Privacy Policy

Account information:

• Email address (required for registration)
• Name or company name (if provided)
• Payment information (processed by third-party payment providers — we do not store full card details)

Usage information:

• Bandwidth consumption and plan usage statistics
• Dashboard login activity (timestamps, IP addresses)
• Support tickets and communication history

Website analytics:

• Pages visited, referral source, browser type, device type
• With Analytics consent, coarse tool interactions such as a proxy-check start, terminal outcome, repeat run, export format, copy, or aggregate share action
• Collected via Google Analytics 4
• We do not use invasive tracking or sell analytics data

Proxy checker submissions and retention:

• To run a proxy check, your browser sends the submitted proxy lines, including any endpoint username and password, the selected protocol and target, and a human-verification token to TrueProxies over HTTPS. The application forwards the proxy lines to an isolated checker service for the job you requested.
• Queued raw proxy lines exist only in the isolated checker's process memory. A queued slot is cleared before that line is checked; the active request necessarily holds the current line while it runs; and every remaining queued line is cleared on cancellation or job completion. The application does not write raw proxy lines or credentials to a database or application log.
• Credential-free result records can contain an endpoint label, status and timing fields, and the observed exit IP and available location. A finished, failed, or cancelled job is scheduled to expire from the isolated checker's process memory after 15 minutes; the in-memory cleanup runs every 30 seconds.
• IPify receives the exit-IP request through the submitted proxy. GeoJS receives the observed exit IP for the server-side location lookup. Google or Wikipedia receives a lightweight request through the proxy only when you select that target.
• The human-verification token is sent to either the configured verification service or Cloudflare Turnstile. When direct Cloudflare verification is configured, a valid client IP is also sent as Turnstile's remoteip value.
• For abuse prevention, the proxy checker derives a truncated SHA-256 rate-limit key from the client IP. Redis stores that pseudonymous key for the active one-minute, ten-minute, or one-hour limit window plus a brief expiry buffer; the raw IP is not used as the Redis key. Hashing is an access-control safeguard, not a claim that an IP address is anonymous.
• CSV and JSON result files are generated locally in your browser from an explicit credential-free projection. They exclude raw submitted lines, credentials, job identifiers and capability tokens, exit IP and location fields, and free-form messages. The separate Copy working action intentionally copies the original working lines, which can include credentials, only after you choose it on your device.
• Optional proxy-checker analytics uses only allowlisted batch-size buckets, protocol and target enums, terminal categories, coarse outcomes, and action types. It never includes submitted lines, endpoints, credentials, result labels, exit IPs or locations, messages, job identifiers, or capability tokens, and it is disabled unless you allow Analytics.
• When Analytics is allowed, the browser keeps a bounded map of up to 100 truncated SHA-256 markers for no longer than one hour to prevent a duplicated tab from sending the same terminal event twice. These local markers are derived from an opaque job ID, contain no capability token or proxy/result data, are never sent as analytics fields, and expired entries are pruned on the next terminal event.

What we do NOT collect:

• We do not log the websites you access through our proxies
• We do not monitor, record, or inspect the content of your proxy traffic
• We do not store browsing history or DNS queries routed through our proxies

We use collected information to:

• Provide and maintain the Services (account management, billing, support)
• Process payments and prevent fraud
• Communicate with you about your account, plans, or support requests
• Improve the Services based on aggregated, anonymized usage patterns
• Comply with legal obligations

We do NOT use your information for:

• Advertising measurement or personalization without your marketing consent
• Selling to third parties
• Profiling or behavioral tracking beyond basic analytics

We do not sell your personal information. We may share information only in the following circumstances:

• Payment processors: To process transactions (Stripe, cryptocurrency payment providers)
• Legal requirements: If required by law, court order, or government request
• Service protection: To enforce our Terms or protect against fraud, abuse, or security threats

• Account data is retained for the duration of your account plus 12 months after deletion
• Billing records are retained as required by applicable tax and financial regulations
• Support communication is retained for 24 months after the last interaction
• Analytics data is retained in aggregated, anonymized form and is not linked to individual accounts

We implement reasonable technical and organizational measures to protect your information, including:

• Encrypted connections (HTTPS) for all website and dashboard access
• Encrypted storage for sensitive account data
• Access controls limiting who within our team can access personal data
• Regular security audits of our infrastructure

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security, and you transmit information to us at your own risk. To the fullest extent permitted by applicable law, TrueProxies is not liable for unauthorized access, hacking, data loss, or other breaches resulting from circumstances beyond our reasonable control, provided we have implemented the reasonable safeguards described above.

We use essential storage to maintain your session and protect the Services. Google Tag Manager, Google Analytics 4, and the Trustpilot widget measure website performance, signup flow completion, and purchase conversion across trueproxies.com and my.trueproxies.com.

We use Google Tag Manager and Google Analytics to measure how the website is used, and advertising measurement tags may measure campaign visits and conversions. You can block or delete cookies through your browser settings at any time.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information (subject to legal retention requirements)
• Export your data in a portable format
• Withdraw consent for optional data processing

To exercise any of these rights, contact us at privacy@trueproxies.com. We will respond within 30 days. You also have the right to object to or request restriction of certain processing, and to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with your local supervisory authority if you are located elsewhere.

Your information may be transferred to and processed in countries outside the United Kingdom. Where we transfer personal data internationally, we rely on safeguards recognized under the UK GDPR, such as UK adequacy regulations or the International Data Transfer Agreement (IDTA) / standard contractual clauses, and take reasonable steps to ensure your data is treated securely regardless of where it is processed.

We do not use Yandex Metrica.

TrueProxies is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will delete it promptly.

Our website and dashboard may contain links to third-party websites, and our Services route your traffic to third-party destinations that you choose. This Privacy Policy applies only to information collected by TrueProxies. We do not control, and are not responsible for, the privacy practices, content, or security of any third-party website, platform, or service — including payment processors, analytics providers acting on their own behalf, and any website you access through our proxies. We encourage you to review the privacy policies of any third-party services you use.

This Privacy Policy does not create any contractual or other legal rights beyond those required by applicable data protection law. To the fullest extent permitted by law, any liability of TrueProxies arising out of or relating to this Privacy Policy or our data practices is subject to the Disclaimer of Warranties and Limitation of Liability sections of our Terms of Service, which are incorporated here by reference. Nothing in this section limits rights that cannot be limited under applicable data protection law.

We may update this Privacy Policy from time to time. Changes become effective when posted on this page with an updated "Last updated" date. For material changes, we will notify you via email or dashboard notification.

For privacy-related questions or requests, contact us at:

• Email: privacy@trueproxies.com
• Telegram: @trueproxies