Privacy Policy
Last updated: April 2026
The Short Version
- We collect zero personal data — no names, emails, or IP addresses
- Messages are anonymous and auto-delete after 24 hours
- No tracking cookies, no ads, no third-party analytics
- Groups are private and password-protected — no public access
- We use Firebase (Google) for real-time storage only
1. What We Do NOT Collect
ClassGhost is designed with privacy as the core principle. We never collect or store:
- Names or real identities
- Email addresses or phone numbers
- IP addresses linked to messages or group activity
- Device identifiers or browser fingerprints
- Location data of any kind
- Account credentials (ClassGhost has no accounts)
- Usage analytics or behavioral data
2. What We Store
The only data stored in our Firebase Realtime Database:
- Group ID — chosen by you, alphanumeric, not linked to any identity
- Group name — chosen by you (e.g. "Math 101")
- Hashed passwords — admin and member passwords for access control
- Anonymous message text — auto-deleted after 24 hours
- Message timestamp — used only for the auto-deletion logic
No personal identity is ever attached to any message, group, or timestamp.
3. Message Auto-Deletion
All messages automatically delete after 24 hours. This is enforced both client-side (ClassGhost cleans up on load) and by Firebase server rules. After 24 hours, messages cannot be recovered by anyone — including us.
4. Cookies & Local Storage
ClassGhost uses localStorage only to remember your last visited Group ID for convenience when you return. No tracking cookies, no advertising cookies, no third-party analytics cookies are used at any point.
Session storage is used locally in your browser for rate-limiting only and is never transmitted to our servers.
5. Firebase & Google
ClassGhost uses Google Firebase Realtime Database for message storage. Firebase may collect technical metadata (server access logs, error reports) as part of their infrastructure service. This is governed by Google's Privacy Policy. No personally identifiable information is passed to Firebase from ClassGhost.
6. Third-Party Services
We use Google Fonts for typography loading. Google's servers may log your IP address as part of standard CDN web requests. No other third-party services, analytics platforms, or advertising networks are used.
7. Children's Privacy
ClassGhost does not knowingly collect any personal information from children or anyone else. Since we collect no personal information at all, ClassGhost is inherently safe for classroom use at any age level and carries minimal compliance burden under COPPA, FERPA, and GDPR.
8. Your Rights
Since ClassGhost collects no personal data linked to your identity, there is nothing we can provide, correct, or delete on your behalf. Your messages are automatically deleted after 24 hours. You may also ask the group admin (your teacher) to delete messages at any time.
9. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of ClassGhost after changes constitutes acceptance of the updated policy.
10. Contact
For privacy questions, contact us at support@classghost.xyz or visit our contact page.