Skip to main content
GhostITGhostIT
Toggle languageFR

Privacy policy

Last updated: July 28, 2026

The protection of your personal data is a priority for us. This privacy policy informs you of how we process your data when you visit our website and use our contact form.

1. Data controller

The controller of personal data collected on this site is GhostIT, based in Austin, Texas, United States. For any questions relating to your data, you can contact us via our contact form.

2. Collected data and purposes

A. Contact form (via Basin)

When you fill out our contact form, we collect the following data:

  • Identification data: Last name, first name.
  • Contact data: Email address.
  • Content: Subject and message sent.

Purpose: Respond to your requests for information or quotes.
Legal basis (EU/UK visitors): Your consent, expressed by clicking the send button.

B. Security and anti-spam (via Cloudflare Turnstile)

We use the Cloudflare Turnstile service to protect our site against robots and spam. This service collects technical information (browser configuration) to verify human behavior without using tracking cookies.

Purpose: Secure the site and prevent abuse.
Legal basis (EU/UK visitors): Our legitimate interest in protecting the site from abuse.

C. Hosting (via GitHub Pages)

The site is hosted on the servers of the company GitHub Inc., via the GitHub Pages service.

For maintenance and security purposes, GitHub may collect connection data (logs), such as your IP address, date and time of consultation.

3. Data recipients (processors)

Your data is transmitted to the following service providers, necessary for the proper functioning of the site:

  • GitHub Inc.: For site hosting (GitHub Pages).
  • Basin (UseBasin.com): For receiving and managing messages sent via the contact form.
  • Cloudflare, Inc.: For the Turnstile service.

These service providers are located in the United States and Canada. For visitors in the European Union or the United Kingdom, we rely on standard contractual clauses or the EU-U.S. Data Privacy Framework to cover these transfers.

4. Retention period

  • Contact requests: Data is kept for the time necessary to process your request, then deleted or archived for a maximum duration of 3 years after the last contact.
  • Technical logs: Generally kept for a period not exceeding 12 months.

5. Your rights

Under the Texas Data Privacy and Security Act (TDPSA) — and, if you are in the EU or the UK, the GDPR — you have the following rights over your data:

  • Right of access: To know what data we hold.
  • Right of correction: To modify inaccurate data.
  • Right to erasure: To request the deletion of your data.
  • Right to objection: To object to processing for legitimate reasons.
  • Right to portability: To recover your data in a structured format.

To exercise these rights, you can contact us via our contact form. If we decline a request about your data, you may appeal by contacting us again through the same form. If that appeal is denied, you may submit a complaint to the Office of the Texas Attorney General (texasattorneygeneral.gov). If you are in the EU or the UK, you may also lodge a complaint with your local data protection supervisory authority.

6. Cookies

This site uses technical cookies necessary for its proper functioning. Security is ensured by the Cloudflare Turnstile service. We do not use targeted advertising cookies without your consent.