Privacy Policy

The platform is a residential proxy network, and privacy is not a feature we added later. It is the way the service was designed from the start. Our guiding principle is simple: we try to know as little about you as possible, and we hold only the bare minimum of information needed to run the service.

Your account is anonymous. There is no email, no password, no name, no phone number, and no identity check. We also do not log the content of your proxy traffic or the destinations you connect to. This policy explains, in plain English, the little we do hold, why we hold it, and the things we deliberately never collect.

The strongest privacy protection is data that never exists in the first place. The platform is built so that the following information is simply never gathered:

• No name, no email address, and no phone number. Accounts are created with a randomly generated numeric access token, which is the only credential.
• No KYC, no identity documents, and no identity verification of any kind.
• No logging of the content of your proxy traffic, and no logging of the websites or destinations you connect to.
• No selling of your data, and no sharing of it with advertisers or data brokers, ever.
• No third-party advertising trackers and no behavioral profiling.

To operate the service, prevent abuse, and process payments, the platform holds a small and deliberately limited set of information:

• A secured, hashed version of your access token. This is the only credential tied to your account.
• Your account balance and aggregate usage totals, such as the total number of bytes used. These are running totals, not a record of what you did with the connection.
• A record of each deposit: the amount credited, the cryptocurrency and network used, the settlement rate, the deposit address, and the on-chain transaction reference. This is kept against your access token so that you can produce a receipt for a past payment, and it is deleted with your account. A payment that arrives after the account it was meant for no longer exists is recorded separately and kept indefinitely, so that it can still be found if you contact us about it; that record holds no account identifier, only the payment's amount, cryptocurrency and network, deposit address, transaction references, status, and time.
• If you redeem a prepaid voucher, a record of the redemption kept against your access token: the amount credited and when. It is deleted with your account. So that no voucher can ever be credited twice, we also keep a separate entry for each redeemed voucher: a one-way digest of the voucher, the amount, the time, and a marker that only our servers can compute. That entry names no account, is kept indefinitely, and is not deleted with yours. Once your account is gone the entry itself can no longer be matched to you, although our operational logs, kept for troubleshooting, can link the two for as long as those logs are kept.
• Payment processing itself, including the handling of your funds, is carried out by our third-party cryptocurrency payment processor.
• Limited operational and security logs that are needed to keep the service running and to protect it from abuse and attacks.
• An optional two-factor authentication (2FA) secret, stored only if you choose to enable TOTP 2FA.
• The content of any support ticket you open: its subject, every message in the conversation, and the site address you opened it from. Support tickets are answered only by the operator; no other customer, reseller or whitelabel partner can read them, and they are deleted with your account.

The platform uses browser storage and cookies only for what is essential to make the website work. Specifically, this covers your session state (so you stay signed in while using the dashboard), your language preference, and — only if you choose to fill them in — the billing details you enter when generating an invoice or receipt.

Signing in also creates a security key inside your browser, held in its local database. It is what proves to us that a request comes from the device you signed in on, and it replaces the older practice of tying your session to your IP address — so changing network, or moving between mobile and wi-fi, no longer signs you out. The private half of that key is generated so that it cannot be read or exported by anything, including our own code; only its public half ever reaches us. Signing out deletes it, and clearing your browser's site data deletes it too, which means you will need to sign in again.

Those billing details (company name, address, tax registration number and billing email) are stored in your browser and nowhere else. They are never transmitted to us, we hold no copy of them, and signing out erases them from this device.

We do not use third-party advertising trackers, analytics profiles, or cross-site tracking cookies. The storage we use stays in your browser and serves the function of the service itself.

Payments are made with cryptocurrency and are handled by a third-party payment processor. The platform keeps a payment record linked to your account balance, while the processor handles the transaction itself under its own terms and privacy practices.

Card payments made directly to us may be added in the future. If they are, they will be processed by a third-party card processor. Please note that card payments are inherently linked to the cardholder identity and are therefore not anonymous, unlike cryptocurrency payments. If you want to keep your account anonymous, use cryptocurrency.

