Privacy Policy
How Ghostpan handles account information, client device details and website storage.
Who operates Ghostpan
Ghostpan is a private project operated in the United Kingdom. The individual operator of Ghostpan is responsible for the personal information described here.
For privacy questions and requests, contact csgosexymanlol@gmail.com. This notice covers the website, member portal, cloud configs and client authentication at clientauth.404737.xyz.
Information we use
We collect information you provide when creating an account, signing in, uploading a config or contacting the operator. The Minecraft client also reports device information when authenticating.
| Information | Purpose | UK lawful basis |
|---|---|---|
| Username, Ghostpan UUID, account role, approval status and creation date | Provide your invited account and manage access | Performance of the account service agreement |
| Salted password hash, hashed session tokens and invitation records | Authenticate accounts, protect sessions and redeem invitations | Service agreement; legitimate interests in account security |
| Config names, JSON contents, size and update time | Save and retrieve the profiles you upload | Service agreement |
| Hashed device ID; OS, architecture, CPU, GPU, RAM and client version; first/last seen and sign-in count | Review client access and investigate account misuse | Legitimate interests in securing this private service |
| Account actions and technical connection information | Operate the service, limit abuse and troubleshoot problems | Legitimate interests in security and maintenance |
| Messages and contact details you send to the operator | Respond to support and privacy requests | Legitimate interests in support; legal obligations for applicable data requests |
Passwords are stored as salted hashes. Raw hardware serials are not transmitted by the client. A hashed device ID is linked to your account and is still treated as personal information. Website signup does not request an email address; the operator receives your email if you contact them.
Network infrastructure receives connection details such as IP addresses. The account server uses temporary connection counters for abuse controls. Its account database records account actions rather than a browsing history.
Cookies and local storage
A necessary first-party cookie maintains website sign-in. A separate browser storage entry remembers your cookie choice. Optional storage remembers the website motion setting only after you allow interface preferences. Ghostpan does not add advertising or analytics trackers.
Read the Cookie Policy for the storage names and durations. Use Cookie settings to change your choice. Refusing optional storage does not prevent account use.
How long information remains
- Browser sessions: expire after 24 hours or end when revoked. The sign-in cookie is removed on website sign-out.
- Client sessions: last up to 30 days and can renew while in use. You can revoke all browser and client sessions from Account.
- Cloud configs: stay in the active database until you delete or replace them, or the operator removes the account’s data.
- Device records: the service keeps up to 20 records per account; older records may be displaced as new devices appear.
- Accounts, device history, invitations, audit records and backups: the current service does not automatically erase these after a fixed period. Retention is managed by the operator according to the need to provide access, resolve security issues and meet legal obligations.
Revoking account access does not delete account information. Deleting a profile removes it from the active config store; earlier copies can remain in operator-managed backups, and an audit record of the deletion remains. Contact the operator to request account erasure or details of backup retention.
Your privacy rights
Where applicable, you can request access and copies, correction, erasure, restricted processing and a portable copy of information you provided. You can object to processing based on legitimate interests and withdraw permission for optional website preferences at any time.
Email csgosexymanlol@gmail.com with your username or Ghostpan UUID and the request. Do not send your password or session token. The operator may ask for proportionate information to confirm that the account is yours.
Data requests are normally answered within one calendar month, subject to permitted verification and extensions. If a request cannot be fulfilled, the operator should explain why. You can raise a concern with the UK Information Commissioner’s Office. Your local data protection authority may also be available.
Where California’s CCPA applies, requests to know, correct or delete information can use the same contact. You will not be discriminated against for exercising applicable privacy rights. We do not sell or share information for behavioural advertising.
Changes and contact
The date above identifies the current version. Changes to collection or purposes will be described in an updated notice. New optional storage purposes require a new choice before use.
Questions, access requests and complaints: csgosexymanlol@gmail.com, United Kingdom.