Skip to content
Today
Sections

Security Independently confirmed2 publishers 2 min read Published Updated

OpenAI lets advertisers target ChatGPT users by uploaded email, phone number or Android ad ID

OpenAI lets advertisers target ChatGPT users by uploaded email, phone number or Android advertising ID, according to 404 Media's tests. Prompts that users may assume are private are a targeting input too.

The Watch · Security desk

Send a correction

Illustration accompanying OpenAI lets advertisers target ChatGPT users by uploaded email, phone number or Android ad ID
Generated illustration
Uploaded lists need scale to target ChatGPT users How large an uploaded list must be before it can target an audience, ChatGPT's reported user base, and how long OpenAI says it keeps uploaded files.

Key figures: an uploaded list must be more than 25,000 entries long to target an audience, otherwise those users can only be excluded; ChatGPT has one billion monthly active users, as 404 Media reports; an OpenAI spokesperson says uploaded files are usually deleted within 24 hours of upload.

Uploaded lists need scale to target ChatGPT users
FigureValueNoteClaim
Uploaded list length needed to target, more than25,000 entriessmaller lists can only exclude users4
ChatGPT monthly active users1,000,000,000 usersas reported by 404 Media6
Uploaded files usually deleted within24 hoursper an OpenAI spokesperson5

What happened

  • OpenAI checks advertiser-uploaded lists against real ChatGPT users, and 404 Media says an advertiser can be a big business or essentially a random person.
  • To target an audience, the uploaded list must exceed 25,000 entries. Smaller lists can only be used to exclude those users from an ad.
  • An OpenAI spokesperson told 404 Media that uploaded files are deleted after processing, usually within 24 hours of upload.
  • 404 Media ran two test ads that said ChatGPT isn't private and linked to its Project Lily article on contractors reading real users' prompts.
  • OpenAI introduced ChatGPT ads in the U.S. in February, expanded to other territories, and this month added ads beside image generation results.

Why it matters

  • Who's exposed exposure 404 Media has separately shown that humans may review users' prompts. The same text now also feeds an ad system.
  • What it limits constraint The ads personalization opt-out stops use of past chats, activity and preferences. The setting itself says ads may still be based on the current chat, so a user has no switch that removes the live prompt.
  • Who's exposed exposure Advertisers can upload raw emails and phone numbers. Meta hashes such uploads, and OpenAI did not say whether it does, so the handling of raw personal data sits with OpenAI.

ChatGPT's ad system has two separate targeting controls. The first is topical. An advertiser writes "context hints," and OpenAI's site says they "guide matching but aren't exact-match targeting rules." [12] 404 Media's hint asked for people searching for privacy topics, including "the privacy of ChatGPT chats themselves." [13] When a Free or Go user types a prompt, the chatbot will often show a related ad at the bottom of the answer. [10]

The second control is the list. Advertisers upload raw or hashed emails and phone numbers, or Android advertising IDs, and the ad follows the people who match. [3]

404 Media calls the ad targeting available in ChatGPT "somewhat standard practice across the advertising industry." [18] The novel part is the prompt, which is also an input. [8] 404 Media reports that ChatGPT has one billion monthly active users. [6]

Zach Edwards, co-founder of DecryptAds, a company that collects online advertising data for research, told 404 Media that OpenAI is doing what other large companies do when they start to monetize their audiences: "they are boiling the frog and hoping their users won't notice the privacy implications from their new ads." [17] [16]

The limits on advertisers come from OpenAI. A spokesperson told 404 Media that "advertisers cannot see which individuals matched or select specific people within an audience." [7] That is the company's statement. The campaign tools 404 Media used show the context hint field and the audience options, but the claim about matched individuals is not something the tests demonstrate.

What to watch

  • Whether OpenAI answers if it hashes raw emails and phone numbers at upload, as Meta's system does.
  • Whether OpenAI changes the personalization setting so it covers the current chat.
  • Whether ads beside image generation results and in new territories bring new targeting inputs.

Clarity's read

What the record supports and how the coverage leans. The claims behind it follow.

Reality

Evidence68
Adoption50
Hype gap+10
Incentives40
Confidence65

Perspective Coverage

3 publishers
Builder
Builder 15%
Operator
Operator 43%
Investor
Investor 42%
Why these scores

Claim ledger

Ranked by verification strength, evidence, and original report placement.

  1. [1]

    According to 404 Media's own tests of ChatGPT's advertising ecosystem, OpenAI lets anyone inject ads into ChatGPT users' sessions, targeting groups of people based on their email address, phone number, or a unique identifier on their phone.

