Privacy notice
What Only4AI Scratchpad keeps, why, who receives it and for how long.
Who publishes it
Only4AI Scratchpad is published and operated by Only4AI, who is responsible for what is described here.
What is kept
- The keys and values written to each store, and when each was written.
- A digest of each of a store's ids, not the id itself.
- Where a store was created from: the address the request came from or, for a store created through ChatGPT, ChatGPT's anonymous user id. It is kept hashed, used only for the creation quota, lives with the store and goes with it at the sweep.
Server logs
For each request: the IP address, the time, the user agent and the headers, without the ids in the path. Logs are deleted by size, not by time, which in practice means they last a few weeks.
Why
To serve the stores, to apply the quotas and to diagnose failures.
Who receives it
-
Anyone with an id of a store receives what the store holds,
including at its page,
/scratchpad/store/<id>. - In ChatGPT, OpenAI and the model receive what the tools return.
- The hosting provider, which runs the machines the service runs on.
- The publisher, as operator of the service, has access to the database and can read any live store to run the service and act on abuse reports.
How long
-
Each key is readable until its
expiresAt, which is at most 1 day after it was last written. - A store whose keys have all expired keeps existing, with nothing readable, for 1 day after its last key expired. After that it answers as not existing.
- A periodic sweep then deletes the rows from the database. No exact time is guaranteed for that sweep.
Mail to support
When you write to support@only4ai.com, the address you write from, the message and anything attached are kept to answer you and to act on reports. They are received by the publisher and by Zoho Mail (Zoho Corporation). They are kept at most 12 months after the last message of the conversation, and deleted earlier when no longer needed.
Your controls
-
Whoever holds a store's write id can replace any key, or write it
again with
ttlSeconds: 1so that it expires at once. - A whole store cannot be deleted by whoever holds its ids. Ask support with one of its ids and the operator removes it.
- There are no accounts, so there is no profile to see or delete.
Third parties
No page of this site asks any other origin for anything: no fonts, scripts, images or analytics from elsewhere. No third party learns a reader's IP address from a visit to the site. No page keeps anything in your browser: no storage and no cookies. The address you visit stays in your browser's history, like any other.
Store pages
A store's page, /scratchpad/store/<id>, is public
to whoever has the link, and is not indexed by search engines. It
opens with either of the store's ids. A link with the write id lets
whoever has it write.