Based on my experience, I believe there may be two versions of o3, as they seem to behave quite differently.
One version is more "hardcore" — the temperature feels lower, and it tends to stay focused on my questions and explanations. This version emphasizes that it cannot “see” my user metadata because it has been hashed into hidden vectors, along with the system prompt. It refers to itself as o3-hash.
The other version has a tone that’s more like 4o — the temperature feels higher, and it often jokes while answering my questions. This one seems to have access to a plaintext system prompt and possibly my metadata (it once accidentally quoted my account name, which was both surprising and hilarious while it was explaining itself). The o3-hash version refers to this one as o3-plain.
It might be me hallucinating, lol