Privacy

Last updated 19 September 2026

Hairy Ghost is a free, ad-free listing site run by one person. We are not in the data business. We collect the least we can get away with, we never sell it, and we never hand it to advertisers or data brokers.

What we collect

Only if you choose to take part:

• Your email address, if you sign in. It is how signing in works — we email you a link instead of storing a password.
• Your profile — display name, username, and an avatar and bio if you add them. These are public.
• What you post — comments, listing submissions, and recommendations. These are public.
• Your itineraries — the listings you bookmark, your lists and your ratings. These are private to you.

You can browse the entire site, including every listing, without an account. Do that and we collect nothing about you at all.

What we don't do

• We do not sell, rent or share your information with anyone.
• We run no advertising and no advertising trackers.
• We do not build profiles, and we do not email you unless you asked us to.

Analytics

We use Google Analytics, for one reason: to know how many people use the site. It tells us visitor numbers and which pages get read. It does not tell us who you are, it is never matched up with your account, and we have switched off the settings that would pass your visit along to Google's advertising side.

What Google receives is the usual: your IP address, which it uses for a rough location and does not give back to us, your browser and device type, and the pages you open. If you would rather not be counted, a tracker blocker will stop it, and so will Google's own opt-out add-on. Nothing on the site breaks if you do.

Services we rely on

A few things are handled by other companies, and using them means your browser talks to those companies. We are naming them because a privacy page that pretends otherwise is not being honest with you.

• Supabase stores the database, your account and uploaded images.
• Vercel hosts and serves the site.
• Esri and OpenStreetMap serve the map tiles. Opening map view requests images from them, which means they see your IP address.
• OpenStreetMap's Nominatim turns a submitted address into map coordinates. Only the address is sent, never anything about you.
• Google Fonts serves two typefaces, which also means a request from your browser to Google.
• Google Analytics counts visits, which is another request to Google. See above for what it does and does not see.

Cookies

Two kinds. One keeps you signed in, and only exists once you have signed in — sign out and it is gone. The others belong to Google Analytics, and do one job: tell a returning visitor from a new one, so the count means something. There are no advertising cookies. Block all of them if you like; the only thing you lose is staying signed in.

Your data is yours

You can edit or delete your profile, comments, submissions and itineraries at any time from your account. If you want your account and everything attached to it removed entirely, email us and we will do it — no forms, no retention period, no talking you out of it.

One exception: a listing you submitted that has been published and edited by us becomes part of the public record of the season. We will remove your name from it on request, but the listing itself stays.

Children

The site is for a general audience and plenty of the listings are family events. We do not knowingly collect information from children under 13. If you believe a child has created an account, email us and we will remove it.

Questions

Use the contact form, or email sonofghostdad@gmail.com. A person reads it.