Your project.
Your details.
Here is how Ghost Studio collects, protects, and stores information when you plan a website brief or contact the studio.
1. What we collect
When you complete the 5-step project planner at /start, we collect:
- Contact details: Your name, email address, and optional phone number.
- Project specifications: Website name, project overview, design style, color palette, navigation style, requested pages, features, planning budget, timeline, assets ready, and design inspiration notes.
Please do not include passwords, payment card numbers, or proprietary business secrets in your initial brief.
2. How drafts are saved on your device
To prevent you from losing your progress if you close your tab or refresh your browser, your website design choices (style, pages, features, and current step) are stored locally on your device in standard browser local storage.
Your personal contact information (name, email, phone) and privacy consent are intentionally NOT stored in local storage. You must actively confirm your consent when submitting. Once your brief is submitted and confirmed with a reference number, your local draft is immediately cleared.
3. Durable database storage & internal email notification
When you submit your brief:
- Durable Storage First: Your enquiry is first saved into Ghost Studio’s persistent database, and an immutable reference identifier (e.g.
GS-XXXXXXXXXXXX) is generated. - Notification to Studio & You: A notification containing your complete project requirements is sent to our review mailbox (
p8339378@gmail.com) so our studio team can evaluate your scope. A confirmation copy is also sent to the email address you provided. Both emails are routed securely through the Resend email infrastructure. - Fallback Notification: If our primary email service is temporarily unavailable, notifications are routed securely via FormSubmit.co, which will also dispatch a basic confirmation auto-response to you. FormSubmit does not store your email permanently.
Your enquiry is saved in the database even if email delivery encounters a temporary issue, ensuring your request is never lost.
4. Security, rate limiting & anti-abuse
We take privacy and security seriously:
- We do not use advertising trackers, third-party analytics pixels, or marketing trackers.
- To protect against denial-of-service and automated spam, network identifiers are cryptographically hashed using one-way SHA-256 hashing. Raw IP addresses are not stored in database records.
- Admin portal access is protected with timing-safe credential verification, rate-limiting lockout protection, and server-validated cryptographic sessions.
5. What submitting commits you to
Submitting a brief is an enquiry. It does not initiate payment, enter you into a contract, or sign you up for promotional newsletters. After reviewing your brief, we reach out to discuss scope, quote, and timeline. No work begins until both parties agree.
6. Accessing or deleting your data
If you wish to view, update, or request the deletion of your submitted brief, simply contact us at petar@ghoststudio.mk with your project reference (e.g. GS-XXXXXXXXXXXX).