Document

Privacy Policy

How we collect, use and protect personal data

Current version

01Who we are

1.1.

the operator of the ProxyField service ("ProxyField", "we", "us") is the data controller of the personal data described in this Policy.

1.2.

This Policy covers visitors to proxyfield.io (the "Website"), people with a ProxyField account and people who contact us. Requests about personal data can be sent to support@proxyfield.io.

1.3.

We process personal data in line with the data protection laws that apply to us, including, where they apply, the EU General Data Protection Regulation (GDPR), the UK GDPR and U.S. federal and state privacy laws.

02What we do not collect

2.1.

We do not record the content of your traffic or the pages you visit. HTTPS traffic passes through a tunnel and is not decrypted.

2.2.

We never ask for and do not receive the private keys or seed phrases of your wallets. Card details are entered on the Payment Partner's page, and we do not receive them. We do not ask for bank details or ID for ordinary purchases. Blockchain transactions are public by nature: the transaction ID and wallet addresses are visible on the blockchain, independently of us.

2.3.

We do not process special categories of personal data or biometric data. The Services are not offered to anyone under 18, and we do not knowingly collect personal data from children.

03What we collect, why and for how long

For each purpose we process only the data we need.

3.1Sign-up and account access

Data: Email address; password (stored only as a hash); account ID and email address if you sign in with Google or GitHub; sign-in IP addresses, browser and device data; approximate country based on your IP address.
Legal basis: Performing our contract with you (GDPR Art. 6(1)(b)).
Retention: Until the account is deleted.

3.2Providing the Services and payments

Data: Email address; orders; payment data — amount, date and method; for cryptocurrency, the coin and network, transaction ID and sending wallet address; for cards, the payment reference and status; Traffic used; connection settings and allowlisted IP addresses.
Legal basis: Contract; our legal obligations, including tax and accounting rules (Art. 6(1)(c)).
Retention: For as long as the account is open; payment records for the periods required by tax and accounting law.

3.3Measuring where visitors come from

Data: A random visitor number; where your first visit came from and the page you landed on; the pages you open on the Website and your clicks on sign-up links; approximate country; device type. If you create an account, your first visit's source is kept with it. Not your IP address.
Legal basis: Our legitimate interest in understanding which channels bring customers (Art. 6(1)(f)), or your consent where the law requires it (Art. 6(1)(a)).
Retention: Visit records for 13 months; the source of your first visit until the account is deleted.

3.4Connection metadata

Data: The IP address that connects to our gateway, connection times and the amount of data transferred. Never the content of your traffic or the pages you visit.
Legal basis: Contract; our legitimate interest in counting Traffic, keeping the network running and handling abuse reports (Art. 6(1)(f)).
Retention: Up to 30 days. Daily Traffic totals are kept with the account.

3.5Service emails and payment confirmations

Data: Email address.
Legal basis: Contract.
Retention: Until the account is deleted.

3.6Support and complaints

Data: Email address; the messages and files you send us.
Legal basis: Contract; our legitimate interest in answering you and defending legal claims.
Retention: Until the request is resolved and for up to 3 years after that.

3.7Security and fraud prevention

Data: IP addresses, browser and device data, cookies.
Legal basis: Legitimate interest in protecting the Website, the network and our customers.
Retention: Up to 1 year.

3.8Verification on signs of abuse and for resellers

Data: The information we ask for in the check, as described on our verification page.
Legal basis: Legitimate interest in preventing abuse; legal obligations.
Retention: For as long as the check and any related legal claim require.

3.9Affiliate program

Data: Referral code and the accounts referred; commissions; payout wallet address and payout transaction IDs.
Legal basis: Contract.
Retention: Until the account is deleted; payment records for the periods required by tax and accounting law.

3.10News and offers by email

Data: Email address.
Legal basis: Your separate consent (Art. 6(1)(a)).
Retention: Until you withdraw consent or unsubscribe.

04Who we share data with

4.1.

We do not sell personal data and do not share it for targeted advertising. We share it only as far as needed for the purposes above:

the hosting and infrastructure providers that run the Website and the Services;
Cloudflare, Inc., which delivers and protects the Website;
our email delivery provider, for service emails;
the payment partner shown on the invoice or payment page, to process card and crypto payments (for card payments we pass your email address, the order number and the amount) and carry out the checks required by law;
Google LLC and GitHub, Inc., if you choose to sign in with them;
courts, public authorities and professional advisers, where the law requires it or where it is needed to establish or defend legal claims;
a company that takes over the Services, which remains bound by this Policy.

05Where data is stored

5.1.

Our main database is hosted in Germany. The Services run on servers in many countries, and connecting to them involves processing your IP address and technical connection data there.

5.2.

Some of our providers are in the United States and other countries outside the European Economic Area. Where the GDPR applies, we rely on an adequacy decision or on standard contractual clauses for those transfers.

06How long we keep data

6.1.

We keep personal data for the periods listed in Section 3. When a period ends, or when you withdraw consent, we delete the data within 30 (thirty) days, unless the law requires us to keep it longer or we need it to establish or defend legal claims.

6.2.

You can request deletion of your account in the account settings.

07Your rights

7.1.

Depending on where you live, you have the right to:

get a copy of your personal data and information about how it is processed;
have your data corrected or deleted;
restrict or object to processing, including processing based on our legitimate interests;
receive your data in a portable format;
withdraw your consent at any time, without affecting earlier processing;
unsubscribe from marketing emails, using the link in the email or the account settings;
exercise your rights without being treated less favourably for doing so.

7.2.

Send requests to support@proxyfield.io from the email address you signed up with. We reply within 1 (one) month of receipt and may need to confirm your identity first.

7.3.

You can complain to the data protection authority where you live or work if you are in the EU or the UK. If you are in the United States, you can contact the Federal Trade Commission or your state attorney general.

08Cookies

8.1.

We use the cookies listed in our Cookie Policy. The Website does not use third-party analytics or advertising cookies.

09How we protect personal data

9.1.

We take technical and organisational measures to protect personal data from unlawful or accidental access, loss or alteration, including:

transferring data between your browser and the Website over HTTPS (TLS);
storing passwords only as hashes;
limiting access to personal data to the people who need it;
making regular backups and controlling access to them.

10Other websites

10.1.

The Website links to other websites and services, which have their own privacy policies. We are not responsible for them.

11Changes and contact

11.1.

We may change this Policy. A new version takes effect when it is published on the Website.

11.2.

Questions about this Policy and about personal data can be sent to support@proxyfield.io.