Legal

Privacy Policy

Last updated: April 2026

What we collect

When you submit a report, we collect:

• The content of your report (job title, company name, your experience, etc.)
• Any documentation you choose to upload
• Your email address, if you choose to provide it — for report status updates only
• Basic anonymous metadata about your professional background (field, years of experience) — used only to identify patterns in aggregate

We do not collect your full name, your location, your device information, or any data beyond what you voluntarily provide in the form.

How we store your email

If you provide an email address, we store a one-way hashed version of it — not the address itself. This means we can send you status updates but cannot recover or share your actual email address. It exists in our system as a string of characters that cannot be reversed into a readable email.

What we do not do

We do not:

• Sell your data to anyone, ever, under any circumstances
• Share your identity or contact information with third parties
• Provide companies with access to information about who reported them
• Use your data for advertising purposes
• Build profiles on individual users
• Share data with data brokers, advertisers, or analytics companies

Who can see your report

Once a report is verified and marked public, the content of the report is visible on the platform. Your identity is never attached to it. There is no username, no profile, no way for anyone reading the report to identify who submitted it.

Third party services

We use the following third party services to operate the platform:

• Tally — our form provider. Submissions pass through Tally before reaching our database. Tally's privacy policy applies to data in transit.
• Airtable — our database. Report data is stored in Airtable. Airtable's privacy policy applies to stored data.
• Ko-fi — our optional donation platform. If you make a donation, Ko-fi's privacy policy applies to that transaction. We do not receive your payment details.
• Netlify — our hosting provider. Standard server logs may be collected by Netlify per their privacy policy.

We've chosen services with reasonable privacy practices and have configured them to collect the minimum necessary data.

Data retention

We retain report data indefinitely as part of the public record — that's the point of the platform. If you submitted a report and would like it removed, contact us at hi@ghostedreport.com and we'll review the request.

Your rights

You have the right to request access to, correction of, or deletion of any personal data we hold about you. Contact us at hi@ghostedreport.com. We'll respond within 30 days.

Contact

Questions about this policy: hi@ghostedreport.com. We are real people and we read everything.

This policy may be updated periodically. We'll note the date of any changes at the top of this page.