Privacy policy

We collect the minimum needed to run a prepaid proxy service:

• Account data: email address, username, a hashed password, and optional two-factor secret.
• Security data: the IP address used at registration and sign-in, for abuse prevention and account recovery.
• Billing data: crypto invoice identifiers, amounts and on-chain transaction references. We never see or store card details because we do not accept cards.
• Usage metering: bytes transferred per plan, connection counts and error rates. This is what you are billed on and what the usage graphs show.
• Support data: messages you send through live chat or email, and the account context attached to them.
• Discord (only if you connect it for the community reward): your Discord ID and username, and the access Discord grants us to add you to our community server, kept encrypted so we can add you back if the server ever moves. It is used for nothing else, and you can revoke it at any time in Discord under Settings > Authorized Apps.
• Error reports: when something fails on the site, what failed, when, the page, browser and IP address, and the account or e-mail it happened to, so our support team can trace the problem. Kept for 30 days.
• Site visits: on our public pages we count page views, which page was viewed and which search engine or site sent the visit. No cookies are used and IP addresses are not stored: a visitor is counted with a code that changes every day, so nobody can be followed from one day to the next. When you sign up we note what first brought you (for example, a search engine) and the page you landed on. The customer dashboard is never counted.

We do not inspect, log or store the content of traffic that passes through the proxies.

Operate your account and bill usage; send transactional email such as verification codes, password resets and payment confirmations; detect fraud and network abuse; answer support requests; and comply with legal obligations.

We do not sell personal data and we do not use it for third-party advertising.

A small number of processors handle data on our behalf, each limited to its job:

• Our live chat runs on our own servers — your messages stay with us. If you leave your email (or are signed in), we email you our replies while you're away and you can answer by email; every such email has a link to turn this off. Our support team may see a message while you are typing it. A translation service may receive a message's text (never your identity) only when a message needs translating.
• OXAPay (crypto payments): invoice amount, a payment reference and the email attached to the invoice.
• Resend (transactional email): your email address and the message being delivered.
• Cloudflare (edge network, bot protection): connection metadata such as IP address and user agent.
• Our upstream network provider: the proxy credentials and usage counters for your plans, never your identity.

We disclose data to authorities only when legally compelled, and we narrow every request to what the law requires.

Account and billing records are kept for as long as your account exists and for the period tax and anti-fraud law requires afterwards. Usage metering is kept for 90 days in detail and as aggregates thereafter. Support conversations are retained for 12 months. Page-view records are deleted after about 13 months.

We use first-party storage for your session, language, theme and sidebar preferences, and to remember what first brought you to the site until you sign up. The live chat widget sets its own cookie to keep a conversation open across pages. We run no advertising trackers.

You can view and change your account details in Settings, export your invoice history, and ask for your account and data to be deleted. Deletion requests are verified over live chat and completed within 30 days, except for records we must keep by law.

If you are in the EU, UK or a jurisdiction with similar rights, you may also ask for a copy of your data or object to a specific use. Write to support@crawlproxies.com.

Passwords are hashed with bcrypt, two-factor authentication is available to every account, sessions use short-lived tokens, and all traffic to the site is encrypted in transit. Report a vulnerability to support@crawlproxies.com and we will respond quickly.

We may update this policy; the date above is revised and material changes are announced in your dashboard.