ChadGPT

1. Controller / Verantwortlicher

2. Hosting, security and delivery

Vercel hosts and delivers the website. Technical request data such as IP address, timestamp, requested URL, device/browser information and security events can be processed to provide and protect the service. The legal basis is Art. 6(1)(f) GDPR (secure and reliable operation). Operational logs are retained only for the periods configured by the hosting provider or while needed to investigate an incident.

3. Generator, history, voting and sharing

When you generate content, the context you enter and the constructed prompt are sent to xAI to produce a response. Do not enter sensitive information about yourself or another person. Generated content, prompts, context, a pseudonymous browser identifier, votes and share events are stored in Convex so the generator, “Yours”, ranking and moderation features work. Approved submissions can appear in public lists.

Processing needed to provide the feature you request is based on Art. 6(1)(b) GDPR; service integrity and moderation are based on Art. 6(1)(f) GDPR. Records are kept while they support these purposes and are deleted or anonymized when no longer needed or following a valid deletion request, unless a legal retention duty applies.

4. Essential browser storage

ChadGPT stores a random userId value in an essential first-party cookie. It connects your browser to its generation history and interactions; it is not your name or email address. This storage is necessary to provide requested features under § 25(2) TDDDG and is processed under Art. 6(1)(b) GDPR. See the cookie notice for details.

5. Analytics, advertising and consent

Vercel Web Analytics provides aggregated, cookie-free usage measurement. ChadGPT also uses Ezoic and Google advertising technology. Advertising or measurement that stores information on, or reads information from, your device is activated in the EEA only according to the choices collected through the Ezoic consent management platform. The legal bases are your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw or change that consent at any time using the privacy shield shown on the site. Withdrawal does not affect earlier lawful processing.

6. Contact and feedback

The contact form processes your topic, email address, optional name and message so we can answer you. The feedback dialog processes your feedback and optional contact details. Messages are delivered to access-restricted channels in the ChadGPT Discord workspace; Discord therefore processes the submitted information as a service provider. The legal basis is Art. 6(1)(b) GDPR for requests connected to a contract or pre-contractual steps and Art. 6(1)(f) GDPR for other enquiries and product feedback. Messages are normally deleted within six months after resolution unless they must be kept longer for a legal claim or retention duty.

7. Recipients and international transfers

Relevant service providers are Vercel (hosting), Convex (database), xAI (AI generation), Discord (contact delivery), and—where you consent—Ezoic and Google (advertising and consent management). Some providers may process data outside the EEA. Where required, transfers rely on an adequacy decision or appropriate safeguards such as standard contractual clauses. Provider privacy information is available from the respective provider.

8. Your rights

Subject to the legal requirements, you may request access, rectification, erasure, restriction, data portability, or object to processing based on legitimate interests. You may withdraw consent at any time. Use the contact form and select “Privacy request”, or email alec@a3.lol. We may need proportionate information to verify your identity.

You may also lodge a complaint with the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany, email mailbox@datenschutz-berlin.de, or another competent supervisory authority.

9. Children

ChadGPT is not directed to children under 16. Please do not submit personal data about children.