Privacy policy

Updated: 3 November 2026.

Private accounts

GhostNet accounts are created only by the administrator. Your address and account persist until the administrator disables or deletes the account. Passwords are stored as Argon2id hashes, never as readable account passwords.

Messages and attachments

Messages and attachments expire after 24 hours by default. The administrator can change message retention independently of account lifetime, including disabling automatic message expiry. Your dashboard displays the current policy. Cleanup runs approximately every minute. Application deletion does not promise forensic erasure from physical storage. Old temporary inboxes retain their original expiry.

Sessions and security

An essential Secure, HttpOnly, SameSite cookie authenticates your session for up to eight hours. Logout, password resets and account deactivation revoke sessions. Keyed IP hashes and login identifiers are used for rate limiting; rate records are removed after one day. Administrative actions are audited for 90 days without recording passwords. SMTP and system logs may contain IP addresses and email addresses and are retained for approximately seven days.

Initial credentials

Single-account passwords are displayed once to the administrator. For generated batches, a temporary encrypted credential export is available once for 30 minutes after completion. The export is removed after download or expiry. It is excluded from scheduled backups. Downloaded CSV files are controlled by the administrator and should be protected as credentials.

Recovery snapshots

Scheduled recovery backups retain account metadata, password hashes, settings and audit records for approximately seven days, without inbox contents, active sessions or export data. One-off restricted migration snapshots can include existing messages and are retained for approximately seven days. Deleted account metadata may remain in restricted backups until those snapshots expire.

Infrastructure and contact

Hostinger hosts the service and Cloudflare processes website traffic. Rspamd and a local Valkey cache provide antispam checks. There are no advertising or analytics scripts in the site or email viewer. Contact requests, optional reply addresses and keyed IP hashes are retained for seven days. Use the contact form for questions; avoid submitting sensitive message contents.