Privacy Policy

2. Information stored locally on your device

Desktop app

The desktop application is designed as a local-first client. Site profiles, local preferences, interface state, transfer history, queue state, connection logs and other operational preferences are stored on your device, not in Brendigo-hosted cloud storage.

Where the operating system allows it, saved secrets are protected using local platform facilities or encrypted local storage. Private keys remain at the file location you choose. Session-only credentials may remain in memory only until the session ends.

Browser-based web app

The browser interface may store non-sensitive local preferences such as interface language and saved server labels in browser storage. Passwords entered into the web interface are not intended to be permanently written into local browser storage by Ghost FTP.

3. Information we receive directly from you

• Support and contact details: your name, e-mail address, message content and any files or screenshots you voluntarily submit.
• Download verification data: the e-mail address you enter for the current release request, used to send a time-limited verification link.
• User-supplied diagnostics: app version, operating system, screenshots, logs or error descriptions you decide to share with support.

Please do not include passwords, private keys, confidential production data or unrelated personal information in support requests.

4. Information processed automatically

Like most hosted services, the Ghost FTP website and APIs may process standard technical server records, including IP address, requested URL, date and time, response code, user agent, referrer and similar request metadata. We use this information to deliver the service, keep it secure, diagnose faults, rate-limit abuse and preserve service continuity.

The website does not use third-party advertising networks or behavioural remarketing. Local browser storage may be used for language preference and interface state only.

5. Web FTP / web SFTP processing model

Modern browsers do not provide direct FTP or SSH socket access in the same way desktop clients do. For that reason, the /ftp web client sends the connection request through the Ghost FTP server runtime so it can reach the remote FTP, FTPS or SFTP server on your behalf.

In that flow, connection credentials, directory listings and file bytes are processed transiently in server memory for the purpose of carrying out the action you requested. The service is designed so that web-session credentials and transferred file contents are not intentionally stored as part of permanent Ghost FTP user records.

Operational logs or host-key trust records may be retained where necessary for security, anti-abuse, host verification or short-lived request handling.

6. What we do not intentionally collect or use

• We do not sell or rent personal information.
• We do not build advertising or cross-site behavioural profiles.
• We do not silently collect analytics inside the desktop app.
• We do not use your transfer contents to train machine-learning models.
• We do not intentionally keep cleartext web FTP passwords as a long-term user history record.

7. Purposes and legal bases

We process information to provide downloads, operate the website and browser-based client, answer support requests, secure the service, investigate incidents, prevent abuse and improve product reliability.

Depending on the context, our legal bases may include performing a service you asked for, complying with legal obligations, protecting vital security interests, and pursuing legitimate interests in operating a secure software distribution and support service.

8. Download verification and repeated downloads

When you request a release through the website, Ghost FTP may send a one-time verification link to the e-mail address you entered. That address is used for the current request only.

Ghost FTP is configured so that the same e-mail address can be used again for future downloads. The e-mail address is not meant to function as a permanent unique download lock. Short-lived request or verification tokens may still be retained for operational security, expiry checks and abuse prevention.

9. Retention periods

We keep information only for as long as it is reasonably needed for the purpose for which it was collected, including support handling, abuse prevention, operational continuity, legal compliance and dispute resolution.

Short-lived verification tokens and temporary request records are intended to expire automatically. Contact messages and support correspondence may be kept for longer where needed to answer you, follow up on bugs or maintain a service record.

10. Sharing and service providers

We may rely on hosting, e-mail transport and infrastructure providers to deliver the Ghost FTP website and support flows. Those providers may process the limited information necessary to perform their function.

We do not share personal data with third parties for unrelated marketing use. We may disclose information when required by law, to respond to lawful requests, or to protect the rights, property and security of Brendigo, users or the public.

11. International transfers

Your information may be processed in the country where our hosting or support infrastructure operates. When information is transferred across borders, we aim to use reasonable safeguards appropriate to the nature of the service and the data involved.

12. Security

We use administrative, technical and organizational measures intended to reduce unauthorized access, misuse, alteration and disclosure. These measures include access control, release integrity checks, transport security where supported, rate limiting and security review of distribution files.

No internet-connected system can be guaranteed to be perfectly secure. You remain responsible for protecting your own devices, backups, credentials and server access permissions.

13. Your rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability or withdrawal of consent where consent is the legal basis. You may also have the right to complain to a supervisory authority.

If you contact us about a rights request, we may need enough information to verify the request and understand the data involved.