Responsible use
Use Ghost FTP only for systems, servers and data you are authorized to access or manage.
Effective 27 September 2026. This is a technically prepared production policy draft and should receive final legal review before it is relied on as jurisdiction-specific legal advice.
You may use Ghost FTP to connect to servers, hosting accounts and file systems that you own or are expressly authorized to administer. You must not use the service to bypass access controls, probe third-party systems without permission, steal credentials, distribute malware or interfere with another person’s service.
You are responsible for the files you upload, download, rename, delete or otherwise process. Do not use Ghost FTP to distribute unlawful content, infringe intellectual-property rights, facilitate fraud, abuse network resources or violate applicable export, sanctions or data-protection rules.
The web client may apply request-size limits, rate limits, temporary session controls and host-key checks to protect the service. Attempts to defeat those safeguards, automate abusive traffic, exploit the gateway as a proxy or cause excessive resource consumption are prohibited.
Do not submit credentials or private keys belonging to another person without authorization. You are responsible for selecting secure authentication methods, validating server identity and responding appropriately to changed SSH host keys or TLS certificate warnings.
Access to first-party web services may be limited or blocked when needed to contain abuse, protect infrastructure, comply with law or investigate a credible security incident. Local desktop use is governed separately by the applicable software license and system permissions.
Suspected abuse or security issues should be reported through the official Ghost FTP contact or support page. Include enough technical detail to identify the affected service without sending passwords, private keys or other unnecessary secrets.