Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
Ghost Foundation may cancel your paid services if you withdraw consent for data use (risk_flags-2). They also collect a broad range of personal data based on your interactions and may obtain publicly available information (data_use-3, data_use-4). Aggregated technical data could indirectly identify you (data_use-1), and your data may be retained for business, legal, or collection purposes (data_use-2). They can disclose your data under special circumstances or if you violate terms (data_use-5), and using their service requires cookies (data_use-6). Your data may also be transferred and stored outside your country of residence (risk_flags-1).
89% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
2 findings
Critical issues that may lead to significant user harm. These are often difficult to reverse.
medium95% confidence
Consent to data transfer and storage outside country of residence
By using their services, you agree to the transfer and storage of your data on their servers, which are located in Amsterdam, The Netherlands. They may also use third-party vendors and hosting partners located in countries other than The Netherlands or your country of residence, and by using their services, you also agree to sharing data with these vendors and partners.
Why it matters: Your personal data may be stored and processed in a country different from your own or the company's stated server location, subject to the data protection laws of those other countries.
Ghost Foundation’s servers are located in Amsterdam, The Netherlands. By using our services, you consent to the transfer and storage of your data on our servers. From time to time, Ghost Foundation may also use third party vendors and hosting partners to store data. These third party vendors and hosting partners may be located in a country other than The Netherlands or your country of residence. By using our services, you also agree to us sharing data from you with our third party vendors and hosting partners so that we can provide you with our services.
Data storage, paragraph 1 · Citation strength: strong
medium90% confidence
Withdrawal of consent may lead to service cancellation
If you withdraw your consent to their use of your personal data, they may not be able to provide services to you, and any paid services you have with them will be cancelled.
Why it matters: If you choose to withdraw your consent for certain data processing, you might lose access to services, including any paid services you currently have.
You may withdraw your consent to our use of your personal data at any time. However please note that we collect personal data where we believe it is necessary to provide you with our services. Accordingly, if you withdraw your consent to our use of your personal data, we may not be able to provide such services to you.
How the company collects, uses, and shares your personal information, and any limitations or broad grants related to these practices.
medium90% confidence
Aggregated technical information may indirectly identify you
They study aggregated technical information, and while aggregated data does not directly reveal your identity, it may indirectly identify you if combined with other data. They treat the combined data as personal data governed by this Privacy Policy.
Why it matters: Even if data is aggregated, there's a risk your identity could be revealed if it's combined with other information, which they would then treat as personal data.
We study aggregated technical information to better understand our users and improve our products and services. For example, we may prioritize how we optimize features based on which features are the most widely used. Aggregated data does not directly reveal your identity. However, it may indirectly identify you if combined with other data. We treat the combined data as personal data governed by this Privacy Policy.
Data retained for business, legal, or collected purposes
They retain your personal data where necessary to fulfill the purposes for which it was collected, where necessary for business or legal purposes, or where required or permitted by law.
Why it matters: Your data may be kept for an extended period if it is necessary for business, legal, or the original collection purposes, even if you stop using the service.
Ghost Foundation retains your personal data (i) where necessary to fulfil the purposes for which we collected it; (ii) where necessary for business or legal purposes; or (iii) where required or permitted by law.
[](https://ghost.org/privacy/#retention-personal-data)Retention of personal data, paragraph 1 · Citation strength: strong
medium90% confidence
Broad data collection on interaction
By accessing or using their website and services, or otherwise interacting with them, you are deemed to have read, understood and agreed to their processing of your personal data as outlined in this Privacy Policy.
Why it matters: Merely using the website or services, or interacting with the company, signifies your agreement to their data processing practices.
By accessing or using our website and services, or otherwise interacting with us, you are deemed to have read, understood and agreed to our Processing of your personal data as outlined in this Privacy Policy.
Collection of publicly available or legally permitted information
They may obtain information about you where it is publicly available, or where required or permitted by law.
Why it matters: Information about you that is publicly available or permitted by law may be collected by the company, potentially expanding their data collection beyond what you directly provide.
We may also obtain information about you where it is publicly available, or where required or permitted by law.
* user demographics and statistical data, paragraph 2 · Citation strength: strong
medium90% confidence
Disclosure of data under special circumstances or terms violation
They may disclose your personal data under special circumstances, such as where required by any applicable law or regulation, or when your actions violate the Terms of Service.
Why it matters: Your personal data may be shared with others if there are special circumstances like legal requirements or if you violate their Terms of Service.
Ghost Foundation may disclose your personal data under special circumstances, such as where required by any applicable law or regulation, or when your actions violate the [Terms of Service](https://ghost.org/terms/).
Disclosures required by law, paragraph 1 · Citation strength: strong
medium90% confidence
Use of cookies is required for service
Cookies are required to use the Ghost.org service.
Why it matters: You cannot use the Ghost.org service if you do not allow cookies.
Cookies are required to use the Ghost.org service.
Cookies, paragraph 1 · Citation strength: strong
Cancellation and Renewal
All clear
Terms related to how subscriptions or services can be canceled or renewed, including notice periods and refund policies.
✓
Looking good
No billing surprises spotted
Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.
Gotchas
All clear
Potentially overlooked clauses that could be disadvantageous to the user.
✓
Looking good
No hidden gotchas
Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.
Protections
1 finding
Explicit commitments or features designed to protect user interests or privacy.
Protection95% confidence
Notification of significant Privacy Policy changes
They will notify you about significant changes in how they treat personal information by sending a notice to the primary email address specified in your Ghost.org primary account holder information or by placing a prominent notice on their site.
Why it helps: Users will be informed of critical updates to the Privacy Policy, allowing them to review and understand any changes to data handling practices.
We may periodically update this Privacy Policy. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address specified in your Ghost.org primary account holder information or by placing a prominent notice on our site.