Your data protection rights under the General Data Protection Regulation
Last updated: September 11, 2026
GhostBro acts as the data controller for personal data processed through our service. Our primary database infrastructure is located in Germany, ensuring compliance with EU data protection standards.
Data Protection Officer: [email protected]
Legal Entity: Fenix Dev Solutions
Data Collected: Name and email address provided during registration
Legal Basis: Contract performance (Art. 6(1)(b) GDPR)
Storage Location: Secure database servers in Germany
Important: At this time, we do not collect any additional personal data beyond your name and email address.
Data Collected: Encrypted password for account security
Legal Basis: Contract performance and legitimate interests (Art. 6(1)(b)(f) GDPR)
Security: Passwords are encrypted using industry-standard algorithms
Data Collected: Limited website usage information through Google Analytics and PostHog on our website only, such as page views, sessions, request paths, and performance signals
Legal Basis: Your consent (Art. 6(1)(a) GDPR) — analytics is not active until you enable it, and you can withdraw consent at any time
Retention: Set by the relevant provider when enabled; verify the current periods in your Google Analytics and PostHog project settings
Important: Google Analytics and PostHog are only used on our website. The downloaded GhostBro desktop application does not collect any usage data or analytics.
We do not collect device information or browsing behavior beyond the website usage analytics described above, which is consent-based. Our data collection is limited to the information you provide during registration and (when you enable it) aggregated website usage data.
We use Google Analytics and PostHog on our website to understand website usage and improve our service. They become active only after you grant analytics consent and operate under their respective data processing terms.
Important: Google Analytics and PostHog are only used on our website. The downloaded GhostBro desktop application does not use any third-party analytics or data processing services.
Beyond the consent-based Google Analytics and PostHog analytics described above, we do not share your personal data (name and email) with any other third-party service providers for analytics processing purposes.
Your account information remains securely stored on our servers in Germany and is not transmitted to external parties.
You have the right to obtain confirmation about whether we process your personal data and access to such data, including information about processing purposes, categories, and recipients.
You can request correction of inaccurate personal data and completion of incomplete data through your account settings or by contacting our support team.
You may request deletion of your personal data when processing is no longer necessary, you withdraw consent, or data has been unlawfully processed.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
You may object to processing based on legitimate interests. For screenshot processing, you can disable the feature at any time in your settings.
For screenshot processing based on consent, you can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
We retain personal data only for as long as necessary:
In the unlikely event of a personal data breach, we will:
You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of alleged infringement.
Contact Our DPOTo exercise any of your GDPR rights or if you have questions about our data processing practices, please contact us:
Data Protection Officer: [email protected]
Subject Line: "GDPR Rights Request - [Your Request Type]"
Response Time: Within 30 days (extendable to 60 days for complex requests)
Verification: We may request identity verification for security purposes
If you have any questions about our GDPR compliance or data processing practices, please contact us.
Data Protection Officer: [email protected]
Legal Team: [email protected]
General Support: [email protected]