Version 3, effective from 11/5/2026
GhostAI Cookie Policy
Version 3 · 5 November 2026
Cookies and similar device storage enable sign-in, protect forms and remember settings. The controller is Tomasz Dzidek, Trakt 59, 62-004 Kliny, NIP (tax identification number) 9231556825; contact: contact@ghostai.website.
1. Service cookies
| Name | Purpose | Duration |
|---|---|---|
| __Host-GhostAI.Auth | keeping you signed in | 8 hours, extended while you are active |
| .AspNetCore.Correlation.*, .AspNetCore.OpenIdConnect.Nonce.* | sign-in security | for the duration of signing in |
| oauth_pkce_*, oauth_state_*, oauth_return_* | secure sign-in through the provider you chose | up to 10 minutes, deleted after signing in |
| .AspNetCore.Antiforgery.* | form protection | browser session |
| .AspNetCore.Culture | remembering the language you chose | up to 365 days |
| ghostai.theme | remembering the theme you chose | up to 365 days |
We do not require consent for storage that is strictly necessary to transmit or deliver a service expressly requested by the user. Remembering preferences falls within this exception only to the extent needed to carry out your choice. Any other storage requires prior consent; the mere label "functional" does not release us from that obligation.
2. Local storage and the app
The browser's local storage may remember the way you chose to display a lap and the background: ghostai.lap-view, ghostai.lap-view.car-body, ghostai.brand-backdrop, ghostai.brand-backdrop.random-draw. It is not sent to the server automatically. The settings remain until you delete or replace them.
The app stores on the device the information necessary for signing in, settings, the lap queue and logs. The details of data processing are described in the privacy policy.
3. Tracking and control
We do not use third-party advertising or analytics cookies on the service. We serve fonts and interface files from our own service. If we introduce storage that goes beyond the statutory exception, we will switch it on only after voluntary consent, with the option of withdrawing it just as easily.
Signing in through Google or Discord, if you choose it, opens the provider's own service, which may use its own cookies and privacy rules.
You can clear or block cookies and local storage in your browser settings. Blocking necessary cookies may make it impossible to sign in; deleting stored preferences will restore the default settings.
Version history
- Version 3, effective from 11/5/2026current