What we keep, and what we do not

A birth date, time and place are personal data under Sri Lankan and Pakistani law, and we treat them that way.

• A saved person belongs to one account and is visible only to it. Nobody else, including us, opens it in the ordinary course of running the site.
• Deleting a person deletes the row and every computed chart for it. It is deleted for real, not hidden.
• Drawing a chart without signing in stores nothing. The numbers are computed for the page and forgotten.
• We keep no analytics. There is no beacon, no pixel, no third-party scripts, and no advertising.
• Our server log is one line per request: the path, the status and the time. Never the birth data.
• Sign-in is through account.ghosts.lk. We keep your account id only as the owner of the people you save, and your email only in the session cookie in your browser.

When you ask for your grimoire, the model receives your name, your birth line and the numbers of your chart, and the passages of tradition that apply to it, and nothing else. The model runs on Cloudflare's Workers AI, whose Data usage page states that Cloudflare "does not use your Customer Content to (1) train any AI models made available on Workers AI". The chapters it writes, the brief it wrote them from and the checks they passed are stored with the person and deleted with the person.

Questions: ghosts.lk/contact. Ghost Protocol (Private) Limited, PV 00305227, Colombo.