Privacy policy
What we collect, and why.
Short version: only what the service needs, kept for as little time as we can, and never sold.
Last updated 12 November 2026
Who we are
The controller of your personal data is Ghostlyease (Max Pople-James trading as Ghostlyease), a UK sole trader. Ghostlyease runs Listblock.
ICO registration number: [ZB NUMBER, add when issued]
Contact, by email only: [CONTACT EMAIL]
What we collect
| Data | Why | How long |
|---|---|---|
| Account email address | To sign you in (we email you a sign-in code) and to contact you about your account | Until you delete your account |
| Registered IP addresses | So the service knows which connections are yours | Until you remove them or delete your account |
| DNS query logs (the names your devices look up) | To run the service, fix faults and build your weekly report | 24 hours, then deleted |
| Aggregate statistics (counts, not individual lookups) | To show your report and keep the service healthy | 7 days |
| Google Play purchase tokens | To check your subscription is active | While you're subscribed, and until you delete your account |
We don't collect anything else about you. We don't ask for your name, address or phone number.
Our lawful bases
- Contract: we need your email, IP addresses, DNS lookups and purchase token to provide the service you signed up for.
- Legitimate interests: keeping the service secure and working, and spotting abuse.
What we don't do
- We don't sell your data.
- We don't share it for advertising. We don't run ads.
- We don't use analytics on this website. No tracking scripts, no third-party fonts, no cookies.
Who handles your data for us
- Akamai / Linode hosts our server in London, UK.
- Google Play handles billing and subscriptions. Google has its own privacy policy for what it collects.
- Our email provider delivers sign-in codes and account emails. They see your email address and the message.
When your device's lookup can't be answered by our own resolver, it may briefly be passed to Quad9 or Cloudflare. We explain this on How it works.
Your rights
Under UK GDPR you have the right to:
- be told what we hold about you, and get a copy
- have wrong data corrected
- have your data deleted (you can do this yourself: see Delete account)
- restrict or object to how we use it
- take your data to another service
To use any of these rights, email [CONTACT EMAIL]. We'll reply within one month.
Complaints
Please tell us first, and we'll do our best to put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.
Changes
If we change this policy in a way that matters, we'll update the date above and tell signed-in users by email.