GHOST CHAT is built for private conversations without requiring a personal chat account. This notice explains the information the service still handles and the limits of its privacy features.
Published 14 October 2026. This page supplements the privacy and safety guide. For a question or request, use the contact form on that page.
GHOST CHAT is a browser-based service for private one-to-one and group conversations. It does not require a chat account or phone number. Users create and share access links. These links can contain the cryptographic material needed to join a conversation; anyone who obtains a valid link may be able to access that identity.
Messages are encrypted in the browser before they are submitted to the service. The service can process and retain encrypted message payloads, message identifiers, delivery receipts and room activity data to make messaging possible. Encryption protects content in transit and at rest in the application workflow, but it does not stop another participant from saving or copying what they receive.
The site stores a randomly generated identifier in browser sessionStorage to count visits during a browser session. The backend hashes this identifier before keeping it with the visited page and time. Technical network data, including IP information, may be processed for fraud and rate-limit checks. Session statistics do not prove the number of distinct human visitors.
If you use the support form on the Privacy & Safety page, the service receives the name, email address and message you submit. Authorized administrators can read or delete these support messages. Do not submit passwords, encryption keys, sensitive documents or private chat invitations in that form.
The website is hosted using Vercel infrastructure and uses a Supabase backend. Hosting and network operators may process connection metadata necessary to deliver the site or provide protection against abuse. They are not the intended recipients of your chat invitation codes. Please review the providers’ own privacy notices for their practices.
An authorized group owner or chat creator can invoke the available deletion features. Deleting a chat ends the room and removes server-side room data through the application workflow. Previously saved screenshots, notifications, forwarded content, browser storage on other devices and unavoidable provider backups may remain outside the app’s control. Contact form messages can be deleted separately by the administrator.
Chats are temporary and may expire. Different records (messages, technical logs, support submissions and usage statistics) may have different retention periods. This notice does not promise a fixed retention or automatic erasure deadline that has not been independently verified. The operator should publish a detailed retention schedule before increasing data collection or adding advertising services.
At the time of this notice, the public pages do not contain Google AdSense advertising tags. If advertising, third-party analytics or personalisation cookies are introduced later, this notice and any necessary consent options must be updated before activation. The live chat itself should remain free of behavioural-advertising scripts.
You can stop using the service, clear this site’s browser storage, avoid sharing invitation codes, or request help through the contact form available under Privacy & Safety. Clearing your own browser storage is not the same as deleting a shared chat on the server.
The software uses browser-side cryptography and access checks but has not completed an independent security audit. It is not designed as an emergency service. Do not rely on privacy claims to protect information if the device, browser, recipient or invitation link has been compromised.
Protect your personal invitation like a password. Never post it publicly, and do not send it to support.
READ SAFETY GUIDE ↗