Cookie Policy

How we use cookies and similar technologies on GhostBro

Last updated: September 11, 2026

What Are Cookies

Cookie Definition

Cookies are small text files that are stored on your device when you visit our website or use our application. They help us provide you with a better experience by remembering your preferences and improving functionality.

Similar Technologies

In addition to cookies, we may use similar technologies such as local storage, session storage, and other tracking technologies to enhance your experience with GhostBro.

Your Control

You have control over cookies and can manage your preferences through your browser settings or our cookie preference center. However, disabling certain cookies may affect functionality.

Types of Cookies We Use

Strictly Necessary Cookies

These cookies are necessary for the website to function and cannot be disabled.

  • Session & authentication: The Rails session cookie (_gb_api_session) keeps you signed in and enables secure use of the website
  • Security: Protect against fraudulent activity, including Cross-Site Request Forgery protection
  • Consent preference: ghostbro_cookie_consent remembers your cookie choices
  • Technical: Enable core features and secure data transmission

Retention: Until the session ends or you log out (the consent preference cookie lasts ~6 months)

Use: Only where necessary to provide the service you request, maintain security, or remember your privacy choice

Analytics (Website Only, Consent-Based)

Google Analytics and PostHog are used on our website only to understand website usage and improve our service. Google Analytics cookies, the PostHog browser SDK, and PostHog server-side analytics are disabled by default and only become active when you enable the Analytics category.

  • Usage analytics: Limited website usage information from the browser SDK and server requests, such as page views, sessions, request paths, and performance signals
  • Performance: Monitor load times and technical performance
  • Optimization: Identify areas for improvement

Retention: Set by the relevant provider when enabled; verify the current periods in your Google Analytics and PostHog project settings

Legal Basis: Your consent — browser analytics and server-side PostHog analytics are not active unless you enable them

Important: Analytics is only used on our website. The downloaded GhostBro desktop application does not collect any usage data or analytics.

No Marketing Cookies

We do not use marketing cookies or tracking for advertising purposes. We do not track your usage patterns for marketing campaigns or share your data with advertising networks.

Our commitment to privacy means we maintain a minimal data collection policy.

Third-Party Cookies

Google Analytics and PostHog (Website Only)

We use Google Analytics and PostHog on our website to understand website usage and improve our service. Both operate under their respective data processing terms and are active only after you enable the Analytics category. Before consent, the Google Analytics script does not load, no analytics cookies are set, the PostHog browser SDK is not loaded, and PostHog events are dropped server-side.

Google Analytics (GA4)

Provider: Google Ireland Limited (website only)

Purpose: Website usage analytics and performance monitoring

Category: First-party (when cookieless/default) and third-party analytics cookies once enabled

Typical cookies (set only after consent): _ga, _ga_* (client + measurement id), _gid, _gat

Retention: Set by Google; the default GA4 retention period applies (verify against your Google Analytics property settings before relying on a specific value)

Withdraw consent: Use the Cookie Preferences link in the footer

PostHog

Provider: PostHog (host configured in the GhostBro deployment)

Purpose: Consent-based website usage and performance analytics

Data processed: Limited browser usage data and request metadata such as URL, method, path, user agent, and IP-derived request context

Browser SDK: Loaded only after analytics consent; autocapture and session recording are disabled

Browser storage: PostHog may store consented analytics persistence after opt-in; it is disabled and cleared by the SDK when consent is withdrawn

Retention: Subject to the configured PostHog project retention settings

Withdraw consent: Use the Cookie Preferences link in the footer; browser capture opts out and future server-side events are dropped

Important: Google Analytics and PostHog are only used on our website. The downloaded GhostBro desktop application does not use any third-party analytics or tracking technologies.

No Marketing Cookies

Beyond consent-based Google Analytics and PostHog browser/server analytics, we do not use marketing cookies or advertising tracking technologies.

We do not embed advertising networks, social media tracking, or other external tracking mechanisms that would set cookies on your device.

Optional analytics is not active before consent, and no external provider receives analytics data from a request without a valid analytics grant.

How Consent Is Stored & Global Privacy Control

Your Consent Preference

Your choice is stored in a single first-party cookie named ghostbro_cookie_consent. It is a strictly necessary cookie (it remembers your consent decision) and contains only your preference, the version, a timestamp, and the source of the choice — no personal data. It is not used for tracking and is readable by the website so it can apply your choice on every page.

  • Name: ghostbro_cookie_consent
  • Purpose: Remember your cookie consent preference
  • Category: Strictly necessary
  • Type: First-party, persistent
  • Retention: Approximately six months; re-granted whenever you change your choice

Global Privacy Control (GPC)

If your browser sends a Global Privacy Control signal, GhostBro keeps marketing and data-sharing technologies disabled. GhostBro does not sell or share personal information for advertising or cross-context behavioral advertising, and does not use marketing or advertising cookies, so no separate "Do Not Sell or Share" opt-out is offered.

Enabling or disabling analytics remains your choice; GPC does not by itself reject analytics, because Google Analytics and PostHog on this website are used for measuring website usage rather than sale, sharing, or targeted advertising.

Cookie Management

Browser Controls

Most web browsers allow you to control cookies through their settings. You can:

  • View and delete existing cookies
  • Block all cookies or specific types
  • Set preferences for cookie acceptance
  • Receive notifications when cookies are set

Browser-Specific Instructions:

Chrome Settings Firefox Settings Safari Settings Edge Settings

Your Cookie Preferences

You can manage your cookie preferences below, or reopen the full preferences dialog from the Cookie Preferences link in the website footer. Essential cookies cannot be disabled as they are required for the service to function properly.

Strictly Necessary Cookies

Always Active

Required for authentication, security, and basic functionality, and to remember your cookie preferences. Cannot be disabled.

Analytics (Google Analytics and PostHog)

Help us improve our website through consent-based usage insights from Google Analytics and PostHog. Their browser and server-side analytics are disabled until you enable this category and are not used in the downloaded GhostBro application.

Data Protection & Rights

GDPR Compliance

Our cookie practices comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

  • Necessity: Strictly necessary cookies are limited to operating the service, maintaining security, and remembering your privacy choice; optional analytics technologies activate only with your consent
  • Consent First: No analytics script, analytics cookie, PostHog browser capture, or PostHog server-side event is active before you grant consent
  • Data Minimization: We only collect data for the stated purposes
  • Transparency: Clear information about cookie usage and purposes

Your Rights

Under data protection laws, you have rights regarding cookies and the data they collect:

  • Right to Withdraw Consent: You can withdraw your analytics consent at any time from the Cookie Preferences link in the footer; future analytics tracking stops, PostHog events are dropped, and known Google Analytics cookies are removed where technically possible
  • Right of Access: Request information about cookies and data collected
  • Right to Object: Object to processing based on legitimate interests
  • Right to Erasure: Request deletion of data collected through cookies

Updates & Changes

Policy Updates

We may update this Cookie Policy from time to time to reflect changes in our practices, technology, or legal requirements.

  • We will notify you of significant changes via email or service notifications
  • The "Last updated" date at the top reflects the most recent version
  • Continued use of the service constitutes acceptance of updated policies
  • You can review previous versions upon request

Contact & Support

Cookie Questions

If you have questions about our cookie practices or need help managing your preferences, we're here to help:

Privacy Team: [email protected]

Technical Support: [email protected]

Data Protection Officer: [email protected]

Response Time: Within 48 hours for cookie-related inquiries

Contact Privacy Team View GDPR Rights