Skip to content

Privacy Policy

We collect as little as possible, and you stay in control.

Last updated 2026-10-17

What we collect

  • Account data: your username, email address, and a securely hashed password (we never store passwords in plain text).
  • Profile data: the display name, bio, links, widgets and appearance settings you choose to publish.
  • Content: files you upload to your media library, pastes you create, and templates you save.
  • Analytics: aggregated, privacy-respecting view and click data (see below).
  • Technical data: IP address and user agent for security, rate limiting and audit purposes.

Analytics are privacy-first

Profile analytics are derived from real events but stored in aggregate. Visitor identifiers are hashed, and bot traffic is filtered out. We do not sell analytics data or use it to build advertising profiles.

How we use your data

To operate your account and profile, provide the features you request, keep the platform secure, enforce our terms, and process payments for the optional premium features.

Cookies

We use a single httpOnly session cookie to keep you signed in. We do not use third-party advertising cookies.

Your controls

You can export your data and delete your account at any time from your dashboard. Deleting your account removes your profile, media, pastes and personal data, subject to legal retention requirements.

Security

Passwords are hashed with scrypt. Sessions are stored as hashes. We enforce rate limiting, validate uploads, and audit privileged actions.

Contact

For privacy questions, visit the support page.

Privacy Policy · ghost.co