Privacy policy - v14.1
Ghostline processes only the information needed to run accounts, preserve progression, protect the platform, deliver optional purchases, publish player-controlled credentials and respond to support or abuse reports. This policy is written to support POPIA, GDPR and similar privacy-law expectations.
Ghostline HackOps is the responsible party/controller for account and gameplay information collected on this site. Privacy, abuse and data-rights requests can be submitted through Contact or, after login, the in-game Report Issue flow.
Account handle, email address, password hash, session state, preferences, progression, assessment attempts, inventory, contract activity, reports, support messages, payment references, entitlement records, security logs and optional public credential records.
To create and secure accounts, operate the game, save progress, enforce the safety boundary, prevent abuse, investigate incidents, deliver optional purchases, maintain accounting records and let operators publish or revoke credential verification records.
Processing is based on contract performance, legitimate security and operational interests, legal/accounting obligations, consent for optional public credentials or optional advertising cookies, and consent/opt-out handling for marketing where applicable.
Career credentials are private by default. A public verification record is created only when the operator publishes it. Public records exclude email, account ID, answers, private evidence, target data and internal moderation notes.
Questions, choices, attempts, scores, completion records and integrity data are stored to protect course quality and progression. Correct answers and accepted aliases remain server-side and are not exposed to the browser payload.
PayFast hosts payment entry. Ghostline stores order, product, amount, provider reference, verification status, entitlement and reconciliation events. Ghostline does not receive or store card numbers, card security codes or online-banking credentials.
Necessary cookies keep sessions secure. Optional advertising storage is controlled through the Cookie Policy and consent center. Public-page AdSense is not loaded by Ghostline until advertising consent has been recorded.
Information is shared only with service providers needed to host, secure, process payments, deliver advertising after consent, comply with law, investigate abuse or protect the platform. Ghostline does not sell player account data.
Account and progression data is kept while the account is active. Security logs, payment records and abuse records may be retained longer where needed for safety, fraud prevention, legal claims, accounting or dispute handling.
Passwords are hashed, sessions use hardened cookie settings, payment fulfillment is provider-verified, and gameplay mutations are server-authoritative. No security control is perfect, so suspected compromise should be reported quickly.
Depending on your location, you may request access, correction, deletion, restriction, objection, portability, consent withdrawal or review of automated decisions. Start from Data Rights.
Ghostline is not directed at children. Players who are not old enough to form a binding agreement or consent to personal-information processing in their jurisdiction should use the site only with a parent or guardian.