Essential cookies
The website may set first-party security cookies such as a CSRF token used to protect forms and API requests. These cookies are functional and are not used for behavioural advertising or cross-site tracking.
Browser storage
Ghost FTP uses limited first-party browser storage for security and convenience, not advertising profiles.
Effective 27 September 2026. This is a technically prepared production policy draft and should receive final legal review before it is relied on as jurisdiction-specific legal advice.
The website may set first-party security cookies such as a CSRF token used to protect forms and API requests. These cookies are functional and are not used for behavioural advertising or cross-site tracking.
The selected interface language may be stored in browser local storage so the site can remember your preference on later visits. This value is limited to a language identifier.
The web FTP interface may store non-secret server details such as protocol, host, port, username and remote path for convenience. Passwords are intentionally excluded from remembered-server local storage and must be supplied again when required.
Short-lived server-side session and verification data may be used for active download verification or web FTP processing. These mechanisms are described in the Privacy Policy and are separate from advertising cookies.
Public pages are designed to be self-hosted and do not require Google Fonts, advertising networks or analytics trackers. If the deployment is later changed to add third-party services, this policy should be updated before those services are enabled.
You can clear site cookies and local storage through your browser settings. Doing so may reset language preferences, remembered non-secret server entries and active verification state, but it does not affect files already downloaded to your device.