Privacy policy

This policy explains what personal data we collect when you visit discoverghost.com, subscribe, comment or buy a theme, and what we do with it.

1. Who is responsible

The data controller is Webtions OU, Sepapaja 6, Tallinn 15551, Estonia (VAT EE102051737). Contact: [email protected]

2. What we collect and why

• Purchases: your name, email, billing country and order details, received from Creem when you buy. We use them to deliver the theme, send updates, give support and keep accounting records. Legal basis: contract and legal obligation.
• Support emails: your email address and what you send us. Used to answer you. Legal basis: contract or legitimate interest.
• Newsletter and membership: your email, name if you give it, and which emails you open. Used to send the newsletter and run your account. Legal basis: consent. You can unsubscribe at any time from any email or your account page.
• Comments: your name and comment, shown publicly with the post. Legal basis: consent.
• Site usage: pages visited, referring site, browser and device type, and approximate location. Used to understand which content is useful. Legal basis: legitimate interest.
• Server and security logs: IP address and request details, kept for a short time to keep the site running and secure. Legal basis: legitimate interest.

We don't sell your data, and we don't use it for advertising.

3. Who processes it for us

• Hetzner (Germany): hosts this website and its database in the EU.
• Cloudflare (USA): runs our domain's DNS and protects the site. It handles visitor IP addresses as traffic passes through its network.
• Creem: handles checkout and payments as merchant of record, under its own privacy policy.
• Webtions Analytics (dash.webtions.com): our own analytics service, run by Webtions OU.

Some of these providers may process data outside the EU. When they do, they use safeguards approved under GDPR, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

4. Cookies

We use cookies needed to run the site, such as keeping members signed in. Analytics and checkout may also set cookies or similar identifiers. See the cookie policy.

5. How long we keep it

• Purchase and invoice records: 7 years, as Estonian accounting law requires.
• Support emails: up to 3 years after your last message.
• Newsletter and member data: until you unsubscribe or delete your account.
• Server logs: up to 30 days.

6. Your rights

You can ask to see, correct, delete or export your data, to limit how we use it, or to object to it. If you gave consent, you can withdraw it at any time. Email [email protected] and we'll reply within one month.

You can also complain to the Estonian Data Protection Inspectorate (aki.ee) or the data protection authority where you live.

7. Changes

We'll update this page if anything changes, and the date at the top will show the latest version.

DiscoverGhost is run by Webtions OU, Sepapaja 6, Tallinn 15551, Estonia. VAT EE102051737. Questions: [email protected]