A study of 2,050 real ChatGPT memories found the chatbot decides for itself what to keep about you. Half of what it keeps is psychological, and the viral thread about it got most of the details wrong.

If you spent any time on X this week, you probably saw the thread. ChatGPT, it said, is secretly building a psychological profile of every user, clocking your hesitation and logging your stress while you ask it to fix a Python script. It closed by declaring privacy dead.

The thread cited a real paper, and the paper deserves attention. Almost none of the thread's scariest lines appear in it.

We went through the study. The researchers found that ChatGPT's memory runs almost entirely on the system's own judgment, and that much of what it chooses to keep concerns your inner life. That finding deserves a closer look than the thread gave it.

Eighty users, 2,050 memories

The paper is The Algorithmic Self-Portrait: Deconstructing Memory in ChatGPT. Its nine authors are based at the Max Planck Institutes for Software Systems and for Security and Privacy, Ruhr University Bochum, TU Delft and IIT Kharagpur, and the work was accepted at the Web Conference (WWW '26).

The team collected 2,050 memory entries from 80 people who donated their ChatGPT data. Then they sorted every entry by who created it, what it contained and whether it matched what the user had actually said.

Eighty volunteers is a small, self-selected group. People willing to hand their chat logs to researchers probably use ChatGPT more than most, and may confide in it more. The authors are careful to frame their numbers as findings "in our dataset." The thread skipped that part.

You didn't ask it to remember that

ChatGPT created 96% of the memories in the study on its own. Users explicitly told it to remember something in roughly 4% of cases.

Set that next to OpenAI's own description of the feature. Its help center says saved memories are details you have explicitly asked ChatGPT to remember, like your name or your diet. In this dataset, that covers a sliver of what was actually stored.

The scope has only grown. In April 2025, OpenAI began letting ChatGPT draw on all of a user's past conversations, switched on by default for anyone who already had memory enabled. By June, a lighter version had reached free accounts. OpenAI pitched both changes as conveniences, and both gave the model more room to decide what gets kept.

This is the number we'd put on the front page. When you ask ChatGPT to remember something, you decide what goes in the record. In this study, users made that call about one time in 25.

Half of it is about you as a person

The researchers flagged two kinds of sensitive content. About 28% of memories held personal data as Europe's GDPR defines it, which covers things like health, relationships and location. About 52% held what the authors call psychological insights: traits, motivations, goals, states of mind.

So the thread didn't make up the psychology angle. Mention a layoff while asking for cover letter help, and a note about your job search could outlive that chat. That's the kind of entry these categories describe.

The thread went off the rails on mechanism. The paper says nothing about ChatGPT measuring typing speed, hesitation, prompt frequency or an "emotional baseline." It studies the text of memory entries, which sit in a list you can open in your settings. Nothing in it points to a hidden, constantly updated model of your mood.

Mostly accurate, rarely requested

About 84% of memories traced directly to something the user said. For the most part, ChatGPT was writing down what people had told it.

That undercuts the "knows you better than you know yourself" line. That shouldn't reassure anyone. People give chatbots personal context because the answers improve. The study shows that context outlives the conversation where it was shared and becomes a standing entry the model brings into every chat after. In 96% of cases, nobody asked first.

ChatGPT does flag it. A small "Memory updated" label appears when it saves something. We'd argue a label in the corner of a chat window falls well short of consent.

Other companies are moving the same way. Google's equivalent, Personal Context, launched switched on by default, and Anthropic brought memory to paid Claude users in 2025. The study only looked at ChatGPT, so we can't say how the others compare. The industry direction is plain enough.

Regulators have run into this pattern before. Italy's data protection authority fined OpenAI €15 million in December 2024, finding it had processed personal data without an adequate legal basis and hadn't been transparent with users. The case was about training data, and the complaint applies just as well to memory.

What to actually do

You have more control than the thread suggests, if you're willing to dig through settings.

In ChatGPT, go to Settings, then Personalization, and open "Manage memories." Read the whole list. Delete anything you'd rather it didn't carry around.

You can turn off "Reference saved memories," "Reference chat history," or both. According to OpenAI, switching off chat history erases what ChatGPT picked up from past chats. For medical, legal or relationship questions, use Temporary Chat, which neither reads nor writes memory.

Watch for one trap. Deleting a conversation doesn't delete the memories it created. You have to remove both.

The researchers also built a prototype called Attribution Shield. It predicts what a prompt is likely to reveal about you, warns you before you hit send, and suggests a rewording that keeps the useful parts. It's research code for now. Still, it shows a chatbot could warn you before you overshare.

Where we land

The panic in that thread was misplaced. So is the shrug that tends to follow once people learn a viral claim was exaggerated. ChatGPT keeps a file on you, mostly on its own initiative, and about half of what's in that file concerns who you are.

Our position at The State of AI: memory should be something users approve entry by entry, or at minimum something that announces itself every time. Until AI companies treat the profile they build as yours to sign off on, assume anything you tell a chatbot can follow you into the next conversation.