Safety & Privacy.

Public by design

• Profiles marked Findable are publicly visible by broad city.
• Room messages are publicly readable without an account.
• Room messages keep the username shown when posted and automatically expire after 30 days, even if the profile is deleted sooner.
• Do not post anything you would not want a stranger to read or copy.

Location boundary

Profile creation uses a browser GPS fix to identify a broad city or metro area. Exact coordinates are sent only for the immediate city-name lookup and are not stored by PsiGrid. Profiles show no map, distance, exact coordinates, live location, or last-seen status.

The GPS-to-city lookup is isolated behind PsiGrid’s location boundary and currently uses OpenStreetMap’s Nominatim service because ChatGPT Sites does not provide native reverse geocoding. If that lookup is unavailable, public browsing and self-training still work, but new profile creation must wait.

Website analytics

PsiGrid uses first-party, Sites-hosted analytics to understand which public pages are useful and whether the website is working well. Basic analytics can record a normalized page route, time, referring domain, campaign label, approximate IP-derived city, region, or country, device and browser class, and rounded performance measurements. The IP address may be processed transiently to derive these fields and a rotating keyed digest used for abuse controls, but raw IP is not stored in ordinary analytics. It does not record URL query strings, form text, room messages, search terms, training answers, exact GPS, or account identity.

This basic aggregate analytics runs automatically on public pages. It does not create persistent visitor or session identifiers, connect activity to a ChatGPT account, or use analytics cookies. Basic daily aggregates may be kept for 13 months.

PsiGrid previously offered optional enhanced analytics. The site no longer uses that mode, and it removes any legacy PsiGrid analytics preference, visitor, or session identifiers left in a browser.

Security access records and encrypted archive

Requests that reach PsiGrid may create a restricted security record containing the request time and route, approximate IP-derived city, region or country, network and bot classification, and encrypted IP address and user-agent value. These records support abuse detection, traffic integrity, and incident review; they are separate from ordinary analytics, visible only to the explicitly authorized site owner and audited when revealed. The active security lane becomes inaccessible after seven days and is physically deleted by request-driven maintenance at the next maintenance run. Capture is rate-limited by a keyed network-and-risk window to prevent a single source from creating unbounded records. Exact coordinates and full referring URLs are not stored.

To preserve incident history, a separate archive may retain the same IP and user-agent values indefinitely in a hybrid-encrypted payload. The Site receives only the archive public key; the private key is held outside the Site in the owner-controlled vault. Archive exports contain ciphertext, not plaintext IP addresses or user agents, and archive access is owner-only and audited.

IP-derived location is only an estimate and may reflect a VPN, mobile carrier, shared connection, or network exit point rather than a person’s physical location. PsiGrid does not sell, share for advertising, or use these records to identify public visitors.

Room rules

Participation is limited to adults who certify they are 18 or older. Communicate civilly. PsiGrid blocks web links, phone numbers, email addresses, street or home addresses, private locations, obvious threats, sexual solicitation, and spam-like messages.

In Meetups, share only a public venue name, city, date, and time. Do not assume another user has been identity-checked merely because a broad city was GPS-verified.

Threat response

A first blocked threat receives one warning. A second blocked threat permanently disables that account’s PsiGrid profile and posting access. A private security record is retained for 30 days.

Credible threats of violence may result in account suspension, preservation of relevant records, and referral to appropriate authorities when required or reasonably necessary for safety.

Training disclaimer

Self-training is educational and exploratory. It is not medical, mental-health, legal, safety, or emergency advice. Stop any exercise that feels unsafe, uncomfortable, pressured, or disorienting.