Privacy Policy

Last updated: 2024-01-01

1. Overview

This Privacy Policy explains how PROXYNADE collects, uses, and protects information about you when you use our website, dashboard, dedicated servers, and proxy services. It is intended to comply with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and, where applicable, Spanish Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD), as well as Law 34/2002 on Information Society Services and Electronic Commerce (LSSI‑CE).

2. Data Controller & Contact

For the purposes of EU and Spanish data‑protection law, the data controller responsible for processing your personal data is:

  • Controller: [Add your legal entity name here, e.g. “PROXYNADE TECH S.L.”]
  • Tax ID (NIF/CIF): [Add your NIF/CIF]
  • Registered address: [Add your full postal address in Spain or EU]
  • Email: [Add a contact email for privacy matters]

If you appoint a Data Protection Officer (DPO), you should also add their contact details here.

3. Information We Collect

We collect and process the following categories of data:

  • Account Information: Email address, full legal name, and Discord user ID.
  • Authentication Data: Hashed passwords and authentication tokens.
  • Usage & Orders: Server and proxy orders, billing periods, pricing, and order status.
  • Network & Security Data: IP addresses used to access the dashboard and services, and network activity logs associated with your server usage.
  • Technical Data: Browser type, approximate timestamps, and basic request metadata for security and debugging.

4. Purposes & Legal Bases (GDPR Art. 6)

We process your personal data on the following legal bases:

  • Contract performance (Art. 6.1.b GDPR): to create and manage your account, process orders, provision servers and proxies, provide support, and manage billing‑related information.
  • Legitimate interests (Art. 6.1.f GDPR): to monitor and protect our infrastructure from abuse, improve the service, detect fraud or security incidents, and maintain network stability.
  • Legal obligations (Art. 6.1.c GDPR): to comply with applicable accounting, tax, anti‑abuse, and information‑society regulations (including LSSI‑CE and other Spanish/EU rules).
  • Consent (Art. 6.1.a GDPR): where required for specific optional features or communications; you may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. Logging & Monitoring

For security and abuse‑prevention reasons, network activity associated with your servers and proxies may be logged. Sensitive network log content is encrypted at rest using strong cryptography, as described in the technical documentation.

6. Data Security

  • Passwords are hashed using industry‑standard algorithms; we never store raw passwords.
  • Sensitive fields (including IP addresses and network logs) are encrypted at rest.
  • Access to administrative tools and logs is restricted and monitored.

7. Data Retention

We retain account, order, and log data for as long as necessary to:

  • Provide services you have ordered.
  • Meet legal, accounting, or regulatory obligations.
  • Investigate abuse reports or security incidents.

When data is no longer required, it may be deleted, anonymized, or archived in a secure manner.

8. Sharing & Disclosure

We do not sell your personal information. We may share limited data:

  • With infrastructure or payment providers strictly as needed to operate the service.
  • With hosting providers or upstream networks for abuse handling or security purposes.
  • With law enforcement or regulators when required by applicable law.

9. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we will ensure that an adequate level of protection is provided, for example by relying on:

  • An adequacy decision by the European Commission for the destination country, or
  • Standard Contractual Clauses (SCCs) or other appropriate safeguards under GDPR Articles 46–49.

10. Your Rights (GDPR Arts. 15–22)

Under EU and Spanish data‑protection law, you may exercise the following rights, subject to certain conditions:

  • Right of access: to obtain confirmation as to whether we process your data and receive a copy.
  • Right to rectification: to correct inaccurate or incomplete data.
  • Right to erasure: to request deletion of your data when it is no longer necessary or where legal grounds allow.
  • Right to restriction: to ask us to limit processing in certain cases.
  • Right to data portability: to receive your data in a structured, commonly used and machine‑readable format and transmit it to another controller.
  • Right to object: to object to processing based on legitimate interest, on grounds relating to your particular situation.
  • Right not to be subject to automated decisions: we do not take decisions based solely on automated processing that produce legal effects concerning you.

To exercise these rights, contact us using the controller contact details above, clearly indicating your request and providing sufficient information to verify your identity.

11. Supervisory Authority

If you believe that your data‑protection rights have been infringed, you may lodge a complaint with your local supervisory authority. In Spain, the competent authority is:

  • Agencia Española de Protección de Datos (AEPD) – www.aepd.es

12. Cookies & Similar Technologies

Our site may use technical cookies that are strictly necessary for the operation of the website and dashboard. Any non‑essential or analytics cookies requiring consent under the GDPR and LSSI‑CE will only be used after you have provided explicit consent via a suitable cookie banner or settings panel.

13. Your Choices

  • You may update certain account details (such as your name and Discord ID) through the dashboard.
  • You may close your account by contacting support; some data may be retained to meet legal obligations.
  • You may choose not to use the service if you do not agree with this policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. Material changes may also be announced via the dashboard or other communication channels.

15. Contact

If you have questions about this Privacy Policy or our data practices, please contact us using the details provided on the main site or in the dashboard.