Privacy Policy

RotatingProxies operates the rotating mobile proxy service at rotatingproxies.eu ("we", "us", the "Service"). We act as the data controller for the personal data described in this policy. This policy applies to the website, the customer dashboard, and the proxy service itself.

It covers the limited personal data tied to your account and billing, the technical logs we keep to run and secure the network, and the choices and rights you have. It does not cover third-party websites you reach through the proxy — those have their own policies.

To create and run an account we store your email address and a hashed password. We never store passwords in plain text — they are salted and hashed, so we cannot read them and neither can anyone who obtained a copy of our database.

Payments are handled by third-party payment processors. We do not store full card numbers on our systems. We retain the minimal records a processor returns — such as a transaction reference, plan, and status — so we can manage your subscription and meet our accounting and tax obligations.

We keep minimal technical logs needed to operate and secure the Service: connection metadata such as authentication events, timestamps, and aggregate usage counters used for rate limiting, abuse prevention, and billing accuracy. We do not log the contents of your proxy traffic, the destination URLs you request, or the payloads you send and receive through the network.

We use account and billing data to provide the Service, authenticate you, process payments, manage subscriptions and trials, provide support, and prevent fraud and abuse. We use technical logs to keep the network reliable, enforce fair-use and rate limits, and investigate security incidents.

Where the GDPR applies, we rely on: performance of a contract to provide the Service you signed up for; legal obligation for billing, accounting, and tax records; and our legitimate interests in securing the network, preventing abuse, and improving reliability. Where we ever rely on consent, you can withdraw it at any time.

We use only essential and session cookies needed to keep you signed in and to operate the dashboard. We do not use advertising or cross-site tracking cookies. Disabling essential cookies will prevent the authenticated parts of the Service from working.

We share data only with the processors that help us run the Service — for example payment processors and infrastructure providers — and only to the extent they need it to perform their function. We do not sell your personal data, and we do not share it for third-party marketing.

We keep account data for as long as your account is active. After closure we retain only what we must for legal and accounting purposes, and for a limited period, after which it is deleted or anonymised. Technical logs are kept for a short operational window and then rotated out.

Subject to applicable law, you can request access to your data, correction of inaccurate data, deletion, restriction or objection to certain processing, and a portable copy of the data you provided. You also have the right to lodge a complaint with your local data protection authority.

We protect data with hashed credentials, encrypted transport, access controls, and the principle of least privilege. No system is perfectly secure, but we keep the attack surface small by collecting little and never logging proxy traffic content.

For any privacy request or question, reach us through in-app support inside your dashboard. We respond to rights requests within the timeframes required by law.