Does ChatGPT watermark its text?
The invisible characters in AI output are real, and you can see them yourself. Calling them a watermark is probably wrong: real text watermarking lives in word choice, not in characters. Either way the practical effect on you is the same, because your paste contains characters you did not choose.
In the spring of 2025, people examining output from newer models noticed something odd: the text was sprinkled with characters that looked like spaces but were not. The most common was U+202F, the narrow no-break space. The discovery set off a wave of "ChatGPT is watermarking your essays" posts, and an ecosystem of watermark-remover web tools appeared almost overnight.
So, does ChatGPT watermark its text? The honest answer has three parts.
The characters are real
This part is not in dispute. Model output has repeatedly been observed carrying invisible or near-invisible Unicode: narrow no-break spaces where a keyboard space belongs, non-breaking spaces, occasionally other format characters. Paste that text into an editor with invisibles rendering, or use any of these methods, and you can see them yourself. They survive copy and paste, they survive most plain-text paste commands, and they end up in documents, CMSs and codebases.
"Watermark" is probably the wrong word
A deliberate text watermark, in the research sense, does not need unusual characters at all. Statistical watermarking, the approach behind Google's SynthID Text and OpenAI's own published research, biases which ordinary words the model picks. The signature lives in word choice itself, where a detector with the right key can test for it. Nothing about it is visible or invisible at the character level.
Character-level oddities, by contrast, look like what forensics people concluded they were: training artifacts. The models learned from professionally typeset text, from academic publishing and multilingual typography, where narrow no-break spaces are correct punctuation. French puts one before every colon and question mark. The model reproduces the typography of its best sources. OpenAI said as much when the story broke, and later model updates reduced the behavior.
The distinction matters less than it sounds like it should. Whether the characters are a fingerprint or an accident, the effect on you is identical: your paste contains characters you did not choose, that most people cannot see, that mark the text as machine-touched, and that break search, validation and code in the usual ways.
What this means if you use AI tools
If you paste AI-assisted text into anything that matters, assume the invisible layer exists.
- Typography tells travel too. Beyond invisibles, model output leans on curly quotes, real ellipsis characters and the infamous em dash. Those are visible tells that read as "pasted from a bot" to a growing number of people.
- The fix is not a website. Pasting your draft into a random watermark-remover page means handing your text to a stranger to solve a privacy problem. Read the room.
- Clean at the clipboard. A local, automatic cleaner catches every copy without a manual step and without uploading anything.
One thing we will not tell you: that removing these characters makes AI text undetectable. It does not, and we wrote a whole post about why. Clean text is about quality, privacy and not shipping invisible bugs, not about fooling anyone.
Text cleaning is coming next to tdy.
tdy is a Mac menu-bar app that already tidies every link you copy. Stripping the invisible layer out of AI text, with nothing uploaded, is the next upgrade. One email when it ships, nothing else.
Join the launch list