Privacy policy
Last updated: October 14, 2026
Unsaid is made by The Open Apps, Inc., a Delaware corporation ("we", "us"). This policy covers the Unsaid plugin in ChatGPT and the website unsaid.ambientapp.ai. It explains what we collect, why, who receives it, how long we keep it, and how you can delete it.
The short version
- There is no Unsaid account. Your games are kept under a scrambled form of the anonymous ID ChatGPT sends.
- We keep only the game: your clues, ChatGPT's guesses, the results and your streak.
- Games are deleted 30 days after your last move. Say "Delete my Unsaid data" in ChatGPT to delete everything at once.
- We don't show ads, sell data, send marketing email, or use analytics or advertising cookies.
What we collect
| What | Where it comes from | Why we need it |
|---|---|---|
| A scrambled (hashed) form of the anonymous user ID that ChatGPT sends | ChatGPT | So your games and streak are yours. We never receive your name, email address or chat history |
| Your games: which word you had, the clues you gave (typed in the card or relayed by ChatGPT), ChatGPT's guesses, the result and the time of each move | You and ChatGPT | To run the game, check clues and guesses, and show your score |
| Your stats: games played and won, your streak, clues per win, and which practice words you had recently | Your games | To show your streak and avoid repeating practice words |
| The language and the approximate country and time zone ChatGPT shares | ChatGPT | The language picks the word list; the time zone tells us which day's word is yours and is never stored. The country is kept only in technical logs |
| Technical logs: the time, the page or tool used, response codes, errors, the approximate country, the language and app type ChatGPT reports, and scrambled forms of the user, conversation and workspace IDs ChatGPT sends | Your browser or ChatGPT | To keep the service running and secure. Logs never contain secret words, forbidden words, clues, guesses, card keys or IP addresses |
| Support messages: your email address and message | You | To answer you |
We use your IP address only for a moment, to limit how many requests one device can make. It is scrambled with a key that changes whenever our server restarts, kept in memory for one minute and never written down.
We don't collect names, email addresses (except when you write to support), contacts, photos, precise location or your ChatGPT conversations. A clue you type in the chat is read by ChatGPT first; we receive only the clue ChatGPT passes to Unsaid.
About ChatGPT. You play inside ChatGPT, where OpenAI handles the conversation under OpenAI's privacy policy.
How we use it
- To run the game: show your secret word in the card, check your clues and ChatGPT's guesses, keep the score and the streak.
- To show anonymous totals for the day's word: how many players solved it, the median score, and how many you beat. No other player sees your clues or your identity.
- To keep the service secure and working, and to answer support requests.
We don't use any of it for advertising, profiling or training AI models.
Who receives it
| Recipient | What they receive | Why |
|---|---|---|
| OpenAI | Your clues, ChatGPT's own guesses, the score and the streak; the secret word and its forbidden words only after the game is over; and, inside the card in ChatGPT, your secret word and its forbidden words, shown to you | So ChatGPT can play and the card can show your game |
| Hetzner Online GmbH | Our servers and database | Hosting |
We may disclose information when the law requires it, or to protect people from harm.
How long we keep it
| Data | How long |
|---|---|
| Games (clues, guesses, results) | 30 days after the last move in the game |
| Stats (streak, games played and won) | Until 400 days pass without a game |
| Technical logs | 30 days |
| Support emails | 12 months |
Deleting sooner. Say "Delete my Unsaid data" in ChatGPT: every game, clue and stat of yours is deleted at once, in both languages. You can also ask us at support@theopenapps.com.
Children
Unsaid is for ages 13 and up. It is not directed at children under 13, and the word lists are written to be suitable for teens. If you think a child under 13 has given us personal data, email support@theopenapps.com and we will delete it.
Your rights
Depending on where you live (including under the GDPR and Türkiye's KVKK), you may have the right to access, correct, delete or export your data, or to object to how we use it. Email support@theopenapps.com and we will answer within 30 days. You can also complain to your local data protection authority.
Cookies and storage in your browser
Unsaid sets no cookies and stores nothing in your browser. The card in ChatGPT keeps its game key in memory only.
Security
Connections are encrypted (HTTPS). The card in ChatGPT uses a key that opens only its own game and expires after 24 hours. The secret word is sent only to the card, never in the results ChatGPT reads while you play.
Where data is processed
We are based in the United States. Our servers are run by Hetzner Online GmbH. OpenAI may process data in the United States and other countries, under its own privacy and security commitments. Cloudflare, Inc. runs DNS for our domain name; our traffic does not pass through Cloudflare.
Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use data we already hold, we will say so on this page before it takes effect.
Contact
The Open Apps, Inc. · by email only: support@theopenapps.com