Privacy policy

Account information:

• Email address (required for registration)
• Name or company name (if provided)
• Payment information (processed by third-party payment providers — we do not store full card details)

Usage information:

• Bandwidth consumption and plan usage statistics
• Dashboard login activity (timestamps, IP addresses)
• Support tickets and communication history

Website analytics:

• Pages visited, referral source, browser type, device type
• Coarse tool interactions such as a proxy-check start, terminal outcome, repeat run, export format, copy, or aggregate share action
• Website measurement is collected through Google Analytics 4, PostHog, Microsoft Clarity (including session recordings of page interactions), and Cloudflare Web Analytics
• We do not use invasive tracking or sell analytics data

Support chat:

• Support chat is provided by Intercom and includes Fin, Intercom's AI agent. On trueproxies.com, Support chat loads only after you open it. Until you click the chat button, no Intercom script runs and Intercom sets no cookies or local storage on your device.
• In the customer dashboard, Support chat identifies the account you are signed in to. The dashboard sends Intercom your account ID, email address, name and account reference in a signed token, so you do not have to give them again in the chat.
• Intercom keeps your chat session in cookies that trueproxies.com and dashboard.trueproxies.com share. In the same browser, a conversation can continue between the website and the dashboard, and after you sign in to the dashboard, Support chat on trueproxies.com can show your account's conversations.
• If you type contact details into the chat, such as your email address, name or Telegram username, Intercom stores them with the conversation so that we can reply to you.
• Intercom also processes chat session and device identifiers; the page you open the chat from; your browser, operating system and language; your approximate city and country, derived from your IP address; and the messages and files you send.
• Fin can answer your messages before a person does. To do this, Intercom processes the conversation with AI models from providers it lists as its sub-processors, currently including OpenAI, Anthropic, Google, Microsoft and Amazon Web Services. A member of our support team can take over the conversation at any point.
• Do not send passwords (including your proxy password), API keys, payment details or other secrets in Support chat.

Proxy checker submissions and retention:

• To run a proxy check, your browser sends the submitted proxy lines, including any endpoint username and password, the selected protocol and target, and a human-verification token to TrueProxies over HTTPS. The application forwards the proxy lines to an isolated checker service for the job you requested.
• Queued raw proxy lines exist only in the isolated checker's process memory. A queued slot is cleared before that line is checked; the active request necessarily holds the current line while it runs; and every remaining queued line is cleared on cancellation or job completion. The application does not write raw proxy lines or credentials to a database or application log.
• Credential-free result records can contain an endpoint label, status and timing fields, and the observed exit IP and available location. A finished, failed, or cancelled job is scheduled to expire from the isolated checker's process memory after 15 minutes; the in-memory cleanup runs every 30 seconds.
• IPify receives the exit-IP request through the submitted proxy. GeoJS receives the observed exit IP for the server-side location lookup. Google or Wikipedia receives a lightweight request through the proxy only when you select that target.
• The human-verification token is sent to either the configured verification service or Cloudflare Turnstile. When direct Cloudflare verification is configured, a valid client IP is also sent as Turnstile's remoteip value.
• For abuse prevention, the proxy checker derives a truncated SHA-256 rate-limit key from the client IP. Redis stores that pseudonymous key for the active one-minute, ten-minute, or one-hour limit window plus a brief expiry buffer; the raw IP is not used as the Redis key. Hashing is an access-control safeguard, not a claim that an IP address is anonymous.
• CSV and JSON result files are generated locally in your browser from an explicit credential-free projection. They exclude raw submitted lines, credentials, job identifiers and capability tokens, exit IP and location fields, and free-form messages. The separate Copy working action intentionally copies the original working lines, which can include credentials, only after you choose it on your device.
• Optional proxy-checker analytics uses only allowlisted batch-size buckets, protocol and target enums, terminal categories, coarse outcomes, and action types. It never includes submitted lines, endpoints, credentials, result labels, exit IPs or locations, messages, job identifiers, or capability tokens, and it is disabled unless you allow Analytics.
• When Analytics is allowed, the browser keeps a bounded map of up to 100 truncated SHA-256 markers for no longer than one hour to prevent a duplicated tab from sending the same terminal event twice. These local markers are derived from an opaque job ID, contain no capability token or proxy/result data, are never sent as analytics fields, and expired entries are pruned on the next terminal event.

Affiliate program and referrals:

• When you open a referral link, the referral code and the time of your first visit are kept in your browser's storage on trueproxies.com and dashboard.trueproxies.com for up to 30 days.
• If you then create an account, we link it to the affiliate who referred you and compare network information from when you created it with the affiliate's, to prevent self-referrals.
• Affiliates see referred accounts only as account references with payment dates and amounts, never names or email addresses.
• If you join the affiliate program, we collect your payout method and payout details (a PayPal email address, a USDT TRC20 address or bank transfer details). Payout details are stored encrypted and shared only with the payout service used: PayPal, the TRON network, or the banks involved.
• Lawful basis: performing our contract with affiliates, our legitimate interests in attributing referrals and preventing fraud, and our legal obligations to keep tax records.
• Retention: browser referral data for up to 30 days, the link between a referred account and its affiliate for the life of the referred account, and payout records for as long as accounting and tax law require.

What we do NOT collect:

• We do not log the websites you access through our proxies
• We do not monitor, record, or inspect the content of your proxy traffic
• We do not store browsing history or DNS queries routed through our proxies

If you apply to the Reseller program, we collect the business information in the application form (company name, website, country, sales channel, target customers, product interests, target regions, projected monthly spend, current customer count and use case) and the version of the Reseller program terms you accepted. If you are approved, we hold the managed customer records you create (a name you choose and, optionally, a contact email) on your behalf. We never email those contact addresses.

