Privacy Policy

Overview

Ghoststack respects your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

Data We Collect

We collect information you provide directly:

• Account data: Email address when you sign up
• Payment data: Processed securely by Stripe (we don't store card details)
• Usage data: How you interact with our website and documentation

Third-Party Services

We use the following services to operate Ghoststack:

• Supabase: Authentication and database
• Stripe: Payment processing
• Resend: Transactional emails and the opt-in email playbook
• Cloudflare Turnstile: Automated abuse prevention for playbook signup
• Plausible: Privacy-friendly analytics (no cookies)
• Render: Application hosting
• Rewardful: Affiliate referral tracking when you allow marketing cookies
• Google Ads: Advertising purchase measurement when configured and you allow marketing cookies

Each service has its own privacy policy:

• Supabase Privacy Policy
• Stripe Privacy Policy
• Cloudflare Privacy Policy
• Resend Privacy Policy
• Plausible Privacy Policy
• Render Privacy Policy
• Google Privacy Policy
• Rewardful Privacy Policy

How We Use Your Data

• Deliver the product and process payments
• Send transactional emails (purchase confirmations, updates)
• Improve our product and documentation
• Respond to support requests

Cookies

We use Plausible for analytics without analytics cookies. Login and checkout use storage needed to provide those features. Google Ads and Rewardful load only after you allow marketing cookies. Purchase measurement includes an order identifier, currency, and amount; we do not include your email in the conversion event. Your choice is saved in your browser. Use Cookie settings in the footer to change it. Declining stops future marketing tracking; you can also clear previously stored cookies in your browser settings.

Data Sales

We do not sell, rent, or trade your personal data to third parties. Your data is only shared with service providers as necessary to operate Ghoststack.

Your Rights

You can request access to, correction of, or deletion of your personal data at any time. Contact us to exercise these rights.

Data Security

We use access controls and server-side verification to help protect your data. Each service provider is responsible for its own security measures and data processing practices.

Changes

We may update this policy occasionally. Check back periodically for updates.