Privacy Policy

1. Introduction

Welcome to GhostCrypt. Your privacy is critically important to us. This Privacy Policy outlines the types of information we collect, how it is used, and the steps we take to protect your personal information.

2. Data Collection and Usage

GhostCrypt is designed to be a zero-knowledge encryption utility. The core encryption and decryption processes occur entirely on your device (client-side) using the Web Crypto API.

• Passwords: Your secret passwords are NEVER transmitted to our servers, logged, or stored in any database. We have absolutely no access to your passwords.
• Encrypted Payloads: For IT security, auditing, and compliance purposes, we log the final encrypted payload (the scrambled text) along with a timestamp. Because we do not have your password, it is mathematically impossible for us to decrypt or read your messages.

3. Cookies and Tracking

We use Google AdSense to display advertisements on our site. Third party vendors, including Google, use cookies to serve ads based on a user's prior visits to your website or other websites.

Google's use of advertising cookies enables it and its partners to serve ads to your users based on their visit to your sites and/or other sites on the Internet. Users may opt out of personalized advertising by visiting Ads Settings.

If you are located in the European Economic Area (EEA), you will be presented with a Consent Management popup allowing you to manage your cookie preferences.

4. Data Retention

The encrypted payloads logged for audit purposes are retained indefinitely in our secure IT logs, but as stated, they are completely unreadable without the original password.

5. Contact Us

If you have any questions about this Privacy Policy, please contact the developer, Sithija Mudalige.