Privacy Policy
Last updated: 30 October 2026. This policy explains what personal data ghst.network collects, why, and what rights you have. It follows the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The data controller is ghst.network, the operator of this website, our game servers and our Discord server. Contact: support@ghst.network.
2. What we collect and why
- Website account: username, email address and password (stored only as a secure hash, never in plain text). We need these to run your account (contract).
- Linked accounts: your game name, and your Discord user ID and name if you link Discord. We need these to deliver purchases and give you your Discord roles (contract).
- Game data: your in-game stats (level, money, VIP, admin rank, gang, kills and deaths, owned skins and vehicles), bans with their reason, and your IP address while you play. We need these to run the game, keep it fair and enforce the rules (contract and legitimate interest).
- Purchases: what you bought, for which game name, the price, the date, and the payment reference from our payment provider. We need these to deliver orders, handle refunds and keep records required by law (contract and legal obligation).
- Security data: the IP addresses of failed logins (deleted after 15 minutes) and our hosting provider's normal server logs. We keep these to protect accounts from attacks (legitimate interest).
We never see your payment details. Card and wallet details go directly to Stripe.
3. Cookies
We use one cookie, ghst. It keeps you logged in and protects our forms, and it is deleted when your session ends. It's strictly necessary, so it doesn't need your consent. We don't use advertising or tracking cookies or analytics. Our fonts are served from our own website. The skin and vehicle pictures in the store load from open.mp's image server, which sees your IP address like any website does. On the checkout page, the payment form is loaded from Stripe, which may set its own cookies to prevent fraud, as explained in its own policy.
4. Who we share data with
- Stripe (Stripe Payments Europe, Ltd., Ireland), our payment processor, which receives the payment details you enter, your email address, the order and your IP address, to process the payment and prevent fraud. See Stripe's privacy policy.
- Hostinger (EU), which hosts this website and its database, and the provider of the server that runs our game servers and Discord bot.
- Discord, but only if you link it. We receive your Discord ID and name, and our bot gives you roles.
- Authorities, if the law requires it.
We never sell your data. Some of these providers may process data outside the EU. When they do, it's protected by the safeguards the GDPR requires (such as adequacy decisions or standard contractual clauses).
5. What other players can see
Your game name, and whether you are online, are shown on the website's server status. Your rank, VIP level and in-game stats may be visible to other players in the game and on Discord. Your email address is never shown publicly.
6. How long we keep it
- Account and game data: as long as your account exists. When you ask us to delete it, we delete it within 30 days.
- Purchase records: as long as tax and accounting law requires (usually up to 10 years).
- Ban records: as long as the ban is active, so the rules can be enforced.
- Failed-login IP addresses: 15 minutes.
7. Your rights
You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, or send it to you in a portable format. You can also object to processing based on legitimate interest. Email support@ghst.network from the email address of your account, and we'll reply within one month. You can also complain to a data protection authority. In Bulgaria, this is the Commission for Personal Data Protection (cpdp.bg). You can also complain to the authority in the country where you live.
8. Children
The Service is not meant for children under 13, and we don't knowingly collect their data. If you think a child under 13 has given us data, contact us and we'll delete it.
9. Security
We use HTTPS, hashed passwords, limits on login attempts and restricted access to our servers. No system is 100% secure, so please use a password that you don't use anywhere else.
10. Changes
If we change this policy, we'll update the date at the top and announce important changes on the website or Discord.