Last updated 2026-08-23

This policy covers data GhostArch holds about you, our customer. It also explains what we hold about visitors to the blogs we host, since that is data you are responsible for as the publisher.

1. What we collect about you

Data	Why we have it
Email address, and your name if you give one	To identify your account and contact you about it
A one-way hash of your password	To sign you in. We cannot read your password, only check it
Your sites: domain names, plan, resource limits, status	To run them
Subscriptions, invoices, credit ledger	To bill you and to keep the financial records we are required to keep
Support tickets and their messages	To answer you, and to have a record of what was agreed
A session cookie, and server-side session records	To keep you signed in

We do not hold any card or bank details. Invoices on this platform are settled manually, so no payment instrument is ever entered into the panel.

2. Credentials you connect yourself

Some optional features need a token from another service — a Cloudflare API token for DNS, or a GitHub token for theme sync. When you provide one it is encrypted before it is stored and it is never sent anywhere except to the service it belongs to. You can remove it at any time from the panel.

3. Visitors to the blogs we host

We produce traffic statistics for each site. This is worth reading carefully, because it is designed to answer "how many people read this" without building a profile of who they are.

We count requests, page views, top pages and referrers per site, aggregated by hour.
A visitor is identified by a salted hash that includes the current date, so the same person browsing on two different days produces two unrelated identifiers. Visitors cannot be followed across days, by us or by anyone reading the data. This is a deliberate design choice, not a side effect.
Raw IP addresses appear only in the web server's access log, which rotates and is not retained long-term. They are not stored in the analytics tables.
Statistics are kept for 30 days and then aggregated away.
We set no analytics or advertising cookies on your visitors, and there are no third-party trackers in our platform. Anything Ghost itself or a theme you install does is your responsibility as the publisher.

4. Cookies we use

Cookie	Purpose	Life
`ghostpanel.sid`	Keeps you signed in. Strictly necessary.	7 days

Your light/dark preference is stored in your browser's local storage, not in a cookie, and never leaves your device. We use no advertising, profiling or cross-site cookies, which is why this site shows you no cookie consent banner — there is nothing to consent to.

5. Who else sees your data

Let's Encrypt — we request certificates for your domains. Domain names appear in public Certificate Transparency logs, which is how the certificate system works everywhere. If a subdomain name is itself sensitive, treat it as public.
Cloudflare — only if you connect DNS or enable the CDN add-on, and only for the domains you point at it.
GitHub — only if you enable theme sync, and only to read the repository you nominate.
Our infrastructure provider, who operates the physical hardware your container runs on.

We do not sell your data, and we do not share it for advertising. We disclose data to authorities only where we are legally required to, and we will tell you unless we are forbidden from doing so.

6. Where your data is

Your sites run on our hosts in the regions listed on our locations page. Your account and billing records live in the same infrastructure. Using this service means your data is processed there.

7. How long we keep things

Account and site data — while your account is open.
Site backups — as many as your plan retains. Deleting a site deletes its backups too, permanently and immediately.
Traffic statistics — 30 days.
Invoices and financial records — kept after account closure for as long as tax and accounting rules require. These we cannot delete on request.
Support tickets — kept while the account is open, so we can see the history of an issue.

8. Your rights

You can ask us to:

tell you what we hold about you;
correct anything wrong — most of it you can edit yourself in the panel;
give you a copy of your content — site backups are downloadable from the panel at any time, without asking us;
delete your account and its data, subject to the financial records above.

Depending on where you live you may also have the right to object to processing or to complain to a data protection authority.

9. Security

Passwords are hashed, tokens are encrypted at rest, and every site runs in its own container rather than sharing a filesystem with other customers. Traffic to the panel and to hosted sites is encrypted with TLS. Administrative access to the panel is restricted and the panel itself runs without root privileges.

No system is perfectly secure. If we discover a breach affecting your data, we will tell you what happened, what was affected and what we did about it.

10. Children

The service is not intended for children, and we do not knowingly collect data from them.

11. Changes

If this policy changes materially we will announce it in the panel before it takes effect, and update the date above.

12. Contact

To exercise any of the rights above, or to ask a question about this policy, sign in and open a support ticket from the Support section of the panel. We answer there rather than by email.

Privacy Policy