Cookie Policy

This Cookie Policy explains the cookies and similar technologies Ghostunnel's website uses, and how you can control them. It is part of our General Privacy Policy.

1. What cookies are

Cookies are small text files a website stores in your browser. Similar technologies, such as your browser's local storage, work the same way. Some are needed for a website to work; others are optional and are only used if you agree.

2. Strictly necessary cookies

These make the website work. They don't need your consent, and you can't turn them off in our settings.

• _ghostunnel_session — keeps you signed in as you move between pages and protects forms against cross-site request forgery. Expires after 14 days of inactivity or when you sign out.
• remember_user_token — set only if you tick “Remember me” when signing in, so you stay signed in after closing your browser. Removed when you sign out.
• gt_known — remembers that your account has been signed in to from this browser before, so we only email you a security alert about sign-ins from browsers we haven't seen. It holds your account number, not your IP address, and lasts two years.
• ghostunnel_invite — set only when you open a friend's invite link, so the free month reaches you both if you create an account. It holds the invite code, nothing about you, and lasts 30 days or until you sign up.
• Your cookie choice — remembers whether you accepted or declined analytics cookies, so we don't ask again. Stored in your browser.

3. Preferences

• theme — remembers whether you chose light or dark mode. Kept in your browser's local storage and never sent to us.

4. Analytics cookies (only with your consent)

If you accept analytics cookies, we load Google Analytics to understand how our website is used — for example which pages are visited — so we can improve it. Google Analytics sets cookies such as _ga and _ga_*, which last up to two years. If you decline, or don't choose, Google Analytics is not loaded and these cookies are not set.

Analytics are only used on our website. Our VPN service and apps don't send your browsing to analytics.

5. Third-party cookies

• Stripe — when you pay, you are taken to Stripe's checkout and billing pages on stripe.com, which set their own cookies to process the payment and prevent fraud. See Stripe's privacy policy.
• Cloudflare — our website is served through Cloudflare, which may set security cookies (such as __cf_bm) to tell people from bots. They are strictly necessary and short-lived.

6. Changing your choice

You can change your mind at any time with the Cookie settings link at the bottom of every page. You can also block or delete cookies in your browser's settings; if you block strictly necessary cookies, you won't be able to sign in.

7. Contact

Questions about cookies: [email protected].