTPS** encryption for all data in transit.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

—

### 7. Children’s Privacy

The Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

—

### 8. Your Rights

Depending on your jurisdiction, you may have rights including:
– **Access**: The right to know what data we hold about you.
– **Deletion**: The right to request deletion of your data. Since we do not store personal data on our servers, most data deletion can be performed by clearing your browser’s localStorage.
– **Portability**: You may export your conversation data at any time using the in-app export feature.

For any data-related requests, please contact us via the feedback page.

—

### 9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the “Last Updated” date at the top of this document. We encourage you to review this policy periodically.

—

### 10. Contact Us

For questions or concerns regarding this Privacy Policy, please reach out via:
🔗 https://openai.mom/feedback-faq

—
—

## 中文版

### 1. 简介

欢迎使用 **ChatGPT Lite**（以下简称”本服务”、”我们”）。本隐私政策说明了当您使用本 Web 应用时，我们如何收集、使用、披露和保护您的信息。本服务旨在为无法直接访问 ChatGPT 官方服务的用户提供 OpenAI 对话 AI 功能。

使用本服务即表示您同意本隐私政策。如不同意，请停止使用本服务。

—

### 2. 我们收集的信息

#### 2.1 您主动提供的信息
– **对话消息**：您发送给聊天机器人的文字消息（以及使用多模态视觉功能时的图像）将被转发至 OpenAI API 进行处理。我们**不**在服务器上存储您的对话内容。
– **API 密钥**：若您在设置中填入自己的 OpenAI API Key 或 Google API Key，这些密钥**仅存储在您的本地浏览器**（localStorage）中，不会被传输至或存储在我们的服务器上。
– **自定义提示词与设置**：您的自定义系统提示词、对话偏好和应用设置**仅存储在您的本地浏览器**（localStorage）中。

#### 2.2 自动收集的信息
– **客户端标识符（clientId）**：您的浏览器会话中会生成一个随机标识符，随每次请求发送以执行速率限制。该标识符是临时的，不能识别您的个人身份。
– **请求元数据**：每次请求会生成时间戳和加密签名以进行安全验证，不会在请求结束后存储。
– **IP 地址**：您的 IP 地址可能在服务器端被临时记录，用于安全监控（例如检测无效或恶意请求），日志不会长期保留。

#### 2.3 我们不收集的信息
– 我们**不**收集您的姓名、电子邮件或其他账户信息（无需注册账号）。
– 我们**不**在服务器上存储您的对话历史。
– 我们**不**使用第三方分析工具或广告追踪器。

—

### 3. 我们如何使用您的信息

| 用途 | 涉及数据 |
|——|———-|
| 提供 AI 对话回复 | 您的消息被转发至 OpenAI API |
| 速率限制与滥用防护 | clientId、时间戳、IP 地址 |
| 安全验证 | 请求签名（HMAC-SHA256）、时间戳 |
| Google 搜索集成（可选） | 您的搜索查询被发送至 Google 自定义搜索 API |
| 多模态图像识别（可选） | 图像被转发至 OpenAI Vision API |

—

### 4. 第三方服务

#### 4.1 OpenAI
您的对话消息将发送至 **OpenAI 的 API** 进行处理。OpenAI 的数据处理方式受 [OpenAI 隐私政策](https://openai.com/privacy) 约束，建议您阅读。

– 若您填写了**自己的 OpenAI API Key**，您的使用直接受您的 OpenAI 账户条款约束。
– 若您未填写个人 API Key，消息将通过运营方配置的 API Key 处理，受运营方的 OpenAI 使用协议约束。

#### 4.2 Google 自定义搜索（可选）
若启用 Google 搜索插件，您的搜索查询将发送至 **Google 自定义搜索 JSON API**，受 [Google 隐私政策](https://policies.google.com/privacy) 约束。

#### 4.3 托管与基础设施
本服务可能部署于 **Vercel**、**Docker** 或 **Kubernetes** 基础设施上。Vercel 的数据处理受 [Vercel 隐私政策](https://vercel.com/legal/privacy-policy) 约束。

—

### 5. 数据存储与保留

– **服务器端**：我们不会持久存储您的对话数据、个人信息或 API 密钥。
– **客户端（浏览器 localStorage）**：您的对话记录、提示词、设置及 API 密钥存储在您的本地浏览器中。您可随时通过浏览器设置或应用内的导入/导出和重置功能清除这些数据。
– **速率限制数据**：请求时间戳仅在内存中保存，用于速率限制执行（最长 24 小时），之后自动清除。

—

### 6. 数据安全

我们采取以下安全措施：
– **HMAC-SHA256 请求签名**：验证每次请求的真实性，防止重放攻击。
– **时间戳验证**：请求在 5 分钟后过期，防止重放攻击。
– **速率限制**：防止滥用（每客户端每分钟 5 次、每小时 20 次、每天 50 次）。
– **HTTPS 加密**：所有传输中的数据均经过加密。

但互联网上的数据传输无法保证 100% 安全，我们无法对绝对安全作出保证。

—

### 7. 儿童隐私

本服务不面向 13 岁以下（或您所在司法管辖区数字同意年龄以下）的儿童。我们不会主动收集儿童的个人信息。如果您认为某位儿童向我们提供了个人信息，请与我们联系。

—

### 8. 您的权利

根据您所在地区的法律，您可能享有以下权利：
– **访问权**：了解我们持有关于您的哪些数据。
– **删除权**：请求删除您的数据。由于我们不在服务器上存储个人数据，大部分数据删除可通过清除浏览器 localStorage 完成。
– **可携带权**：您可随时通过应用内导出功能导出您的对话数据。

如需行使上述权利，请通过反馈页面与我们联系。

—

### 9. 政策更新

我们可能不时更新本隐私政策。更新内容将通过修改本文档顶部的”最后更新”日期来反映。建议您定期查阅本政策。

—

### 10. 联系我们

如对本隐私政策有任何疑问，请通过以下方式联系：
🔗 https://openai.mom/feedback-faq