1. Scope and controller
This policy applies to ghostftp.com and its translated versions. It covers the public website only. Future Ghost FTP application releases may require separate or updated privacy information if they introduce accounts, cloud functions, online synchronisation or other data processing.
Where the entity identified above determines the purposes and means of processing personal data through this website, it acts as the relevant controller under applicable data-protection law.
2. Information that may be processed
The website is designed to collect as little information as reasonably possible. There are currently no contact forms, newsletter subscriptions, user accounts, advertising pixels, analytics cookies or behavioural-profiling scripts.
Technical request data
As with virtually every website, hosting and network infrastructure may receive technical information when a browser requests a page. This can include an IP address, date and time, requested URL, HTTP method, response status, referrer information when supplied by the browser, and basic user-agent or device data. Such information may appear in server, access or security logs.
External links
If you choose to open a link to third-party services, Brendigo or another external service, your visit is processed under that service’s own terms and privacy practices. Ghost FTP does not receive the contents of your external account merely because a link appears on this website.
3. Purposes and legal bases
Technical data may be processed to deliver requested pages, maintain availability, diagnose errors, prevent abuse, protect infrastructure, investigate security events and comply with legal obligations. Depending on the circumstances, the legal basis may include performance of a requested service, legitimate interests in operating and securing the website, or compliance with law.
Where legitimate interests are relied upon, those interests are limited to operating a functional, secure and abuse-resistant website, protecting users and infrastructure, and maintaining evidence needed to investigate incidents.
4. Analytics, telemetry and profiling
The current public website does not deploy analytics services, advertising trackers, cross-site profiling technologies or telemetry scripts. Ghost FTP’s product direction also emphasizes avoiding hidden usage tracking.
A privacy-first design does not mean that no technical data can ever exist. Infrastructure logs may still be generated for security and reliability as described above. If optional analytics are introduced later, this policy and the Cookie Policy will be updated and consent will be obtained where required.
5. Retention
Infrastructure logs should be kept only for as long as reasonably necessary for security, troubleshooting, operational integrity, fraud or abuse prevention, and legal requirements. Retention periods can vary depending on the hosting environment and the nature of an incident.
The public website does not maintain a user profile database, marketing database or newsletter list.
7. Your rights
Depending on your location and the law that applies, you may have rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent where processing is based on consent, and the right to complain to a competent supervisory authority.
These rights are not absolute and can be limited by exemptions, statutory retention duties, security requirements, the rights of others or the need to preserve evidence.
8. Security
The website reduces attack surface by avoiding unnecessary third-party scripts and by using restrictive browser security policies. No internet service can guarantee absolute security. Users should keep browsers and operating systems updated.
Do not submit passwords, FTP credentials, private keys or other secrets through channels that are not explicitly designed and documented for secure credential handling.
9. Children
The website is a technical product information site and is not directed specifically to children. It does not intentionally request age, school information or child-focused profile data.
10. Changes to this policy
This policy may be revised as Ghost FTP evolves. Material changes will be reflected by updating the date shown on this page and, where appropriate, providing additional notice.