GDPR Compliance

Our Position

GhostBanner is designed from the ground up to be GDPR-compliant by default. We believe privacy-first advertising is not just legally necessary — it is better advertising.

Legal Basis for Processing

• Contract performance (Art. 6(1)(b)): processing publisher and advertiser account data to deliver the service.
• Legitimate interest (Art. 6(1)(f)): logging anonymised impression data for fraud detection, billing accuracy, and service quality.
• Consent is NOT required for ad delivery, because no personal data is processed in ad targeting.

No Consent Banner Required

Publishers using only GhostBanner for advertising do not need to display cookie consent banners for our ads. We do not set cookies, do not use cross-site tracking, and do not process personal data in the ad delivery process.

Data Subject Rights

• Right of access: you may request a copy of your data at any time.
• Right to erasure: you may request deletion of your account and all associated data.
• Right to portability: you may export your analytics data in CSV format from your dashboard.
• Right to object: you may object to processing for legitimate interest purposes.

Data Transfers

All data is processed within the EU/EEA. We do not transfer personal data to third countries.

DPO Contact

Email: privacy@ghostbanner.com