Privacy Policy

1. Introduction

This Privacy Policy explains how SIA "RMPalace" (“GhostKeys”, “we”, “us”, or “our”), a company registered in Latvia, European Union, collects, uses, stores, and protects your personal data when you visit ghostkeys.eu (the “Service”).

GhostKeys is a gaming content and support platform. We publish guides, tutorials, error fixes, and news, and we operate a community Q&A and live chat. We follow the principles of the EU General Data Protection Regulation (GDPR) and process personal data only as described below. By using the Service, you acknowledge the practices outlined in this policy.

2. Data Controller

The data controller responsible for your personal data under this policy is SIA "RMPalace", the operator of ghostkeys.eu. You can contact us regarding privacy matters using the LiveChat widget on any page of the Service.

3. Information We Collect

Account information. When you register using an email address and password, we collect your email address and chosen display name. If you sign in with Google, we receive your name, email address, and profile picture from Google.

User-generated content. We store content you voluntarily submit through the Service, including questions, answers, comments, and helpful/not-helpful votes.

Reading and engagement activity. For logged-in users, we record which articles you have read, which you have bookmarked, and the timestamps of those interactions, so we can show your reading history and bookmarks.

Experience-points data. If you participate in the community, we record the actions that contribute to your experience points (XP) and resulting level.

Notification preferences. We store your in-product notification settings, which you can manage at any time in your account settings.

Technical and device data. We may collect IP address, approximate location derived from IP, browser type and version, operating system, device type, referral URL, and timestamps through standard server logs and analytics tools.

Anonymous viewer data. To prevent inflated view counts, we may store a randomly generated, non-identifying view token in your browser's local storage. This token is not linked to your identity.

4. Legal Bases for Processing

We rely on the following legal bases under the GDPR for processing your personal data:

• Performance of a contract: to provide account features such as login, reading history, bookmarks, and the Q&A system;
• Legitimate interests: to operate, secure, and improve the Service, prevent abuse, and analyze aggregate usage;
• Consent: for any optional analytics, cookies, or communications that require it; and
• Legal obligation: where we are required to retain or disclose data to comply with applicable laws.

5. How We Use Your Data

We use the data we collect to:

• provide, maintain, and improve the Service;
• create and manage your user account;
• display your display name alongside content you post;
• maintain your personal reading history and bookmarks;
• deliver in-product notifications;
• calculate and display your experience points and level;
• respond to support inquiries via LiveChat;
• detect and prevent fraud, spam, and abuse;
• analyze aggregate, non-identifying usage patterns; and
• comply with legal obligations.

6. Public Visibility of Your Data

Your display name is shown next to questions, answers, and comments you post. The content of these posts is publicly visible and may be indexed by search engines such as Google. Your email address is never displayed publicly. Your reading history, bookmarks, and notification preferences are private and visible only to you.

7. Cookies and Local Storage

We use essential cookies and browser local storage to keep you signed in across visits, remember your preferences, and store the anonymous view token described above. We may use Google Analytics to collect anonymized usage statistics. We do not use advertising cookies, and we do not display third-party ads on the Service.

8. Third-Party Services

Google Firebase. We use Firebase Authentication for sign-in (including Google Sign-In) and Cloud Firestore for database storage. Firebase processes data on our behalf as a data processor.

Google Analytics. Where enabled, Google Analytics collects anonymized usage statistics, such as page views and session counts, in aggregate.

YouTube. Some pages embed or link to YouTube videos. When you interact with YouTube content, Google's privacy policy applies in addition to this one.

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

9. International Data Transfers

Some of our service providers, including Google (Firebase and Analytics), may process your data on servers located outside the European Economic Area (EEA), including in the United States. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) and equivalent mechanisms to protect your data.

10. Data Sharing

We do not share your personal information with third parties except:

• with service providers who assist us in operating the Service (currently limited to the providers listed in Section 8), under appropriate data-processing agreements;
• when required by law, court order, or other legal process;
• to protect the rights, safety, or property of GhostKeys or our users; or
• with your explicit consent.

11. Data Retention

We retain your personal data for as long as your account is active, or as needed to provide the Service and comply with legal obligations. Account profile data, reading history, bookmarks, and notification settings are retained until you delete your account. Questions, answers, and comments may be retained in anonymized form after account deletion to preserve the integrity of community discussions.

12. Your Rights

If you are located in the EU, EEA, or United Kingdom, you have the following rights under the GDPR (and similar rights may apply in other jurisdictions):

• Right of access — to request a copy of the personal data we hold about you;
• Right to rectification — to correct inaccurate or incomplete data;
• Right to erasure — to request deletion of your data (the “right to be forgotten”);
• Right to restrict processing — to limit how we use your data in certain cases;
• Right to data portability — to receive your data in a structured, machine-readable format;
• Right to object — to object to processing based on legitimate interests; and
• Right to withdraw consent — where processing is based on your consent.

You can manage your account information through the Settings page. To exercise any of these rights or request account deletion, please reach out via the LiveChat widget on the Service. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or your local supervisory authority.

13. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted connections (HTTPS), access controls on our backend systems, and reliance on established cloud infrastructure providers. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us via the LiveChat widget so we can take appropriate action.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date at the top of this page. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

16. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out via the LiveChat widget available on every page of the Service. You can also visit our About page or the FAQ section for additional context.