Privacy Policy

1. Who we are

Ghostline Studios (“we”, “us”, “our”) operates the website at ghostlinestudios.com and the Ghostline ID account system. For questions about this policy, contact us at studio@ghostlinestudios.com.

2. What data we collect

Account registration — email and password

When you create a Ghostline ID using email and password, we collect:

• Your email address
• A hashed password (we never store plain-text passwords)
• A display name and username (chosen by you during onboarding)
• An optional bio
• The date and time your account was created

Account registration — Google or Apple sign-in

Ghostline ID supports sign-in via Google and Apple as alternatives to email and password. When you use these options:

• We receive a unique identifier and, where permitted by you, your email address from Google or Apple
• We do not receive your password from these providers
• Google and Apple’s own privacy policies govern the data they collect during sign-in. See Google Privacy Policy and Apple Privacy Policy

Profile data

Your public profile displays your display name, username, and bio. Your email address is never shown publicly.

Friends and connections

When you send or accept a friend request, we store the friendship relationship between your account and the other user’s account, along with the date it was created.

Direct messages

Messages sent between friends are stored in our database. Messages are visible in the app only to the two participants in a conversation. Authorised Ghostline Studios administrators may access message records only where necessary for safety, support, legal compliance, or moderation following a report. We do not sell, share, or use message content for advertising.

Game wishlists

If you wishlist a game on your profile, we store which games you have wishlisted. This information is visible on your public profile page.

Newsletter

If you subscribe to our newsletter, we store your email address for the purpose of sending studio updates. You can unsubscribe at any time via your account settings or by contacting us.

Usage and server logs

Our hosting provider (Vercel) and authentication provider (Supabase) may collect standard server logs including IP addresses, browser type, and request timestamps. We do not currently use third-party analytics services.

3. How we use your data

We use your data to:

• Operate and secure your Ghostline ID account
• Enable you to connect with friends and send messages
• Send authentication and account-related emails (e.g. email confirmation, password reset)
• Send studio updates if you have opted in to the newsletter
• Investigate reports of misuse or violations of our Terms of Use

We do not sell your data. We do not use your data for advertising.

4. Data storage and processors

Your data is stored and processed using the following third-party services:

• Supabase — database, authentication, and real-time features. See supabase.com/privacy.
• Vercel — website hosting and serverless functions. See vercel.com/legal/privacy-policy.
• Resend — transactional email delivery (confirmation emails, password resets, welcome emails). See resend.com/legal/privacy-policy.
• Google — optional sign-in provider. See policies.google.com/privacy.
• Apple — optional sign-in provider. See apple.com/legal/privacy.

5. Cookies and local storage

We use session cookies and browser local storage to maintain your login session. See our Cookie Policy for full details.

6. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to certain uses of your data
• Withdraw consent for newsletter communications at any time

To exercise any of these rights, email studio@ghostlinestudios.com with the subject “Data request”. We will respond within 30 days.

7. Account deletion

You can request deletion of your Ghostline ID account and all associated data by contacting studio@ghostlinestudios.com. We will process deletion requests within 30 days. Note that messages exchanged with other users may remain visible to the other participant until their account is also deleted or their messages are removed.

8. Moderation and safety

Ghostline Studios reserves the right to review account activity, message records, and user reports where necessary to enforce our Terms of Use, respond to safety concerns, or comply with legal obligations. Reports can be submitted in-app using the report tool in the messaging interface, or by emailing studio@ghostlinestudios.com.

9. Children

Ghostline ID is not intended for children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has registered without parental consent, please contact us immediately.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page will reflect any changes. Continued use of the site after changes are posted constitutes acceptance of the updated policy.

11. Contact

For any questions about this Privacy Policy, email studio@ghostlinestudios.com.