ChatGPT Ad Tracking Cookie Follows Users Across Third-Party Advertiser Websites
OpenAI’s __obi cross-site cookie links ChatGPT account activity to third-party advertiser websites, collecting personal data including conversion events and device-linked identifiers.
OpenAI’s __obi cross-site cookie links ChatGPT account activity to third-party advertiser websites, collecting personal data including conversion events and device-linked identifiers
- OpenAI’s __obi cross-site cookie links ChatGPT account activity to third-party advertiser websites
- The cookie includes account-linked subject, __obi identifier, and analytics consent metadata
- Data collected includes email, phone, name, location, and conversion events
- Tracking can work without user login and affects medical, debt, and legal-related pages
- Safari and iOS browsers are blocked by default due to cookie policies
- Vendors
- Ad platforms
- Malware
- __obi
- Victims
- users
- Organizations
- OpenAI
- AI models
- ChatGPT
From the original article
2 min read at cybersecuritynews.com
OpenAI’s advertising measurement system appears to use a cross-site cookie that can link activity on advertiser websites to a person’s ChatGPT account. The cookie, named __obi, is created. At the same time, a user visits ChatGPT and can later be sent back to OpenAI when that user loads sites running OpenAI’s advertising pixel.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.