{
  "slug": "ghost",
  "category": "blogging",
  "name": "Ghost",
  "description": "Open source publishing platform for blogs and newsletters with paid memberships, run by the non-profit Ghost Foundation. Available as hosted Ghost(Pro) or self-hosted.",
  "website": "https://ghost.org",
  "source": "https://github.com/TryGhost/Ghost",
  "license": "MIT",
  "platforms": [
    "web"
  ],
  "jurisdiction": {
    "code": "SG",
    "name": "Singapore",
    "eyes": null,
    "eu": false,
    "gdpr": false,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 47,
  "coverage": 100,
  "summary": "Ghost scores 47 out of 100 (grade D) on the blogging criteria. It meets 3 of 8 criteria: open source, no ads or data sales and TLS configuration. It partly meets security headers. It does not meet no trackers or telemetry, independent audit, transparency report and tells users about requests. It is based in Singapore: Not in the Five, Nine or Fourteen Eyes. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.",
  "url": "https://privacyratings.com/blogging/ghost/",
  "markdown": "https://privacyratings.com/blogging/ghost/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://github.com/TryGhost/Ghost/blob/main/LICENSE",
      "note": "MIT. Ghost(Pro) runs the same open source software, which can also be self-hosted."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://ghost.org/privacy/",
      "note": "The ghost.org website loads Ahrefs and Dub analytics and the FirstPromoter affiliate tracking script."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://ghost.org/about/",
      "note": "Non-profit funded by Ghost(Pro) subscriptions, and the privacy policy states it does not sell personal data."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No independent audit is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No transparency report or government request policy is published."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published policy on notifying users about data requests."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=account.ghost.org&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=account.ghost.org",
      "note": "Grade B (70/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "B",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T06:59:57.819Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}