Effective Date: February 2025

GhostLink is designed with a "Zero-Knowledge" privacy architecture. This policy outlines the minimal data we process.

1. Data We Do Not Collect

• No Content Logging: We do not record video, audio, or text chats. These are transmitted directly between peers (P2P) or via ephemeral RAM-only relays.
• No Account Data: We do not require email addresses, phone numbers, or passwords. Authentication is anonymous and transient.
• No IP Storage: While IP addresses are momentarily used to establish the connection (handshake), they are not permanently logged in a historical database.

2. Ephemeral Data

The Service uses temporary "Signaling Data" (SDP offers/answers) to connect devices. This data allows User A to find User B. This data is:

• Stored only for the duration of the connection attempt.
• Automatically deleted when the room is closed or after a short expiration period.

3. Peer Visibility

Because GhostLink uses direct Peer-to-Peer (P2P) technology to maximize privacy from central servers, your IP address is visible to the people you connect with. This is a fundamental requirement of how P2P works (like a phone call, devices must know where to send the data). Only connect with people you trust.

4. Third-Party Services

We use Cloudflare Durable Objects for ephemeral signaling. We do not use third-party payment processors as the service is free. Please refer to Cloudflare's privacy policy for details on how they handle infrastructure-level data.