Privacy policy.

We collect the minimum needed to run a prepaid proxy service:

• Account data: email address, username, a hashed password, and optional two-factor secret.
• Security data: the IP address used at registration and sign-in, for abuse prevention and account recovery.
• Billing data: crypto invoice identifiers, amounts and on-chain transaction references. We never see or store card details because we do not accept cards.
• Usage metering: bytes transferred per plan, connection counts and error rates. This is what you are billed on and what the usage graphs show.
• Support data: messages you send through live chat or email, and the account context attached to them.

We do not inspect, log or store the content of traffic that passes through the proxies.

Operate your account and bill usage; send transactional email such as verification codes, password resets and payment confirmations; detect fraud and network abuse; answer support requests; and comply with legal obligations.

We do not sell personal data and we do not use it for third-party advertising.

A small number of processors handle data on our behalf, each limited to its job:

• Crisp (live chat): your chat messages, and your email and username when you are signed in.
• OXAPay (crypto payments): invoice amount, a payment reference and the email attached to the invoice.
• Resend (transactional email): your email address and the message being delivered.
• Cloudflare (edge network, bot protection): connection metadata such as IP address and user agent.
• Our upstream network provider: the proxy credentials and usage counters for your plans, never your identity.

We disclose data to authorities only when legally compelled, and we narrow every request to what the law requires.

Account and billing records are kept for as long as your account exists and for the period tax and anti-fraud law requires afterwards. Usage metering is kept for 90 days in detail and as aggregates thereafter. Support conversations are retained for 12 months.

We use first-party storage for your session, language, theme and sidebar preferences. The live chat widget sets its own cookie to keep a conversation open across pages. We run no advertising trackers.

You can view and change your account details in Settings, export your invoice history, and ask for your account and data to be deleted. Deletion requests are verified over live chat and completed within 30 days, except for records we must keep by law.

If you are in the EU, UK or a jurisdiction with similar rights, you may also ask for a copy of your data or object to a specific use. Write to [email protected].

Passwords are hashed with bcrypt, two-factor authentication is available to every account, sessions use short-lived tokens, and all traffic to the site is encrypted in transit. Report a vulnerability to [email protected] and we will respond quickly.

We may update this policy; the date above is revised and material changes are announced in your dashboard.