Privacy Policy

Who We Are

GhostFont.org is an independently designed and operated browser-based visual perception project.

Questions about this policy or the project's handling of data can be sent to contact@ghostfont.org.

Scope

This policy covers the public GhostFont.org website, its browser-based motion experiment, analytics, and communications sent to the project. It does not govern third-party sites linked from GhostFont.org.

Text and Videos Stay in Your Browser

The phrase entered in the Ghost Font experience is processed in browser memory. The moving field is drawn with browser Canvas APIs, and a requested video is recorded with the browser's MediaRecorder API and offered as a local download.

GhostFont.org does not intentionally send the phrase or generated video to its servers, Analytics, or advertising providers. Closing or refreshing the page clears the in-memory phrase, subject to normal browser behavior outside the project's control. Browser extensions, device software, third-party advertising scripts described below, and anything a visitor chooses to do with a downloaded file have their own data practices. Because advertising code runs in the page, visitors should not enter passwords, secrets, or other sensitive information in the experience.

Information We Process

Website Requests and Cloudflare Hosting

GhostFont.org runs on Cloudflare infrastructure. A normal request can expose an IP address, request time, requested URL, referrer, browser and device headers, security signals, and diagnostic information to Cloudflare and the project. This information is used to deliver the site, prevent abuse, investigate failures, and maintain security.

Google Analytics and Regional Consent

GhostFont.org uses Google Analytics on approved public production pages to understand basic aggregate traffic. The Google tag loads independently of Google AdSense and Google Privacy & Messaging. Advertising storage, advertising user data, and advertising personalization remain denied worldwide in the current implementation and are not enabled for the site's Analytics measurement.

For visitors in the European Economic Area, the United Kingdom, or Switzerland, Analytics storage defaults to denied. The same fail-safe default applies when the visitor's region cannot be determined. Before a visitor accepts statistics, Google receives only cookieless page-view measurements and the site does not permit Analytics cookies such as _ga or _ga_* to be read or written. If the visitor accepts statistics, Analytics storage changes to granted and Google Analytics may use those cookies and a persistent client identifier to distinguish visits. Refusing or withdrawing that choice leaves Analytics storage denied.

For visitors outside those regions, Analytics storage defaults to granted, so Google Analytics may use Analytics cookies unless they are blocked by the browser or another privacy control. A future certified advertising consent platform may manage the three advertising-related consent signals separately; it does not determine the site's regional Analytics-storage choice.

In either state, Google may process the approved public page path, a fixed site label, the referring site's origin, browser and device information, approximate location, and the IP address inherent in the network request. GhostFont.org removes query strings and fragments from reported page locations and measures only the seven current public HTML routes: the homepage, the AI Strikes Back article, About, Contact, Cookie Policy, Privacy Policy, and Terms of Service. Disabled routes, error pages, and unknown paths are excluded. The site does not intentionally include text entered in the Ghost Font experience or contact-message contents in Analytics events.

Google's handling of this data is described in How Google uses information from sites or apps that use its services.

Contact

The current public contact method is direct email. If a visitor sends a message, the project receives the sender's email address, message contents, attachments, and the routing metadata ordinarily included by email providers. Do not include secrets or other sensitive information in a contact message.

Browser Preferences

The site may store theme and regional Analytics-consent preferences in local storage. These preferences are not the phrase entered into the Ghost Font experience.

Advertising

GhostFont.org loads the Google AdSense bootstrap on approved public production pages. Ad availability depends on Google's review, account settings, region, and other eligibility rules. Google and participating advertising vendors may place or read cookies, use web beacons, receive an IP address or other identifiers, and process page, device, and ad-interaction information to serve, limit, personalize, secure, and measure advertising.

Visitors can manage Google advertising personalization through Google Ads Settings. Additional information about Google's advertising cookies is available in Google's advertising technologies policy. The site does not intentionally pass the text typed into Ghost Font to AdSense as an advertising parameter.

Where required, GhostFont.org uses Google Privacy & Messaging, a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework. That advertising consent system manages Google advertising choices separately from the regional Analytics-storage rules described above.

EffectiveCPMNetwork Native Banner

The homepage and the AI Strikes Back article also contain advertising code served from effectivecpmnetwork.com. One script supplies a labeled native banner inside the content. This script may receive normal request information such as IP address, requested page, referrer, browser and device details, language, timing, and approximate location. The provider may also use cookies, local storage, pixels, or similar identifiers and process ad impressions, interactions, fraud signals, and links to advertiser landing pages.

GhostFont.org currently loads this script only for visitors confidently identified as outside the European Economic Area, United Kingdom, and Switzerland. They remain blocked when region detection fails. Google Privacy & Messaging does not manage this separate advertising provider. Visitors can block or remove its storage with browser privacy controls, content blockers, and cookie settings. The application does not intentionally include the Ghost Font phrase in the script URL or an advertising event, but third-party code runs within the page and should not be treated as a confidential input environment.

How We Use Information

Information described above is used to:

• deliver, secure, and troubleshoot the website;
• understand aggregate website use and improve the experience;
• respond to messages and rights requests;
• prevent fraud, abuse, and unauthorized access; and
• comply with applicable legal obligations.

When Information Is Shared

Information may be processed by service providers only as needed for the functions described above, including Cloudflare for hosting, Google for Analytics and advertising, EffectiveCPMNetwork for advertising, and the email providers involved in a contact message. Information may also be disclosed when required by law, to protect users or the service, or as part of a legitimate project reorganization. GhostFont.org does not sell the phrase entered in the public experience or the locally generated video.

Retention

• Phrases and generated videos are not intentionally retained by the site.
• Contact email is retained only as reasonably needed to respond, keep a support record, protect the project, or meet legal obligations.
• Hosting logs and Google Analytics data follow the project's operational settings and the applicable provider's retention controls.

Your Choices

Visitors can clear cookies and local storage through browser settings, block non-essential cookies, or use browser privacy and content-blocking controls. Blocking storage may affect preferences, Analytics, or ads, but none of these choices changes the browser-local design of the Ghost Font phrase renderer.

Visitors in the European Economic Area, the United Kingdom, Switzerland, or an unidentified region receive a prompt to accept or refuse statistics. Every visitor can use the site's Privacy & cookie settings control to review or change the Analytics choice. The choice is saved locally in that browser. Withdrawing it changes Analytics storage to denied for future measurement; browser settings can be used separately to remove Analytics cookies already stored on the device. Browser or content-blocking controls can independently prevent the Google Analytics request.

If Google Privacy & Messaging is active and its advertising consent API is ready, the settings panel also links to separate advertising privacy choices.

Depending on location, a visitor may have rights to request access, correction, deletion, restriction, or a copy of personal information held by the project. Requests can be sent to the contact address above. The project may need to verify a request before acting on it.

Security and International Processing

Reasonable technical and organizational measures are used to protect data, but no internet service or email system can guarantee absolute security. Cloudflare, Google, and email providers may process information in countries other than the visitor's own under their applicable safeguards.

Children

GhostFont.org is a general-audience creative and educational experiment. It is not directed to children under 13, and the project does not knowingly seek personal information from children. A parent or guardian who believes a child has provided personal information can contact the project.

Changes

This policy may be updated when the site's data practices or providers change. The date at the top identifies the current published version. Material changes will be described on this page before or when they take effect where reasonably possible.

Contact

Privacy questions and requests can be sent to contact@ghostfont.org.