Privacy Policy

Proxeta is the product name under which the Service is operated. This policy applies to the Proxeta website and Service: it describes what is processed, for which purposes, for how long, and how you can exercise your rights.

Privacy questions and requests are handled through the support channels listed at the end of this policy.

• We do not run advertising, tracking pixels or marketing cookies; there are none in the product.
• Our only analytics is the website statistics described in section 9. They use no cookies or other browser storage, are not combined with data from other websites and are not used for advertising.
• We do not use third-party error-tracking or product-analytics SDKs; the statistics script is our own.
• We do not fingerprint devices or browsers to recognise or track you. The only exception is the visitor identifier the statistics provider derives to count visitors, which changes every month (section 9).
• We do not build location profiles of visitors, and we do not perform geolocation lookups for access decisions. The website statistics record an approximate location (country, region and city) for each visit and use it only for statistics.
• We do not collect the content of the websites you visit through a proxy.
• We do not collect your payment card details or wallet private keys; crypto payments are handled by the payment provider.

Where a legal basis is required, we rely on: performance of our contract with you (account operation, proxy delivery, payments, renewals, support); our legitimate interests in keeping the Service secure, preventing abuse and defending legal claims, and in understanding, through cookieless website statistics, how the website is used; your consent for optional referral attribution storage; and compliance with legal obligations that apply to us (for example accounting or lawful requests). Where consent is the basis, you can withdraw it at any time without affecting lawfulness of processing before withdrawal.

Sign-in is passwordless. If you sign in with email, the Service generates a six-digit one-time code, stores it in an in-memory data store with a five-minute lifetime, sends it to your address using our email provider and deletes it after successful verification. If you sign in with Telegram, Telegram tells the Service your Telegram identifier and public username; the Service never receives your Telegram password.

After successful authentication the website stores a session token, a user identifier and the email address in first-party browser cookies. Those cookies are readable by the website JavaScript and are therefore not HttpOnly. See the Cookie Policy for names and durations.

Orders are paid through third-party cryptocurrency payment providers. Proxeta receives the payment result and the provider identifiers needed to reconcile an order; it does not receive your private keys and does not store wallet credentials. The provider processes your payment in accordance with its own terms and privacy notice.

When you order a static ISP proxy, the Service creates a technical provider identity derived from your Proxeta account identifier and asks the proxy provider to provision the address. Depending on the account type, the derived provider identity may be based on the account email or on the Telegram ID; the provider also receives the technical billing or account identifier required to provision the service. The derived identity is used for provisioning, renewal, replacement and reconciliation of your orders.

Proxy credentials returned by the provider are stored encrypted at rest in the Service database and are displayed to you in your account. Server-side logs record technical events of provisioning, renewal, swap and reconciliation so that a paid order cannot be duplicated, lost or double-charged.

Referral attribution uses an optional browser-storage item. It is written only after you accept the referral category in the cookie settings, it lasts 30 days, and it is deleted immediately if you refuse or withdraw that consent. The referral relationship between two accounts is stored on our side because it determines rewards, and it is visible only internally and to the accounts concerned.

We use a small number of service providers: a cryptocurrency payment provider, proxy network providers, an email delivery provider, Telegram for optional sign-in, our own hosting and database infrastructure, and the third-party IP-check endpoints used by the browser extension (which never receive data from your Proxeta account). Providers process data only for the purposes described here and subject to their own obligations. Where a transfer of personal data to another country occurs, it takes place under the terms offered by the relevant provider.

For website statistics we use Umami Cloud, whose servers are in the United States and the European Union. The statistics are sent by a short script of our own; no Umami code runs on the website. The script runs only on proxeta.io, sets no cookies, and neither stores anything in your browser nor reads anything stored there. When a page opens it sends the page address, page title, referring page, screen size and browser language, and when you click a marked button it sends the button's name. Before anything is sent, it removes every query parameter from the page address except the five campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content), removes the part after "#", keeps only the scheme, host and path of the referring page, and does not send the Telegram sign-in callback page at all. Umami uses your IP address and browser details to derive the approximate location and a pseudonymous visitor identifier that changes every month, and does not store the IP address. Umami keeps a record of each visit (approximate location down to the city, browser, device, and the pages and marked clicks of the visit) for up to six months. The statistics are not linked to your Proxeta account. If your browser sends a Do Not Track or Global Privacy Control signal, nothing is sent.

Access to production systems is restricted, proxy credentials are encrypted at rest, payment provider callbacks are verified, and authentication endpoints are rate-limited. No service can promise absolute security. Session cookies for the website are readable by the website JavaScript because the current authentication architecture relies on them, so they are not HttpOnly cookies.

Depending on the law that applies to you, you may have rights of access, correction, deletion, restriction, objection, portability, withdrawal of consent and complaint to a supervisory authority. The Data Rights page explains how to make a request and how we handle it.

The Service is intended for persons who are at least 18 years old. It is not directed to children, we do not knowingly create accounts for children, and we do not market the Service to children.

Where a jurisdiction requires a notice at or before collection, this section is that notice: we collect the email address and, optionally, the Telegram identity to create your account; payment and order records to deliver what you paid for; technical logs to operate and protect the Service; and cookieless website statistics to understand how the website is used. We do not sell personal data and we do not share it for cross-context behavioural advertising. Categories, purposes and retention periods are listed above.

Proxeta does not intentionally market or offer its paid Service to persons located in the European Economic Area or the United Kingdom. Consistently with that position, the Service does not build visitor location profiles and does not perform GeoIP eligibility profiling: your IP address is not used to decide whether you may access the Service. The approximate location recorded by the website statistics (section 9) is used only for statistics.

This statement does not remove rights you may have under mandatory law.

This policy is versioned; the effective date, last-updated date and version are shown at the top of this page. Every revision is dated in "Last updated" and applies from the day it is published. A change that requires you to accept or acknowledge the legal documents again is published under a new version and legal bundle, and you will be asked to confirm it.

Privacy questions and requests: Proxeta support center or the Proxeta Telegram bot.