Users can protect their data from large language models by embedding ghost sentences in their public documents.