Privacy Policy

Last updated: 1 January 2026

GhostCallers ("we", "us", "our") operates https://www.ghostcallers.com. This policy explains what data we collect, why we collect it, and the choices you have. We aim to follow privacy best practices regardless of where you live, and we provide additional rights to California residents under the California Consumer Privacy Act (CCPA) as amended by the CPRA.

What we collect

• Search queries. The phone numbers you search are logged in aggregate to power the "most-searched" feature. We do not store who searched what.
• Reports and comments. When you submit a report, we store the comment text, your selected category, and a hashed IP address used only for spam prevention. Names are optional and never required.
• Hashed IP addresses. We hash your IP with a rotating salt before storage. The original IP is not retained.
• Cookies. A small cookie remembers your dark/light theme preference and stores a single anti-abuse session ID. We do not use third-party tracking cookies for advertising.
• Display advertising. We use Google AdSense, which may set its own cookies. AdSense's use of cookies and your ad-personalisation choices are governed by Google's policies, which you can view at policies.google.com/technologies/ads.

How we use it

We use the data above only to operate the service: to display reports and aggregate statistics, to prevent spam and abuse, and to comply with US law. We do not sell personal information. We do not share comment-author IPs with advertisers.

How long we keep it

Approved reports and the numbers they reference are kept indefinitely as part of the public record. Hashed IPs are kept for 180 days for abuse-prevention purposes and then deleted.

Your rights — all users

• Access. You may request a copy of any personal data we hold about you.
• Correction. You may correct inaccurate information.
• Deletion. You may request that we delete reports or remove your number from public listings. Submit a request at /data-removal.

California residents — your CCPA rights

If you are a California resident, you have additional rights under the CCPA and CPRA:

• Right to know what categories of personal information we collect, the sources, the business purposes, and the categories of third parties we share with.
• Right to delete personal information we have collected from you, subject to certain exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of "sale" or "sharing". We do not sell or share personal information for cross-context behavioural advertising. There is therefore no "Do Not Sell or Share My Personal Information" link required, but if our practices change we will provide one.
• Right to limit use of sensitive personal information. We do not collect sensitive personal information as defined by the CCPA.
• Right to non-discrimination. We will not deny service, charge different prices, or provide lesser-quality service if you exercise any of these rights.

To exercise these rights, email [email protected] or use the data removal form. We may need to verify your identity before fulfilling a request.

Other state privacy laws

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Delaware, New Jersey, and other states with comprehensive privacy laws have similar rights to access, delete, and correct personal information. Contact us at the same address above to exercise them.

Children

The service is not directed at children under 13, and we do not knowingly collect data from them. If you believe we have collected data from a child, contact us and we will delete it.

Where we store data

Our infrastructure runs on Cloudflare's global network. Data may be stored or processed in the United States and other regions where Cloudflare operates. We have agreements with Cloudflare designed to maintain the security and confidentiality of the data.

Contact

Privacy questions: [email protected]. General contact: /contact.