Privacy Policy

Last updated: 13 August 2026

This policy explains what personal data Ghosty Setups collects when you use ghostysetups.com (the “Service”), why we collect it, and your rights over it. We’ve kept it deliberately short, because we collect very little.

The data controller is Benjamin Prior (GoatGhosty), trading as Ghosty Setups. If you have any questions, contact us at contact@ghostysetups.com.

The short version. We don’t sell your data, we don’t use advertising or tracking cookies, and we don’t build profiles on you. We hold only what’s needed to give you access to the tool and to stop access codes being shared.

1What we collect

Your access code — the code you use to unlock the tool. We store it so we can recognise valid access.
A device identifier — when you unlock the tool, a random identifier is created and saved in your browser and linked to your code. We use it only to limit each code to two devices and to detect code-sharing. It doesn’t identify your device to anyone else or track you across other sites.
Your saved preferences — your most recent selections in the tool (such as the track and session you last viewed) are stored in your own browser so the tool remembers them. These stay on your device.
Technical and log data — like any website, our hosting provider automatically records basic technical information when you visit, such as your IP address, browser type, and the time of your request. This is used to run the Service securely and reliably.
Messages you send us — if you email us, we receive your email address and whatever you include in your message.
Payment information — if we ever charge for access, payments are handled by a third-party payment provider. We do not see or store your card details; we may receive confirmation of a payment and limited details such as your name and email.

2Why we use it, and our lawful bases

To provide the tool and verify your access — to perform our agreement with you (the Terms of Service).
To enforce the two-device limit, prevent code-sharing, and keep the Service secure and working — our legitimate interest in protecting the Service.
To respond to messages you send us — our legitimate interest in answering your query.
To take payment, where the Service is paid for — to perform our agreement with you, and to meet our legal record-keeping obligations.

3Cookies and local storage

We do not use tracking, analytics, or advertising cookies. We do save a few small items in your browser’s local storage — your access code, your device identifier, and your saved preferences — purely so the tool works and remembers your session. You can clear these at any time in your browser settings. If you do, you’ll simply need to enter your access code again (and clearing the device identifier may count as a new device against your code’s two-device limit).

4Who we share it with

We do not sell your data or share it for advertising. We use a small number of trusted providers who process data on our behalf to run the Service:

Vercel — hosts the website and runs the Service.
Upstash — provides the database that stores access codes and device identifiers.
A payment provider — processes payments, if and when the Service is paid for.

We may also disclose information if we’re required to by law, or to protect our rights or the security of the Service.

5International transfers

Some of our providers may process data on servers outside the United Kingdom. Where that happens, we rely on appropriate safeguards — such as a UK adequacy decision or approved data-transfer terms — so your data stays protected to UK standards.

6How long we keep it

We keep your access code and device identifier for as long as your access is active; when a code is revoked or reset, its associated device data is removed. Technical and log data is retained by our hosting provider for a limited period for security and operational reasons. Messages you send us are kept for as long as needed to deal with your query.

7Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable form. To exercise any of these, email us at contact@ghostysetups.com and we’ll respond within the time the law allows.

If you’re unhappy with how we’ve handled your data, you can also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

8Children

The Service is not directed at children under 13, and we don’t knowingly collect their data. If you are under 18, please use the Service only with the permission of a parent or guardian.

9Changes to this policy

We may update this policy from time to time. The current version will always be posted here with its “last updated” date, and significant changes will be reflected on this page.

10Contact

For any privacy question or request, contact us at contact@ghostysetups.com.