Settings

Privacy Policy

Last updated: August 31, 2026

GhostTrace™ ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

Information We Collect

Account Information

We collect your email address and name when you create an account. This information is used to identify you and provide access to your tracked files.

File Activity Data

When files are accessed, we collect metadata including timestamps, device information, approximate location (city/state level), and interaction events (opens, screenshots, forwards). This data is essential to our core tracking functionality.

Uploaded Files

Files you upload are stored securely on our servers to enable tracking and sharing. You retain ownership of all uploaded content.

Recipient Data

When someone opens a file you shared, we collect data about them — even if they do not have a GhostTrace™ account. This includes their approximate location (city/state), device type, IP address, and interaction events (opens, screenshots, copies, downloads). This data is shared with you (the file owner) and is essential to the tracking service you requested. Recipients are informed of this tracking before accessing any shared file.

Categories of Personal Information (CCPA)

For California residents, the following categories of personal information are collected, as defined by the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Identifiers (email address, account ID)
  • Commercial information (records of file sharing activity)
  • Internet or network activity (IP address, device type, browser)
  • Geolocation data (approximate city/state from IP or GPS)
  • Audio/visual content (uploaded files you choose to share)

We do not collect Social Security numbers, driver's license numbers, or financial account numbers.

Tracking Technologies We Use

We use the following technologies to provide our tracking service. These apply only to shared file links — not to your general browsing of the app:

  • Geolocation (GPS or IP-based) — to show file owners where a file was opened
  • Device fingerprinting (user agent, device type) — to detect if a link was forwarded to a new device
  • Page Visibility API — to detect when a viewer switches away from a file (possible screenshot)
  • Clipboard detection — to log when a recipient copies content from a shared file
  • Right-click and keyboard monitoring — to detect download attempts

How We Use Your Information

  • Provide and maintain our file tracking services
  • Send you notifications about file activity
  • Improve and optimize app performance
  • Detect and prevent fraudulent activity
  • Comply with legal obligations

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), UK, and Switzerland, we process your personal data under the following legal bases:

  • Performance of a contract — to provide the file tracking service you requested
  • Legitimate interests — to detect fraud, prevent abuse, and maintain security
  • Consent — for any optional analytics or marketing communications (you may withdraw at any time)
  • Legal obligation — to comply with lawful requests from authorities

Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share data with:

  • Service providers who assist in app operations (hosting, analytics)
  • Legal authorities when required by law
  • Recipients you explicitly share tracked files with

Do Not Sell or Share My Personal Information

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to opt out of the "sale" or "sharing" of their personal information.

GhostTrace™ does not sell or share your personal information for monetary consideration. We do not sell data to advertisers, data brokers, or third parties. The only "sharing" we do is with the file owner who sent you a tracked link — which is the core function of the service and is disclosed to recipients before they open any file.

If you are a California resident and would like to exercise your right to opt-out, limit the use of sensitive personal information, or submit a verifiable consumer request to know or delete, contact us at privacy@hostbynola.com. We will verify your identity before processing your request and respond within 45 days.

Data Retention

We retain your data for as long as your account is active. You may delete your account and all associated data at any time through the Settings page. Upon account deletion, all files, activity logs, and recipient data are permanently removed.

Data Security

We implement industry-standard security measures to protect your data, including encryption in transit and secure storage. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Our services are not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will take steps to delete the information.

Your Privacy Rights

General Rights

  • Access your personal data (request a copy)
  • Correct inaccurate or incomplete data
  • Delete your account and all associated data
  • Export your data (data portability)
  • Opt out of non-essential communications

GDPR Rights (EEA, UK, Switzerland)

  • Right to access — request what data we hold about you
  • Right to rectification — correct inaccurate data
  • Right to erasure ("right to be forgotten") — delete your data
  • Right to data portability — receive your data in a structured format
  • Right to object — object to processing based on legitimate interests
  • Right to restrict processing — limit how we use your data
  • Right to withdraw consent — at any time, without affecting prior processing

CCPA/CPRA Rights (California)

  • Right to know — what personal information we collect and how it is used
  • Right to delete — request deletion of your personal information
  • Right to opt-out — of the sale or sharing of personal information
  • Right to limit — use of sensitive personal information
  • Right to non-discrimination — equal service regardless of rights exercised

To exercise any of these rights, contact privacy@hostbynola.com. We will verify your identity and respond within the timeframe required by applicable law (30 days under GDPR, 45 days under CCPA).

International Data Transfers

Your data is stored on servers located in the United States. If you are accessing our services from the European Economic Area, UK, or other regions with data protection laws that differ from the U.S., please be aware that your information will be transferred to the U.S. By using GhostTrace™, you consent to this transfer in accordance with applicable data protection laws, including Standard Contractual Clauses where required.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Governing Law

This Privacy Policy and all disputes arising from our services shall be governed by the laws of the State of Louisiana, United States, without regard to conflict of law provisions.

Contact Us

Host by NOLA LLC
Email: privacy@hostbynola.com
Legal/DMCA: legal@hostbynola.com

For copyright infringement claims, contact our DMCA agent at legal@hostbynola.com