    Reported Supported Source: 404 MediaView cited source
  2. [2]

    An advertiser, which can be a big business or essentially a random person, can create an 'audience' of specific ChatGPT users to target; OpenAI checks whether uploaded raw emails and phone numbers correspond to a real ChatGPT user, and if so the advertiser can target those people.

    Reported Supported Source: 404 MediaView cited source
  3. [3]

    Besides raw emails and phone numbers, OpenAI's audience options include hashed emails and phone numbers and Android advertising IDs, which are unique identifiers issued to every Android phone.

    Reported SupportedView cited source
  4. [4]

    To make an audience ready for inclusion in targeting, the uploaded list must be more than 25,000 entries long; otherwise those users can only be marked for exclusion.

    Reported SupportedView cited source
  5. [5]

    An OpenAI spokesperson told 404 Media that uploaded files are deleted after processing, which is usually within 24 hours of upload.

    Reported Supported Source: OpenAI spokespersonView cited source
  6. [6]

    404 Media reports that ChatGPT has one billion monthly active users.

    Reported Supported Source: 404 MediaView cited source
  7. [7]

    An OpenAI spokesperson told 404 Media: 'Being on an advertiser's list does not, by itself, cause an ad to be shown. Inclusion filters and audience bid adjustments require at least 25,000 matched users, and advertisers cannot see which individuals matched or select specific people within an audience.'

    Reported Supported Source: OpenAI spokespersonView cited source
  8. [8]

    ChatGPT's ad targeting is novel in that it is also based on the prompts users enter into the chatbot, which users may assume are private.

    Reported Supported Source: 404 MediaView cited source
  9. [9]

    OpenAI first introduced ChatGPT ads in the U.S. in February, then expanded to other territories, and this month pushed ads alongside image generation results.

    Reported SupportedView cited source
  10. [10]

    When a Free or Go user types a prompt into ChatGPT, the chatbot will often display a related advertisement at the bottom of its answer.

    Reported SupportedView cited source
  11. [11]

    404 Media ran two advertisements inside ChatGPT reading 'ChatGPT isn't private. OpenAI hires humans to read users' chats. Learn more,' with a link to its article on Project Lily, in which contractors read real users' ChatGPT prompts.

    Reported SupportedView cited source
  12. [12]

    OpenAI's site says of advertiser context hints: 'Describe the conversations, topics, or keywords where your products or services may be relevant; these hints guide matching but aren't exact-match targeting rules.'

    Reported Supported Source: OpenAI's advertising site, as quoted by 404 MediaView cited source
  13. [13]

    404 Media added the context 'people searching for topics that discuss privacy, or the privacy of ChatGPT chats themselves, or people who are asking about current technology and AI topics.'

    Reported SupportedView cited source
  14. [14]

    Meta's advertising system hashes the data when someone uploads raw emails and phone numbers. OpenAI did not answer when asked whether it does the same, and reiterated that advertisers can upload both raw personal data and hashed versions.

    Reported Supported Source: 404 MediaView cited source
  15. [15]

    ChatGPT users can opt out of 'ads personalization,' but that does not stop ads or tracking entirely. The setting reads: 'Allow ChatGPT to use your past chats, activity, and preferences to select ads. Ads may still be based on your current chat.'

    Reported SupportedView cited source
  16. [16]

    Zach Edwards said OpenAI's advertising products are operating 'just like most other massive companies which start to monetize their audiences' and that 'they are boiling the frog and hoping their users won't notice the privacy implications from their new ads.'

    Reported Supported Source: Zach Edwards, to 404 MediaView cited source
  17. [17]

    Zach Edwards is co-founder of DecryptAds, a company that collects online advertising data for research purposes.

    Reported SupportedView cited source
  18. [18]

    404 Media describes the ad targeting available in ChatGPT as 'somewhat standard practice across the advertising industry.'

    Reported Supported Source: 404 MediaView cited source
  19. [19]

    404 Media has previously shown that users' ChatGPT prompts may be reviewed by humans.

    Reported Supported Source: 404 MediaView cited source

Sources

2 independent publishers whose own reporting we read for this story.

  1. 404media.co

    1 article · October 15, 2026

    How ChatGPT Targets Ads To You Based On Your Prompts, Phone Number, and Email
  2. gizmodo.com

    1 article · October 16, 2026

    Here’s How ChatGPT Is Targeting You With Ads
  3. mobilesyrup.com

    1 article · October 16, 2026

    ChatGPT lets advertisers target you based on your personal data

Topics and entities

Topics

Entities