Engineering Deep Dive

The Ghost Protocol

How we architected a distributed, "Stateful but Stateless" privacy engine to automate the web's hardest targets.

The "Nuclear Option"

Most privacy tools are monthly subscriptions because it's a better business model for them. We built DataGhost because we believe removing your data should be a transaction, not a rent payment.

To make this economically viable ($49 one-time), we had to engineer a system that is incredibly efficient, automated, and doesn't hoard data forever.

  • No Monthly Subscriptions
  • No Long-Term Data Retention
  • One-Time "Fire and Forget" Removal

Distributed Architecture

Frontend (Edge)

Next.js 14 App Router hosted on Netlify. Handles payments, user input, and initiates the protocol.

The Handshake

"Fire-and-Forget" pattern. The UI triggers the job, the worker responds 202 Accepted, and processing happens asynchronously to prevent timeouts.

The Muscle

Node.js Worker on Railway. Runs headless Playwright browsers with stealth injection to automate removals.

Stealth Automation

Standard headless browsers get blocked instantly by "Hard Targets" like Whitepages or BeenVerified (using Cloudflare/Datadome).

DataGhost uses Fingerprint Injection. We randomize the WebGL, AudioContext, and Canvas fingerprints of our worker bots to mimic real Chrome users on residential IPs. This allows us to automate removal forms that usually require manual human intervention.

Stateful but Stateless

We follow a strict data lifecycle policy to minimize liability for us and risk for you.

  • Day 0-45: Data is stored (encrypted) in Supabase to track removal status and perform re-scans.
  • Day 46: A Cron job permanently wipes your PII from our database. We retain zero logs.

The Stack

Next.js 14TypeScriptTailwind CSSSupabase RLSPostgreSQLNode.jsExpressPlaywrightResend APILemon SqueezyRailwayNetlify