Privacy notice

Last updated: 18 September 2026 · GDPR (EU) 2016/679

Short version: this site has no accounts, no analytics and no tracking cookies. We hold the contact details you give us because we have to deliver a licence, and the software sends the minimum needed to check that licence is valid.

Who is responsible

The data controller is the independent developer working under the name @SoloShown, reachable at ghosteyesupport@gmail.com. Write to that address for anything concerning your data.

This website

• No cookies are set and no analytics or advertising scripts are loaded. Fonts and images are served from this domain, so no request leaves it while you browse.
• Cloudflare, which hosts the site, processes connection data (IP address, user agent, timestamp) in its server logs to deliver the pages and block abuse. Legal basis: legitimate interest.
• When you send the order form we record, for a short time, a counter tied to your IP address, in order to stop the form being flooded. It expires automatically within two hours.

When you order

We process what you type into the form:

• your email address — to reply, to send the licence, to give support;
• the plan, number of PCs and notes — to fulfil the order and issue any invoice;
• the country of your connection, as reported by Cloudflare — relevant to tax treatment.

The order reaches us as a notification in a private Discord channel we own, sent through a webhook. Discord Inc. therefore stores that message under its own privacy policy. Only what you typed into the form is sent, nothing more, and the channel is not public.

Legal basis: performance of a contract. Records connected to a payment are kept for as long as accounting and tax rules require them; orders that do not become a sale are deleted within 12 months.

When you activate the software

GhostEye contacts our licence server to activate and then to confirm the licence. It sends:

• the licence code;
• the computer name, so you can tell your own activations apart;
• an anonymous hash of the hardware — a one-way SHA-256 digest of machine identifiers, from which nothing can be read back;
• the application version.

It never sends files, documents, browsing data, the list of your programs, or anything the app scanned. Analysis results, logs, backups and history stay on your computer under %LOCALAPPDATA%\GhostEye and are never uploaded.

Two other connections exist and are not related to us: a DNS latency probe against the resolver your own system already uses, and the Cloudflare speed test, which runs only when you press its button on the Network page.

Who else sees the data

• Cloudflare — hosting and network protection for the site.
• Discord — receives the order notification in a private channel we own.
• Supabase — the licence database, hosted in the EU. It stores a SHA-256 hash of the licence code, never the code itself.
• Where a sale generates an accounting or tax obligation, whoever the law requires.

All act as processors under contract. Nothing is sold, rented or used for advertising, ever.

Your rights

You may ask for access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interest, by writing to ghosteyesupport@gmail.com. We answer within 30 days. Deleting your activation data means the licence can no longer be validated, so it also ends the licence. You may complain to the Italian data protection authority (garanteprivacy.it) or the authority where you live.

Children

This software and this site are not directed at anyone under 16.