GhostlyX does not set any cookies. It does not use localStorage, IndexedDB, or any other persistent storage in the visitor’s browser. It does not fingerprint visitors using canvas, WebGL, fonts, or any other browser characteristics.
All metrics in GhostlyX are aggregated. There are no individual visitor profiles, no session identifiers tied to a person, and no way to reconstruct a specific visitor’s journey through your site.
Because GhostlyX does not process personal data as defined by the GDPR, it does not trigger the requirement for a lawful basis or consent under Article 6. You do not need a cookie consent banner or opt-in mechanism for the GhostlyX tracking script.Data is stored in EU data centres and is not transferred outside the EEA.
GhostlyX does not sell or share personal data. Because no personal data is collected, GhostlyX does not create obligations under the CCPA for the data it collects on your behalf.
Aggregated analytics data is retained for as long as your account is active. You can reset or delete all data for a site at any time from Site Settings > Danger zone.
GhostlyX does not send your analytics data to any third-party analytics or advertising provider. AI features are powered by GhostlyX’s internal infrastructure; raw analytics data is not sent to third-party AI providers.