01. WHO_WE_ARE
GHOSTSHIFT.FM is operated by Manuel-Rene Gruber, Liechtenstein. For privacy requests contact contact@ghostshift.fm.
02. DATA_WE_COLLECT
Depending on how you use GHOSTSHIFT.FM, we may process:
- Account data: username, email, password hash, timezone, avatar, account type
- Activity data: night-shift streaks, badges, channel membership, messages, reactions, friend connections
- Private messages between users you communicate with
- Push notification subscription data (browser endpoint, keys, preferences) if you opt in
- Billing identifiers from Stripe (customer/subscription IDs — not full card numbers)
- Shipping details for physical rewards when you submit a claim (encrypted when configured)
- Technical logs: IP address, session data, timestamps, and error/diagnostic logs
- Your email address if you sign up for 10pm reminder emails
We do not intentionally collect data about your activity on other websites.
Messages and other content you post are provided by you. We process them to operate the service but do not adopt or endorse user content. Users are responsible for what they write and send.
03. WHY_WE_USE_IT
We process personal data on these bases:
- Contract: to provide the service you signed up for (account, chat, channels, PRO features)
- Legitimate interests: security, abuse prevention, service improvement, and offline notification emails when you have been inactive
- Consent: browser push notifications and optional 10pm reminder emails where applicable
- Legal obligation: where required by law (e.g. tax or regulatory requests)
04. COOKIES_AND_SESSIONS
We use essential cookies and similar technologies to keep you logged in and to operate the site. These are not used for third-party advertising profiles. You can clear cookies in your browser, which will end your session.
05. PROCESSORS_AND_THIRD_PARTIES
We share data with service providers only as needed to run GHOSTSHIFT.FM:
- Stripe — subscription payments
- Email (SMTP) — verification, password reset, and offline activity alerts
- Giphy — GIF search when you use that feature
- YouTube — embedded video playback in channels
- Hosting infrastructure — servers and databases that store application data
Each provider processes data under its own privacy policy when you interact with their services.
06. RETENTION
- Channel messages: retained until the channel is deleted, your account is removed, or we manually remove content for moderation or legal reasons. We do not auto-delete channel chat after a fixed number of days.
- Private messages: retained until account deletion or manual removal, subject to moderation and legal holds.
- Account and profile data: kept while your account is active; deleted or anonymized after a confirmed deletion request, except where law requires longer retention.
- Logs and backups: kept for limited operational periods and then rotated or deleted.
- Notification deduplication records: short-term records to avoid duplicate emails within 24 hours.
07. SECURITY
We use HTTPS for data in transit. Passwords are stored as one-way hashes (bcrypt), not plain text. Selected sensitive fields (such as shipping information) may be encrypted at the application level when encryption is configured in production.
Most database content is not individually field-encrypted. No online service can guarantee absolute security; please use a strong, unique password and report suspected breaches to contact@ghostshift.fm.
08. YOUR_RIGHTS
Depending on where you live (including the EU/EEA and Liechtenstein), you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability.
To exercise these rights, email contact@ghostshift.fm. We will respond within a reasonable time. Account self-service deletion is not yet available in the app; contact us to request deletion. You may also lodge a complaint with your local data protection authority.
09. CHILDREN
GHOSTSHIFT.FM is not directed at anyone under 16. We do not knowingly collect data from children under 16. Contact us if you believe a minor has registered and we will take appropriate steps.
10. PUSH_NOTIFICATIONS
With your permission, we send browser push alerts for night-shift open (10 p.m. local time), private messages, and friend requests. Subscription data is stored on our servers. You can disable alerts in settings or in your browser at any time.
Push delivery depends on your device and browser. We do not use push for marketing.
11. EMAIL_NOTIFICATIONS
If you have not been active for at least 24 hours, we may email you about friend requests or private messages. Emails link back to the site and do not include full message bodies.
We also send essential account emails (signup verification, password reset). 10pm reminder emails are stored separately, are only used for the nightly reminder, and every email has an unsubscribe link.
12. CHANGES
We may update this policy. Material changes will be communicated with reasonable notice. The current version is always published on this page.