Is my content private?

Running the desktop or open-source edition? The local answer is a little different — your content never leaves your Mac at all. Read the local edition’s privacy page →

Your content stays yours. In the hosted workspace, connecting your Ghost blog is read-and-write access to your own Admin API — the same kind of access any publishing tool needs to read your posts and push reviewed changes back. There’s no separate copy of your blog living somewhere you can’t see, and nothing here makes your site harder to leave: the workspace is read-and-write to a CMS you own, and you can disconnect it at any time.

Crucially, nothing touches your live Ghost site until you’ve approved it. Every change — yours or an AI recipe’s — shows up as a diff first: which posts would change, exactly what would change in each, and anything flagged as a conflict. You publish what’s right and send the rest back, and every publish keeps a snapshot behind it. So “private” here also means predictable — you’re never surprised by a change you didn’t see, and Specter isn’t an AI that quietly ingests your archive to train something. It’s the workflow and control layer; you decide what ships.

If you’d rather your posts never leave your own machine at all — synced to a folder of plain .md files on your disk, with the only network calls going straight from your Mac to your Ghost blog — that’s exactly what the desktop and open-source edition is for. And if you want to understand the build-vs-buy reasoning behind the whole design, see why not just use the Ghost API directly.