Cookie Policy
Last updated: February 15, 2026
This Cookie Policy explains what cookies are, how GhostMyData uses them, and how you can control them. We keep things simple and transparent — just like everything else we do.
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help sites remember your preferences, keep you signed in, and understand how you use the site. Cookies are standard across the web and are used by virtually all websites.
Cookies can be "session" cookies (deleted when you close your browser) or "persistent" cookies (stay on your device for a set time or until you delete them).
Cookies We Use
We organize our cookies into three categories based on their purpose:
Strictly Necessary
These cookies are required for our site to work. They handle login sessions, security tokens, and CSRF protection. You cannot disable them.
Legal Basis: Legitimate Interest (GDPR Art. 6(1)(f)) — these cookies are essential for the service to function and do not require consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| next-auth.session-token | GhostMyData | Keeps you signed in | Session |
| __Host-next-auth.csrf-token | GhostMyData | Prevents cross-site request forgery | Session |
| next-auth.callback-url | GhostMyData | Stores redirect URL after login | Session |
Analytics
These cookies help us understand how visitors use our site so we can improve the experience. They collect anonymous usage data.
Legal Basis: Consent (GDPR Art. 6(1)(a)) — these cookies are only set after you provide consent via our cookie consent banner. You can change your preferences at any time.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes unique users for anonymous page view tracking. IP anonymization is enabled (anonymizeIp). | 2 years |
| _gid | Google Analytics | Distinguishes users for session-level analytics | 24 hours |
| ph_* | PostHog | Product analytics for feature usage tracking | 1 year |
Marketing
These cookies help us measure the effectiveness of our advertising and understand how visitors arrive at our site.
Legal Basis: Consent (GDPR Art. 6(1)(a)) — these cookies are only set after you provide consent via our cookie consent banner. You can change your preferences at any time.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _clck, _clsk | Microsoft Clarity | Session recording (mouse movements, clicks, scroll depth) and heatmaps for UX improvement. Clarity may record anonymized user interactions including page navigation and form engagement patterns. No keystrokes or personal data are captured. | 1 year |
| _fbp | Meta (Facebook) | Conversion tracking for ad campaigns. Note: Meta acts as a joint controller for data collected via this pixel. Meta's data processing is governed by Meta's own privacy policy. | 90 days |
| _gcl_au | Google Ads | Stores conversion data for Google Ads campaigns. Used to attribute ad clicks to conversions on our site. | 90 days |
How to Manage Cookies
You can control and delete cookies through your browser settings. Here's how in the most popular browsers:
- Google Chrome: Cookie settings guide
- Mozilla Firefox: Cookie settings guide
- Safari: Cookie settings guide
- Microsoft Edge: Cookie settings guide
Note: Blocking strictly necessary cookies may prevent you from logging in or using our service. Analytics and marketing cookies can be disabled without affecting core functionality.
Cookie Consent
We display a cookie consent banner to all visitors. Non-essential cookies (Analytics and Marketing categories) are not set until you provide explicit opt-in consent. You can change your cookie preferences at any time by clicking the "Cookie Settings" link in our website footer.
Strictly Necessary cookies do not require consent as they are essential for the website to function. These cookies are always active.
Do Not Track / Global Privacy Control
We honor both Do Not Track (DNT) and Global Privacy Control (GPC) signals from your browser. When we detect either signal, we disable analytics and marketing cookies for your session. The California Attorney General recognizes GPC as a valid opt-out mechanism under the CCPA.
Changes to This Policy
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated date. For significant changes, we'll notify you through our website or email.
Questions?
Have questions about our use of cookies? Contact us:
Privacy: privacy@ghostmydata.com
For more about how we handle your data, see our Privacy Policy.