Privacy Policy
Morgan Wheatley Technologies Ltd • UK GDPR Compliant
Effective Date: 17 September 2026
GhostLink operates on a strict Zero-Knowledge architecture. The data controller is Morgan Wheatley Technologies Ltd (Company No. 17465315), 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
1. Data We Do Not Collect
- No Stream or Chat Logging: We do not record video, audio, or text messages. These are transmitted directly between peers (P2P).
- No User Accounts: No email addresses, phone numbers, or passwords required. Authentication is anonymous and room-token based.
- No Tracking Cookies: Zero marketing cookies or third-party behavioral trackers.
- No Persistent IP Database: IP addresses are never saved into historical user profile databases.
2. Ephemeral Signaling & Sub-Processors
Temporary WebRTC signaling metadata (SDP offers/answers and ICE candidates) is routed through Cloudflare Durable Objects to negotiate peer handshakes. This data is volatile and purged automatically when the room closes or reaches its 4-hour active session limit.
3. Peer IP Visibility
Because GhostLink uses direct WebRTC P2P routing to bypass central servers, your IP address is directly exchanged with peers in your room. Only connect with people you trust, or use a VPN.
4. UK GDPR Rights & ICO
You have statutory rights of access, rectification, and erasure under the UK GDPR. For questions or to submit inquiries, use our Contact Page. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.