A simple account for a simple purpose: helping you access the learning library.
Last updated 6 October 2026
What your account stores
When you sign in, Ghost in the Repo receives your Google account identifier, verified email address, and name. We store these to identify your account and give you access to the books. We do not request access to Gmail, Drive, your contacts, or your Google password.
Cookies and sign-in
We use an essential session cookie that expires after seven days. A temporary sign-in cookie expires after ten minutes. These cookies support authentication, not advertising. Session identifiers are stored as hashes in the database. Signing out revokes the current session.
Where your data is processed
Google handles your sign-in. Cloudflare hosts this website, stores member records in D1, and stores the books in a private R2 bucket. These providers process technical data such as IP addresses to deliver and secure their services. Infrastructure processing can occur in multiple countries. See Google’s privacy policy and Cloudflare’s privacy policy.
Analytics
We use PostHog to count visits: which pages are read, which links and buttons are clicked, which site referred you, your browser and device type, and whether a visit led to a sign-in or a book or kit download. PostHog sets no cookies and stores nothing in your browser. It tells visitors apart with a hash of your IP address and browser details that changes every day and cannot be turned back into either. This browsing data is not linked to your account. See PostHog’s privacy policy.
When you sign in, and each time you open or download a book or download a team kit, we also record that event in PostHog against your account, with your name and email address. This shows us which guides members use. Your Google account identifier and password are not sent.
Cloudflare Web Analytics also counts page views, referring sites, page load times, and the country a visit comes from. It uses no cookies, stores nothing in your browser, and does not follow you across sites.
Retention and deletion
Your profile remains until you delete your account. Use Your account to remove your profile and revoke all sessions. Expired session and temporary sign-in records are removed by a daily cleanup. Provider backups and security records may remain for their normal retention periods.
Your information is used for access
Signing in does not subscribe you to marketing emails. This site does not include advertising, and its analytics do not follow you to other sites. You can browse public pages without an account. Book access requires sign-in.
Back to the learning library