Privacy Policy

1. Data Controller

CryptoProxy ("we", "us", "our") operates the website cryptoproxy.net, providing privacy-focused 4G mobile proxy services for cryptocurrency and Web3 users. As the data controller, we determine the purposes and means of processing your personal data in accordance with the General Data Protection Regulation (GDPR).

Contact: support@cryptoproxy.net

2. Information We Collect

We collect the minimum personal data necessary to deliver our proxy service:

Account Information

• Email address (required for account creation)
• Display name (optional)
• Password (stored exclusively as a bcrypt hash)
• Account type and subscription status

Billing Records

• Subscription plan and billing cycle
• Payment method category (cryptocurrency or card)
• Payment processor reference ID (not your wallet address)
• Transaction amount and currency

Service Data

• Proxy access credentials tied to your subscription
• IP rotation event counts for billing reconciliation
• Support correspondence history

Connection Metadata

• IP address recorded at authentication events
• User-agent string from HTTP headers
• Authentication session cookie (strictly functional — no tracking)

3. How We Process Your Data

4. Crypto Payment Privacy

When you pay with cryptocurrency, NowPayments processes the transaction. We receive a payment confirmation reference but do not store your wallet address, transaction hash, or blockchain data. Crypto payments are inherently pseudonymous — we do not attempt to link payment addresses to your identity.

5. Zero-Log Infrastructure

CryptoProxy does not log:

• Proxy traffic content or payload data
• Destination URLs accessed through our proxies
• Wallet addresses used during proxy sessions
• Connection timestamps beyond what is required for billing
• IP addresses assigned to your proxy sessions

Our modem infrastructure is designed for privacy-first operation. We do not inspect, record, or analyze any traffic that passes through our proxy network.

6. Data Sharing & Processors

Your data is shared only with the following processors, each bound by data processing agreements:

We do not sell, license, or otherwise disclose your personal data to third parties for advertising or marketing. We do not use Google Analytics or any third-party tracking tools.

7. Data Retention

• Account data: retained for the lifetime of your account plus 2 years after deletion request
• Billing records: retained for 5 years as required by tax and financial regulations
• Service logs: retained for 90 days maximum, then purged automatically
• Support tickets: retained for 1 year after resolution, then deleted

8. Your Rights Under GDPR

If you are located in the EU/EEA, you are entitled to the following rights under GDPR:

• Access — obtain a copy of the personal data we process about you
• Rectification — correct any inaccurate or incomplete personal data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — request that we limit processing of your data
• Portability — receive your data in a structured, commonly used, machine-readable format
• Objection — object to processing carried out under legitimate interest

To exercise any of these rights, email us at support@cryptoproxy.net. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

9. Security Measures

We protect your data through multiple layers of security:

• Passwords hashed with bcrypt (never stored or transmitted in plain text)
• All connections encrypted via HTTPS/TLS 1.3
• Database access restricted to authenticated application processes behind a private network
• Infrastructure hardened with regular security audits and automated dependency patching
• No plaintext storage of proxy credentials — all secrets encrypted at rest

10. Policy Updates & Contact

We may revise this Privacy Policy to reflect changes in our services or legal requirements. Material changes will be communicated via email to registered users. Continued use of the service after notification constitutes acceptance of the updated policy.