Privacy Policy

Last updated: 1 January 2026

GhostCallers Ltd ("we", "our", "us") is the controller of any personal data processed through this website. This page explains what we collect, why, and what your rights are. If anything is unclear, write to privacy@ghostcallers.co.uk.

1. What we collect

• Phone numbers you search — we record searched numbers in aggregate to power "trending" and "most searched" statistics. Searches are not linked to your identity.
• Reports you submit — the text of your report, the category you choose, and an optional display name. We do not store your IP address; we store a salted SHA-256 hash of your IP, used only for rate-limiting and abuse detection.
• Cookies — see our cookie policy. Essential cookies only by default; analytics and advertising cookies require your consent.
• Server logs — Cloudflare may briefly record request metadata (IP, user-agent, request URL) for the purpose of operating the site securely. These logs are retained for 30 days.

2. Lawful basis

We rely on legitimate interests (UK GDPR Art. 6(1)(f)) for running the site, moderating reports, and preventing fraud. For analytics and ad personalisation we rely on your consent, which you give or withhold via the cookie banner.

3. Sharing data

We do not sell your data. We share limited operational data with the following processors:

• Cloudflare — hosting, CDN, security, database (D1). Data stored in EU regions where available.
• Google AdSense — if you consent, AdSense places cookies and may use them for personalised advertising. You can manage this at adssettings.google.com.

4. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your data. For requests about a specific phone number, use our data removal page. For everything else, write to privacy@ghostcallers.co.uk. You may complain to the ICO at any time — ico.org.uk.

5. Retention

Reports are retained indefinitely unless removed by request or by moderation. Server logs are retained for 30 days. Hashed IPs are retained for 90 days.

6. Children

GhostCallers is not directed at children under 13 and we do not knowingly collect data from them.

7. Changes

We will post any material changes to this policy here and update the "last updated" date above.