Privacy policy
What we collect, and why.
Short version: only what the service needs, kept for as little time as we can, and never sold.
Last updated 13 November 2026
Who we are
The controller of your personal data is Ghostlyease (Max Pople-James trading as Ghostlyease), a UK sole trader. Ghostlyease runs Listblock.
ICO registration number: ZC300252
Contact, by email only: admin@ghostlyease.com
What we collect
| Data | Why | How long |
|---|---|---|
| Account email address | To sign you in (we email you a sign-in code) and to contact you about your account | Until you delete your account |
| Registered places (up to two): a name for each, whether it's a phone or a router, and your router's public IP address | So the service knows which connections are yours | Until you remove them or delete your account |
| DNS query logs (the names your devices look up) | To run the service, fix faults and build your weekly report | 24 hours, then deleted |
| Source IP addresses of those lookups | We may check these against your unique DNS setting, so we can tell if it's being used in more places at once than you've registered, and email you if it is | Only in the DNS query logs, which are deleted after 24 hours |
| Aggregate statistics (counts, not individual lookups) | To show your report and keep the service healthy | 8 days |
| Fair-use check results: the time, how many connections were using your setting at once, and whether we emailed you. No IP addresses. | So we email you no more than once a month, and can explain if you ask why we did | 90 days |
| Resets of your DNS setting: when we told you, and the date of the reset | So we can show what happened if your setting has had to be reset | Until you delete your account |
| Google Play purchase tokens | To check your subscription is active | While you're subscribed, and until you delete your account |
| Visit counts | To see how many people use this website. We use Umami, which we host ourselves. It sets no cookies and doesn't track you across sites or keep personal details. | Counts only; nothing that identifies you |
We don't collect anything else about you. We don't ask for your name, address or phone number.
We may look at the source IP addresses in the DNS query logs to check that your unique setting isn't being used in more places at once than you've registered. If it is, we'll email you at the address on your account. The check runs every 15 minutes and counts how many different connections use your setting at the same time. We only email you if it carries on for about an hour, and we don't keep the addresses themselves. We don't use this to profile where you go.
Our lawful bases
- Contract: we need your email, IP addresses, DNS lookups and purchase token to provide the service you signed up for.
- Legitimate interests: keeping the service secure and working, spotting abuse, and checking the service is being used as agreed. We also count visits with Umami under our legitimate interest in knowing how many people use the website, in a way that doesn't identify you.
What we don't do
- We don't sell your data.
- We don't share it for advertising. We don't run ads.
- We don't set cookies, and we don't use third-party fonts or advertising trackers. Visit counts are described above.
Who handles your data for us
- Akamai / Linode hosts our servers in London, UK.
- Google Play handles billing and subscriptions. Google has its own privacy policy for what it collects.
- Fastmail (Fastmail Pty Ltd, an Australian company) delivers sign-in codes and account emails. They see your email address and the message. Fastmail may handle this outside the UK, for example in Australia or the US, and protects it under standard contract clauses, which are part of its data processing terms.
- Umami counts visits. We host it ourselves, so no analytics company is involved.
When your device's lookup can't be answered by our own resolver, it may briefly be passed to Quad9 or Cloudflare. We explain this on How it works.
Your rights
Under UK GDPR you have the right to:
- be told what we hold about you, and get a copy
- have wrong data corrected
- have your data deleted (you can do this yourself: see Delete account)
- restrict or object to how we use it
- take your data to another service
To use any of these rights, email admin@ghostlyease.com. We'll reply within one month.
Complaints
Please tell us first, and we'll do our best to put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.
Changes
If we change this policy in a way that matters, we'll update the date above and tell signed-in users by email.