Overview
ProtocolGhost currently uses a static website architecture. This policy must be reviewed and updated whenever analytics, ecommerce, contact-form delivery, authentication, or third-party services are activated.
This Privacy Policy explains what information ProtocolGhost (operated by Ohexion LLC, based in Idaho, United States, referred to as "ProtocolGhost," "we," "us," or "our") collects when you visit protocolghost.com or use our courses, community, book, and merchandise offerings (collectively, the "Services"), why we collect it, how we use and protect it, and the choices and rights available to you. It should be read together with our Terms of Service and Cookie Policy.
1. Information We Collect
Information you provide directly. When you use the contact workflow, enroll in a course, join a paid tier, or otherwise submit a form, we may collect your name, email address, organization, phone number, subject and category of inquiry, preferred contact method, urgency level, message content, and your explicit consent to that submission. Where our contact-form backend is active, submissions are stored in a database along with your IP address and browser user-agent string for spam prevention, rate-limiting, and abuse investigation, and a copy is emailed to our team.
Information collected automatically. Like most websites, our hosting infrastructure logs standard technical data for every request, such as IP address, browser and device type, referring page, and timestamps, for security and operational purposes. This site does not currently run analytics, advertising, or tracking scripts of any kind — see our Cookie Policy for the current, itemized list of cookies in use.
Information from purchases. If and when book or merchandise checkout functionality goes live, purchase-related information (such as shipping address and order details) will be collected and processed, and payment-card data will be handled directly by our payment processor under that processor's own privacy and security practices — ProtocolGhost does not store full payment-card numbers.
Information from third-party community platforms. Our community lives on third-party platforms, currently Discord and Twitch, linked from the Community page. Any information you share there is governed by that platform's own privacy policy, not this one.
2. Cookies
We use cookies only to the extent described in our Cookie Policy. In summary: this site does not set nonessential (analytics, advertising, or tracking) cookies. A strictly necessary, first-party session cookie is used only when our contact-form backend is active, to support secure form submission (CSRF protection) and abuse rate-limiting.
3. How We Use Your Information
- To respond to inquiries submitted through the contact workflow and route them to the correct team member;
- To operate, maintain, and secure the Services, including detecting and preventing spam, fraud, and abuse;
- To fulfill course enrollments, book orders, or merchandise purchases once those functions are active;
- To comply with legal obligations, respond to lawful requests, and enforce our Terms of Service; and
- To communicate with you about your own inquiry, order, or enrollment. We do not use contact-form submissions for unsolicited marketing.
4. Legal Bases for Processing (EEA/UK Visitors)
If you are located in the European Economic Area or United Kingdom, our bases for processing personal data are: your consent (for example, checking a consent box on the contact form); our legitimate interest in operating a secure, functioning website and responding to inquiries; and, where applicable, performance of a contract (for course enrollment, book, or merchandise transactions) or compliance with a legal obligation.
5. How We Share Information
We do not sell your personal information. We may share it only with: service providers who help us operate the Services under confidentiality obligations (for example, our hosting provider, database provider, transactional email provider, and, once active, a payment processor); law enforcement or regulators when required by valid legal process or to protect the rights, safety, or property of ProtocolGhost or others; and a successor entity in the event of a merger, acquisition, or sale of assets, subject to this policy or a materially similar one.
6. Data Retention
We retain contact-form submissions and related technical metadata (IP address, user agent) for as long as reasonably necessary to resolve the inquiry, defend against abuse or fraud, and meet legal or accounting obligations, after which they are deleted or anonymized. Course, book, and merchandise order records, once that functionality is active, are retained as required for tax, warranty, and legal purposes.
7. Data Security
We apply reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the data involved, including encrypted transport (HTTPS), parameterized database queries, CSRF-protected form submission, honeypot and rate-limiting anti-abuse controls, and secure, HTTP-only session cookies. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
8. Children's Privacy
The Services are not directed to, and are not knowingly used by, anyone under 16 years of age, consistent with our Terms of Service. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us personal information, contact us via the contact page and we will delete it.
9. Your Privacy Rights
Depending on your location, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information, to object to or restrict certain processing, and to withdraw consent previously given. To exercise any of these rights, contact us through the contact page; we will respond within the timeframe required by applicable law. We will not discriminate against you for exercising these rights.
10. California Privacy Rights
California residents may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. ProtocolGhost does not sell or share personal information as those terms are defined under the CCPA/CPRA.
11. International Users and Data Transfers
ProtocolGhost is based in the United States, and information we collect is processed and stored in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, which may have different data-protection laws than your home jurisdiction.
12. Third-Party Links
The Services link to third-party sites and platforms — including Discord, Twitch, YouTube, GitHub, Patreon, other social platforms, and HolliBae (hollibae.com), a separate, independently operated brand. This Privacy Policy does not apply to those third parties; review their own privacy policies before sharing information with them.
13. Do Not Track
Because this site does not currently deploy tracking or analytics scripts, there is presently nothing for a "Do Not Track" browser signal to affect. If and when analytics or advertising technology is introduced, this policy and our Cookie Policy will be updated to describe how such signals are honored.
14. Security Incident Notification
If we become aware of a security incident that compromises your personal information in a manner requiring notice under applicable law, we will notify affected individuals and any required regulators without undue delay and in accordance with that law.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or legal requirements. The "Last updated" date above reflects the most recent revision. Material changes will be reflected on this page; your continued use of the Services after an update constitutes acceptance of the revised policy.
Project status
Contact
Use the contact page for questions or requests.
For privacy-specific requests — access, correction, deletion, or questions about this policy — use the same contact page and note that your inquiry relates to privacy so it can be routed correctly.