Prepaid vouchers are sold by an authorized third-party issuer, which takes the payment for them and handles any card, payment, or contact details you give it under its own terms and privacy practices. We do not receive those details. When you redeem a voucher, we read only whether it has been paid for and how much it is worth, and we mark the issuer's record of it as redeemed, with the time and a one-way marker in place of any account identifier. Your access token is never shared with the issuer. A voucher bought by card is not anonymous at the point of purchase, because card payments are linked to the cardholder through the bank and payment processor involved. The dashboard's card option opens the issuer's checkout, so card details are entered there and never on our pages.

The residential IP addresses used by the Service are provided by Earnify, an upstream bandwidth-sharing network whose participants consent to share their connection. When you route traffic through the Service, it is carried over IP addresses on Earnify's network.

Earnify operates under its own terms and privacy practices, which you can review at earnify.su/legal/privacy. We do not control, and are not responsible for, Earnify's independent data practices.

We use the limited information we hold only for the purposes of operating the platform. Concretely, that means we use it to:

• Provide and operate the proxy service, including authenticating your access token and tracking your balance and usage.
• Keep the service secure and prevent abuse, fraud, and attacks.
• Process payments and keep your account balance accurate.
• Read and respond to the support tickets you open, and keep the conversation available to you while it is in progress.

We do not sell your data, and we do not trade it. We share data only in the narrow circumstances described below:

• Service providers and processors: we rely on a small number of providers, such as the third-party cryptocurrency payment processor, strictly to deliver the service. They receive only what they need to perform their function.
• Voucher issuer: when you redeem a voucher, the issuer's record of it is updated to show that it was redeemed, when, and the one-way marker described under Payment Information. We write nothing else about you or your account to that record.
• Lawful legal requests: we may respond to valid and lawful legal requests, but any disclosure is limited strictly to the minimal data we actually hold.
• A request cannot force us to hand over information that does not exist. Because we do not log proxy traffic content or the destinations you visit, those records are not available to anyone, including us. The platform cannot produce data it does not have.

We keep information only for as long as it is needed to provide the service to you, or for as long as we are required to retain it.

Because we collect so little to begin with, there is very little to retain. Aggregate usage totals and account balance exist to run your account; limited operational and security logs are kept only for as long as they are useful for running and protecting the service, and no longer than necessary.

Support tickets are kept while the conversation is live and for 30 days after it is closed, after which the ticket and all of its messages are deleted automatically. A ticket left with no activity at all is removed after 180 days. Deleting your account deletes your tickets with it.

The redemption marker on a voucher issuer's record is kept by the issuer under its own practices, for about a year after the voucher was paid for, and it is not removed when you delete your account. The marker does not identify you. Our own entry for each redeemed voucher is kept indefinitely, because it is what stops a voucher from being credited twice.

Protecting your connection and the little data we hold is central to how the platform is built. Security measures include:

• Strong encryption for connections, using X25519 key exchange, ChaCha20-Poly1305 for encrypted channels, and TLS.
• Access tokens are never stored in plain form. We hold only a secured, hashed version.
• Optional two-factor authentication (TOTP 2FA) that you can enable for an extra layer of account protection.

The platform is not intended for anyone under the age of 18. The service is meant for adults, and we do not knowingly create accounts for or collect information from minors. If you are under 18, please do not use the service.

The platform operates a global network spanning many countries. As a result, the limited information we hold may be processed, stored, or handled in countries other than the one you are located in.

By using the service, you understand that your information may be processed in these other locations. We apply the same minimal-data and privacy-first approach wherever processing takes place.

You stay in control of your account. Your access token is your only credential, so keeping it private keeps your account private; if you lose it, it cannot be recovered through personal details, because we hold none. You may enable or disable optional 2FA at any time, and you can stop using the service whenever you wish.

Depending on your location and applicable law in the Russian Federation, you may have additional rights regarding the information that relates to you, such as the right to ask what we hold or to request deletion. Because the platform is anonymous and holds so little, we can act only on the minimal data actually tied to your account. To make a request, contact us through the channel below.

We may update this Privacy Policy from time to time, for example to reflect changes to the service or to keep it clear and accurate. When we make a meaningful change, we will update the policy here. Your continued use of the platform after an update means you accept the revised policy.

If you have any questions about this policy or your privacy, you can reach our support team via the support tickets page in your dashboard.