Privacy Policy

1. Controller

Johannes Spörr, trading as GhostFound / GHOST
Starenweg 3, 75245 Neulingen, Germany
Email: johnnystattoo@kangal-studio.com

2. Website hosting and delivery

This website is delivered using services provided by Cloudflare. In the course of delivering and securing the website, technical connection and request data may be processed. We use this processing to provide a secure, reliable website and to protect it against abuse. Where applicable, our legal basis is our legitimate interest in secure and reliable website operation.

3. Cloudflare Web Analytics

We use Cloudflare Web Analytics to understand website performance and general usage. Cloudflare states that Web Analytics does not use cookies or localStorage for usage measurement and does not fingerprint individual visitors for analytics display. The service uses a browser beacon to collect performance and usage metrics. Cloudflare may process data internationally under the safeguards described in its Data Processing Addendum and relevant transfer mechanisms.

4. CRM CSV scanner

In the current launch version, the contents of a CSV file selected for a pipeline scan are parsed and scored locally in the user's browser. The scanner is designed so that the selected CSV contents are not intentionally transmitted to a Ghost application server. Users should only analyze data they are authorized to use. Names, email addresses and phone numbers are not required for the initial scoring logic.

5. Purchase-interest and product analytics

The website may record privacy-minimized product events such as selecting a CSV, completing a scan or expressing interest in unlocking an audit. These events are intended to measure product usage and do not intentionally include the selected CRM file contents. If Cloudflare Zaraz event tracking is enabled, we will configure it to avoid sending customer names, email addresses, phone numbers or row-level CRM data.

6. Legal bases

Depending on the processing activity, we rely on performance of a contract or pre-contractual steps, compliance with legal obligations, and/or our legitimate interests in operating, securing and improving the service. Where consent is legally required, we will request it before the relevant processing.

7. Retention

We retain personal data only as long as necessary for the respective purpose and applicable legal obligations. The launch scanner itself is designed not to store the selected CSV contents on a Ghost application server.

8. Recipients and international transfers

Technical website data may be processed by Cloudflare and its subprocessors. Cloudflare describes safeguards including its Data Processing Addendum, Standard Contractual Clauses and participation in applicable Data Privacy Frameworks.

9. Your rights

Subject to applicable law, data subjects may have rights of access, rectification, erasure, restriction, objection and data portability, as well as a right to lodge a complaint with a competent supervisory authority.

10. Changes

We may update this Privacy Policy when the service or legal requirements change. The current version will be published on this page.

Last updated: 8 August 2026. This draft must be reviewed against the final production configuration, especially before adding Stripe, email collection, CRM integrations, advertising pixels or automated lead outreach.