Privacy

What we collect

Updated 27 September 2026

The short version: the Ghost apps themselves have no ads, no trackers and no accounts. Most of what you do stays on your phone. When an app does need the internet, this page says what it sends and to whom.

Your key

When you enter a key, Ghost Hub asks our key server (run on Cloudflare) whether it's valid. The server keeps:

• Your key and whether it's Free or Paid.
• A scrambled fingerprint of your phone. It's made from your phone's hardware ID with a one-way hash, so it locks the key to your phone without storing the ID itself.
• Your phone's make and model, for example "Samsung SM-S921B".
• The 2 apps you picked, for Free keys.
• When the key was first used and last checked. Ghost Hub checks every so often, so a key can be switched off if it's shared.

It doesn't keep your location or IP address. Keys bought or earned on this site are also linked to your account, so they show up on your account page.

This website

No analytics and no trackers. The only cookie is the one that keeps you logged in. The site is hosted on Cloudflare, which handles the connection like any web host does. The Download button fetches Ghost Hub from GitHub.

Your account

To buy or get a key you need an account. We keep:

• Your email address, to send your sign-up code, your keys and password resets.
• Your username, and your password stored only as a one-way hash, so nobody (including us) can read it.
• Whether you want emails when apps are updated or added. These are off unless you switch them on, and you can switch them off any time.
• When you signed up and last logged in.

You can delete your account from the account page. Emails are sent by our email provider (Cloudflare or Resend).

Orders

For each order we keep the reference, the price, how you paid, and when. For crypto, that includes the amount and the public transaction ID, which anyone can see on the blockchain anyway. For bank transfers, our bank shows us the name on the account that paid. We don't see or keep card details, and we don't need your address.

Ads for Free keys

Ads only appear when you choose to watch one for a Free key. They come from Google's ad service, which can use cookies and similar technology. You'll be asked for your consent first, and you can say no. See how Google uses information from sites that use its services.

App by app

Ghost Hub

Downloads the list of apps and the apps themselves from GitHub, or from a PC on your Wi-Fi if you set one up. Checks your key as described above.

Ghost Browser

Visits the sites you open and searches with the search engine you choose (DuckDuckGo to start with). Updates its ad-blocking list from GitHub. When you translate a page, it goes through Google's translation service, so Google sees that page. History, bookmarks and your reading list stay on your phone, and incognito tabs keep nothing.

Ghost VPN

Gets its server list from the VPN Gate project and connects through the OpenVPN for Android app. The servers are run by volunteers, and like any VPN, the server you connect to carries your traffic. To show your IP address and location, it asks ipwho.is or ipapi.co. Speed tests download a small file from Cloudflare. Data-used totals stay on your phone.

Ghost Weather

Sends your location, or the place you search for, to Open-Meteo to get forecasts and pollen levels. Your saved places stay on your phone.

Ghost GPS

Loads maps from OpenFreeMap and Esri (satellite). Place searches go to OpenStreetMap's Nominatim, and walking routes to the OpenStreetMap routing service. It can find your rough location from your IP address using ipwho.is or ipapi.co. Your search history and saved places stay on your phone.

Ghost Volume

Works entirely on your phone. Nothing is sent anywhere.

Ghost Terminal

Runs commands on your phone. It doesn't send anything by itself, but commands you type can use the internet.

Questions

Email hello@ghostavix.co.uk. If you want your key and everything linked to it deleted, email us and we'll do it.