PRIVACY POLICY

Last updated: 28 September 2026

Ghost Protocols ("we", "our", "us") operates the website and application available at ghostprotocols.tech (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

1. Information We Collect

We collect the following types of information:

• Search queries you enter in the app (e.g. "Honda Civic", "S001") — used to display matching results and improve our inventory.
• Favorites you save — stored locally on your device only (browser localStorage). We do not transmit favorites to our servers.
• Basic analytics — anonymous page visit counts and general location (country level) via Umami Analytics. No personal identifiers are tracked.
• WhatsApp number — when you click a "WhatsApp" button, the app opens WhatsApp with a pre-filled message. We do not access or store your WhatsApp number on our servers.
• Device information — browser type, OS version, and screen size for compatibility purposes. Collected anonymously via Umami.

2. How We Use Your Information

• To display car inventory search results
• To connect buyers with sellers via WhatsApp
• To improve the Service and fix bugs
• To analyze which cars are most searched

3. What We Do Not Collect

• We do not collect your name, email, or phone number through the app
• We do not collect payment information
• We do not track your location precisely
• We do not access your contacts, photos, or files

4. Third-Party Services

We use the following third-party services:

• Google Sheets API — to store and retrieve car inventory data. Data is stored in Google Cloud servers.
• Umami Analytics — privacy-focused analytics that does not use cookies or track personal data. Umami Privacy
• WhatsApp — when you tap "WhatsApp" buttons, you are redirected to WhatsApp. Your use of WhatsApp is governed by WhatsApp's Privacy Policy.
• Google Drive — car photos may be hosted on Google Drive. Access is public via shared links.

5. Data Security

We protect your data with industry-standard security measures:

• HTTPS encryption for all traffic
• TLS 1.2+ only (older protocols disabled)
• Rate limiting to prevent abuse
• Firewall and intrusion prevention (Fail2ban)

6. Data Retention

Anonymous analytics data is retained for up to 6 months. Search queries stored in our inventory system are kept indefinitely for business records. Favorites remain on your device until you clear your browser data.

7. Your Rights

You have the right to:

• Use the Service without providing any personal information
• Clear your local data at any time by clearing your browser storage
• Contact us to request information about our data practices

8. Children's Privacy

Our Service is not directed at children under 13. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

10. Contact Us