ProxyToo privacy policy

1. What information does ProxyToo store?

ProxyToo stores only the information needed to run accounts and payments. Here is what we keep.

Instead of names, phone numbers or addresses, your account runs on a single access token. That keeps the data we hold small and its purpose clear.

• A hash of your access token for checking, plus its last 4 characters
• A hash of the IP used to sign up (to count accounts per IP)
• Balance and top up records (amount, status, date)
• IP product order records (product, quantity, term, status)
• A hash of your login session and its expiry time

2. How is the access token protected?

Your access token is never stored as plain text. It is turned into a hash, and at login we compare the hash of the token you enter.

We keep the last 4 characters separately so you can recognize the token in the dashboard. Those 4 characters alone can't open your account.

Because of hashing, even the service can't see your original token. Be sure to copy it or save it as a file when you sign up.

3. Why do you store sign up IP information?

Up to 3 accounts can be created from one IP. To check that limit, we store the sign up IP as a hash.

The IP hash is used only for counting accounts. The minimum top up is set by the country you connect from, so the lower minimum applies in the listed countries.

4. How are top up and order records used?

Top up records are used to confirm payments and credit your balance correctly. We keep the requested amount, receiving address, status and date to follow each request until it is credited.

Order records track IP products through pending activation, active and refunded. Refunds also use these records to return the amount you paid to your balance.

When you contact support, we use these records to check the facts. Sharing the top up date or order details in your message speeds this up.

5. Which cookies does ProxyToo use?

We use two cookies, a session cookie that keeps you logged in (pt_sid, 30 days) and a language cookie that remembers your chosen language (pt_lang). Both are basic cookies the service needs to work.

These two cookies are all the service runs on. If you clear cookies in your browser, just log in again and pick your language.

6. What do you use the information for?

Stored information is used only for the purposes below. If a purpose changes, we update this policy first.

Each purpose uses only the information it needs, and each is managed separately from the others.

• Logging in and checking your account
• Crediting top ups and managing balance
• Processing IP product orders and refunds
• Counting accounts per IP
• Preventing misuse and checking support requests

7. How long is information kept?

Account information, balance, and top up and order records are kept while the account exists. Since balance has no expiry, the related records stay with it.

Login sessions expire after 30 days. An expired session can't be reused, so just log in again with your token.

The IP hash used to count accounts is kept with the account records too. Everything we keep is used only for the purposes above and managed within that scope.

8. Is information shared with anyone else?

We share stored information only when a formal legal request requires it, and only as much as needed. Otherwise, all information is used only to run the service.

Crypto deposits are blockchain transactions, so their details are public on that blockchain network. That is how blockchains work, and it is good to keep in mind.

9. How is my information kept safe?

Tokens and login sessions are stored only as hashes, and connections to the site are encrypted with HTTPS. Sign up IPs are stored as hashes too.

The admin area is available only to admins who pass separate authentication. Keeping your token safe is the part we share with you.

Keeping stored data to the minimum is itself an important safeguard. The less we store, the less there is to protect, which keeps accounts light and secure.

10. What information do I need to sign up?

Signing up takes just the access token the service creates for you. Copy it or save it as a file, tick "I saved it", and your account is ready.

At that point the server keeps the token's checking hash, its last 4 characters and a hash of your sign up IP. The account starts with the minimum information it needs.

11. How is my connecting country used for top ups?

The standard minimum top up is $30, and when you connect from one of the 72 low and lower middle income countries in the World Bank list, $20 applies. Your current connecting country is used for this check.

The country is used to show the right minimum on the top up screen. The rule is there so more people can get started comfortably.

12. What can I do to keep my information safe?

Keep your access token somewhere secure, such as a password manager, and keep it out of public repositories when you use it in code. Anyone with the token can use your account and balance.

On a shared computer, log out from the dashboard or clear browser cookies when you finish. That way your session is cleaned up and stays safe.

13. How will I know if the privacy policy changes?

When this policy changes, we post the new version on this page with its effective date. For questions, contact support in the dashboard once your first top up has been credited.

We refine this policy whenever account handling changes or new features arrive. The latest version is always on this page.