Privacy

Nothing you paste, type or drop onto this site is transmitted anywhere. The cleaning engine, the document reader and the prose report are JavaScript running on your device, and this site is a set of static files with no upload endpoint and no server-side processing of any kind. You can put your browser into aeroplane mode and every tool here still works. Your text is not stored between page loads either: reload the page and it is gone. Settings are remembered, text never is. Rewrite in my voice in the Mac app works the same way. It runs a local model on your Mac, through Ollama on 127.0.0.1, and the messages you import, the profile built from them, your drafts and the rewrites are stored only on that Mac, in the app's support folder. Forget my voice in Settings deletes all of it, and none of it is sent to us or to anyone else.

If you accept the banner, and only then, we count page views and a small number of product events through PostHog, hosted in the EU and proxied through this domain so that no request goes to a third-party host from your browser. The events are: a text was cleaned, a text was revealed, a document was cleaned, a prose report was run, a result was copied. Each carries counts and which options were on. None of them carries any part of your text, any finding, any filename or any file content. The payloads are validated against a fixed schema before they are sent, and a field that is not in the schema is rejected rather than forwarded. Session recording, autocapture and heat maps are switched off in code. If your browser sends a Do Not Track signal, nothing is loaded at all, whatever the banner says.

Simply arriving here stores nothing: each item below is written at the moment you make the choice it records, and only the analytics ones wait for the banner. Your theme preference (light, dark or system) is kept in local storage so the page does not flash the wrong colours on the next visit. The tool's thirteen cleaning options are kept there too, so it opens the way you left it: thirteen settings and nothing else, never transmitted, tied to no identifier, and cleared with the rest of this site's data. They are a setting rather than tracking, so they are kept whichever way you answer the banner; the options an analytics event lists come from the clean you ran, not from this store. Your answer to the consent banner is kept in local storage so you are not asked twice. If you accept analytics, PostHog stores an anonymous identifier in local storage and a cookie; rejecting or later withdrawing consent stops it being created or used. There is no advertising, no advertising cookie and no cross-site tracker on this site.

The site is served from our own server. Like every web server, it writes an access log of the requests it answers: the requesting IP address, the time, the URL, the response status and the browser's user-agent string. That log is what makes it possible to notice an outage or an attack. It contains no text you pasted, because the text is never sent. Logs are kept only as long as they are useful for operations and security.

There is no account, no profile and no email address on file, so for most purposes there is nothing about you to access, correct or export. You can withdraw analytics consent at any time by rejecting the banner or clearing this site's local storage; that stops collection immediately. If you believe we hold personal data about you and want it removed, write to privacy@ghostchars.com and it will be dealt with.

If this policy changes in a way that matters, say a new processor or a new category of data, the date at the top changes with it.

Questions about this policy, or about anything on this site, go to privacy@ghostchars.com. They are read by the person who wrote it.