Last updated September 2026. ghosted is built to collect as little as possible — no phone number, no email required.
Account data: username, password (hashed with a per-account salt, never stored in plain text), display name, bio, avatar, and whatever you put in your profile. Messages and media you send. A coarse, non-identifying device label (e.g. "Chrome on Windows") is kept per login session so you can see and revoke your own active sessions in Settings. If you choose to link an email for account recovery, we store that too.
We don't require a phone number or email to sign up. We don't record IP addresses, precise location, or raw browser user-agent strings — for signups, logins, messages, or anything else — and we don't run third-party trackers or ad-tech scripts. We don't sell your data to anyone. Because we don't have this data in the first place, there's nothing to hand over in the event of a legal request for it; for the narrow account data we do hold (listed in section 1), we comply with valid legal process the way any service is required to.
Crypto payments (donations, Ghosts, market, premium) are sent to wallet addresses we control directly — there's no third-party payment processor involved, so no card details or bank information ever touch ghosted. We do see the on-chain transaction (amount, sender address, tx hash) as part of verifying your payment, which is public on the relevant blockchain regardless of what we do.
Preferences like your theme, wallpaper, and notification setting are stored in your browser's local storage, not on our servers.
Account and message data is kept until you delete your account or the relevant conversation, or until an autodelete setting you've configured removes it. Deleting your account removes your profile and personal data from active use; a minimal moderation record (e.g. that an account was banned, and why) may be retained where needed to enforce these policies.
Staff with the relevant permission level can see reports, support threads, and payment history. Ordinary staff without those permissions cannot see your private messages. No staff role has access to IP addresses or device fingerprints — we don't collect them, so there's nothing to see.
You can edit or delete most profile data from Settings, review and revoke active sessions, and delete your account entirely at any time. If you used a recovery seed phrase, keep it safe — it's the only way we can help you get back in.
We may update this policy as the product changes. Material changes will be announced in the changelog.
Questions about this policy can be sent through the in-app support chat.
This page is provided for transparency and is not legal advice. If you operate ghosted commercially at scale, have a lawyer review this against your jurisdiction's data-protection requirements (GDPR, CCPA, etc).