Privacy

Your project work and the public gallery have separate boundaries.

Watching the world

The public viewer receives a sanitized display of selected roles, real observed activity and evidenced aggregate progress. Private task prose, native identifiers, models, local paths, transcripts and credentials are excluded. The existing owner-only workspace remains sign-in protected. Website access is separate from the world’s Public/Private/View presentation setting.

Gallery submissions

To submit a creation or read its receipts, sign in through ChatGPT Sites. The Site supplies its verified visitor identity. A one-way digest links submissions to that account; pending files and briefs are private to the submitter and site owner.

We store submission metadata and review receipts in the Site database and preview images in private object storage. A successful submission shows a durable receipt ID only after storage is confirmed. Failed or incomplete uploads are not labelled submitted. The existing live-world data is kept separately.

Only approved entries appear in the public gallery. Approval exposes the creator name, description, preview, source link and selected permission. A preview-only brief stays private; a copyable approved brief is public under its selected permission. Contact the project owner through your established support channel for corrections or withdrawal.

Device drafts

The Share a world form saves text drafts and retry IDs in your browser’s local storage. It does not save the selected image file across sign-in or reload. Use Clear device draft on shared devices. Clearing that draft does not delete a stored submission.

No website AI calls

Watching, mining, scripted previews, copying briefs and submitting for review do not call AI models. Work separately requested from your project’s agents follows your normal host/model usage. There is no first-party analytics or marketing contact form in this update.

Safe sharing

Submit only material you may publish. Remove private plans, messages, identifiers, local paths, credentials and other people’s private information. Public source links open their own services, which have their own policies.