We use as few cookies as the site can work with. There are no advertising cookies, no tracking pixels, no analytics that follow you between sites, and nothing sold or handed to a data broker. Every cookie below is named, and the names are read out of the application's own configuration — so if one is ever renamed, this page cannot quietly become wrong.
Why there is no banner
Under the UK's Privacy and Electronic Communications Regulations and the EU's ePrivacy Directive, consent is needed to store anything on your device except what is strictly necessary to provide the service you asked for. Everything we set is either strictly necessary, or is there because you followed a link that asked for it.
So there is no banner to click through. We are aware that a consent dialog has become the visual signal that a site takes privacy seriously; we would rather have the property than the signal.
What we set
| Cookie | What it does | How long |
|---|---|---|
ghostnode-session |
Keeps you signed in, and keeps a half-finished order together as you move between the website and the panel. | Until your session ends |
XSRF-TOKEN |
Proves a form was submitted from our site rather than somebody else's. Without it, signing in and buying do not work. | Until your session ends |
gn_ref |
Set only if you arrive through an affiliate link, so that whoever referred you is credited. It holds a public referral code and nothing else — no identity, no profile, nothing that says who you are. | 45 days |
A note on scope
Our session cookie is deliberately host-only: it is offered back to the exact hostname that set it and to nothing else. That is a security decision rather than a privacy one, and it matters because our game servers live on subdomains of the same registrable domain. A cookie scoped widely enough to span our website and our panel would also be offered to the machines your files are downloaded from, and a session cookie is an identity. Host-only means it never leaves the place it belongs.
Cookies other people set
Payments are handled by Stripe, and Stripe sets its own cookies on the checkout page it hosts, principally to detect fraud. We never see your card details and we do not control those cookies; Stripe documents them in its own privacy policy. Following a link to our Discord server takes you to Discord, which sets its own cookies under its own policy.
Those are the only two, and neither can be avoided while still taking payments and running a community.
What we do not use
- No advertising or retargeting cookies.
- No third-party analytics, and no tracking pixels in our emails.
- No social media tracking widgets.
- No fingerprinting, and no local storage used as a substitute for a cookie we could not set.
Turning them off
Your browser can block or clear cookies at any time, from its settings or for our site specifically. Blocking the first two in the table means you will not be able to sign in or complete a purchase — not as a penalty, but because those cookies are the mechanism that makes signing in work. Blocking the third only means an affiliate does not get credited.
Because we set nothing that requires consent, there is no preference for us to store and therefore no “cookie settings” page. Clearing them in your browser is complete.
Questions
support@ghostnode.gg for anything about this page, or dpo@ghostnode.gg if it is part of a wider question about your personal data. What we do with data generally is in the Privacy Policy.
GhostNode Ltd is a company registered in England and Wales, company number 17414337. Registered office: 66 Paul Street, London, EC2A 4NA, United Kingdom. General enquiries support@ghostnode.gg; anything about personal data dpo@ghostnode.gg.