New accounts get Ghost Pass free for 1 day — it activates when you sign in to the launcher, with the full catalog and no payment required.
Last updated: 17/07/2026
This Privacy Policy explains what information Ghost Games collects, how we use it, how long we keep it, and what rights you have over it. It applies to this website and to the desktop client launcher.
Account data you provide directly: name, email address, password (stored as a salted hash, never in plain text), and an optional avatar selection. Payment references from our processors (Stripe, NOWPayments) — order and subscription identifiers only, never full card numbers or wallet private keys. Session and device data needed for account security: IP address, browser or device identifier, and user-agent string, recorded each time you sign in on the website or the desktop client. Activity logs of security-relevant account events (sign-in, sign-out, password changes) paired with the originating IP address.
We do not keep this data indefinitely by default. Account activity logs are automatically deleted after 30 days. Web session records are automatically removed after 7 days of inactivity — this does not shorten your 12-hour login session, it only governs how long an inactive session stays visible for you to review or revoke under Profile > Sessions. Desktop client device sessions are kept as a revocation history until you or an administrator revoke them. Security or diagnostic reports generated by the desktop client's anti-cheat and crash-reporting checks are retained until reviewed and cleared by our team, since they may be needed to investigate abuse or a security incident.
We use your information to authenticate you and maintain your session, grant and enforce catalog access tied to your purchases, process payments and prevent fraud or chargebacks, detect cheating or tampering with the desktop client to keep shared Steam accounts in good standing, and contact you about your account, purchases, or security events (such as a new sign-in or a device you don't recognize).
Because game access relies on Steam accounts shared across our user base, the desktop client includes automated checks designed to detect tampering, cheating, or unauthorized modification of the game client. If these checks flag suspicious activity, the client may send a diagnostic report — which can include device and process information and, where necessary to investigate the flagged activity, a screen capture — to help us review the incident and protect the shared accounts from being banned by Steam or a publisher. These reports are linked to your account and device only when necessary to act on them, and are only reviewed in connection with a security investigation.
We do not sell your personal information to anyone. We share data only with the service providers necessary to operate the platform — payment processors (Stripe, NOWPayments), hosting and database infrastructure, and email delivery for account notifications — each bound by contract to protect your information and use it only to provide their service to us. When you view your own device sessions in the dashboard, your IP address is looked up against a third-party geolocation service directly from your browser to show you an approximate city and country; this lookup is not stored by Ghost Games.
We encrypt sensitive data at rest, use end-to-end encrypted communication between the desktop client and our servers, hash passwords with a salted algorithm, and apply rate limiting and access controls across our systems to reduce the risk of unauthorized access.
You can review and revoke your own active sessions at any time from Profile > Sessions, and view your recent account activity from Profile > Activity. You may request access to, correction of, or deletion of your personal data, or ask us about data we hold on you, by contacting us through the Contact page. We will respond in accordance with applicable law.
We may update this Privacy Policy as our practices evolve. We will update the date at the top of this page when we do, and material changes will be communicated to you through the platform or by email.
We use a minimal set of cookies: an essential session cookie that keeps you signed in, and a preference cookie that remembers your cookie-consent choice and display currency. We do not use advertising or third-party tracking cookies.