We use collected information to:

• Provide and maintain the Services (account management, billing, support)
• Process payments and prevent fraud
• Communicate with you about your account, plans, or support requests
• Answer support questions in Support chat through Intercom and Fin, recognize your account in the dashboard, keep your conversation history, prevent abuse, and hand the conversation to our support team when needed
• Improve the Services based on aggregated, anonymized usage patterns
• Measure campaign visits, account creation, and confirmed payments using browser analytics and server-side events
• Comply with legal obligations

We do NOT use your information for:

• Selling to third parties

We do not sell your personal information for money. Advertising measurement tags on our website send information about your visit to our advertising partners (Google, Meta, Reddit, Microsoft, X and Quora) to measure campaigns; some US state privacy laws treat that as "sharing" for cross-context behavioral advertising. You can block these tags with your browser's privacy settings or a content blocker, and you can ask us to stop sending server-side conversion events about your account by emailing privacy@trueproxies.com. Beyond that, we may share information only in the following circumstances:

• Payment processors: To process transactions (Stripe, cryptocurrency payment providers)
• Intercom, acting as our processor: To provide Support chat, Fin answers, conversation history, abuse prevention, and handoff to our support team. Intercom uses its own sub-processors, including the AI model providers named in section 1
• PayPal: To send affiliate payouts to affiliates who choose PayPal
• Legal requirements: If required by law, court order, or government request
• Service protection: To enforce our Terms or protect against fraud, abuse, or security threats

• Account data is retained for the duration of your account plus 12 months after deletion
• Billing records are retained as required by applicable tax and financial regulations
• Support communication is retained for 24 months after the last interaction
• When your account is deleted, we also delete your Support chat contact and conversations in Intercom. Intercom keeps a deleted contact recoverable for 7 days and then removes it permanently.
• Intercom session cookies normally last up to one week, device identifiers up to 270 days, and local Messenger state can remain on your device until removed. On trueproxies.com they are set only after you open Support chat. Intercom states that inactive anonymous visitor records are deleted after nine months.
• Analytics is configured without direct account identity and is retained according to our provider settings; aggregated reports may be retained for longer-term product and marketing analysis
• Reseller program application answers are redacted 365 days after the application is declined, withdrawn or revoked; approved applications are kept while reseller access is active. Decision records without personal data are kept for audit

We implement reasonable technical and organizational measures to protect your information, including:

• Encrypted connections (HTTPS) for all website and dashboard access
• Encrypted storage for sensitive account data
• Access controls limiting who within our team can access personal data
• Regular security audits of our infrastructure

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security, and you transmit information to us at your own risk. To the fullest extent permitted by applicable law, TrueProxies is not liable for unauthorized access, hacking, data loss, or other breaches resulting from circumstances beyond our reasonable control, provided we have implemented the reasonable safeguards described above.

We use essential storage to maintain your session, protect the Services, and support core functions. Intercom's Support chat storage keeps your chat session and conversations and helps prevent abuse; on trueproxies.com it is set only after you open Support chat. Analytics technologies including Google Analytics 4, PostHog, Microsoft Clarity, Cloudflare Web Analytics, and the Trustpilot widget help us understand website performance, signup flow completion, and purchase conversion across TrueProxies services.

Marketing cookies and first-party attribution storage help measure campaign visits and conversions. Advertising tags are managed through Google Tag Manager, and confirmed conversion events are recorded by our server. Browser settings can block or delete cookies.

Your privacy choices. The website currently has no cookie preference panel. For privacy requests, including access, deletion, or objections to processing, contact privacy@trueproxies.com.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information (subject to legal retention requirements)
• Export your data in a portable format
• Withdraw consent for optional data processing

To exercise any of these rights, contact us at privacy@trueproxies.com. We will respond within 30 days. You also have the right to object to or request restriction of certain processing, and to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with your local supervisory authority if you are located elsewhere.

Your information may be transferred to and processed in countries outside the United Kingdom. Where we transfer personal data internationally, we rely on safeguards recognized under the UK GDPR, such as UK adequacy regulations or the International Data Transfer Agreement (IDTA) / standard contractual clauses, and take reasonable steps to ensure your data is treated securely regardless of where it is processed.

Intercom stores Support chat data in the United States. For transfers from the European Union, the United Kingdom and Switzerland, Intercom relies on its certification under the EU-US Data Privacy Framework, the UK Extension to it and the Swiss-US Data Privacy Framework, with standard contractual clauses as the fallback.

We do not use Yandex Metrica.

TrueProxies is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will delete it promptly.

Our website and dashboard may contain links to third-party websites, and our Services route your traffic to third-party destinations that you choose. This Privacy Policy applies only to information collected by TrueProxies. We do not control, and are not responsible for, the privacy practices, content, or security of any third-party website, platform, or service — including payment processors, analytics providers acting on their own behalf, and any website you access through our proxies. We encourage you to review the privacy policies of any third-party services you use.

This Privacy Policy does not create any contractual or other legal rights beyond those required by applicable data protection law. To the fullest extent permitted by law, any liability of TrueProxies arising out of or relating to this Privacy Policy or our data practices is subject to the Disclaimer of Warranties and Limitation of Liability sections of our Terms of Service, which are incorporated here by reference. Nothing in this section limits rights that cannot be limited under applicable data protection law.

We may update this Privacy Policy from time to time. Changes become effective when posted on this page with an updated "Last updated" date. For material changes, we will notify you via email or dashboard notification.

For privacy-related questions or requests, contact us at:

• Email: privacy@trueproxies.com
• Official support: @tprxme