What we collect, and why.

Plain English, not a forty-page maze. proxymint runs on as little of your data as the service needs - and nothing it doesn't.

Pre-launch draft · last updated 8 November 2026

Who we are

proxymint is operated by Routing Technologies LLC, the data controller for your account and connection data. Questions: privacy@proxymint.com.

Who this covers

This policy covers visitors to our site, people on the waitlist or our email list, and customers using the proxy service. Up front: when you route your own data collection through our proxies, you decide what you collect and why - for that data, you are the controller, and "Your data vs. our data" below explains what that means.

What we collect when you sign up and pay

  • Waitlist: your email address. That is all we ask for. "Email we send" below covers what we record once we start emailing you.
  • Account: your name, email, and billing details. Card data is handled by our payment processor; we never see or store your full card number.
  • Identity checks: where we need to verify who you are (see identity verification below), the details required to do that.

What we log

To run the service, bill you, and keep the network safe, we log connection and usage metadata - the technical record of your sessions, including timestamps, volumes, the IP addresses involved, and the destinations your sessions reach. We retain this, and additional information where needed, to operate the service and to detect, prevent, and address fraud, abuse, security threats, and violations of our terms. We don't sell your data, and we don't use it to build advertising profiles of you. The networks that carry your traffic operate under their own terms and may process data accordingly.

Email we send

When we send newsletters and product news, we record for each address whether the message was delivered, bounced, or marked as spam, whether it was opened, and which links were clicked. Opens are measured with a small image in the email, and clicks by passing links through our own address first.

We use this to see what's useful, send first to the people who actually read, and remove addresses that no longer work or don't want our email. We don't sell it or use it for advertising profiles.

Every newsletter has an unsubscribe link, and one click stops them. Turning off images in your email app stops open tracking. To have your email record deleted, write to privacy@proxymint.com.

Identity verification and sanctions checks

We may verify your identity before or during service when risk calls for it - to stop fraud and abuse, and to meet our legal obligations. Verification is one identity per account. If we need to verify identity, a specialist provider performs the check, and we keep the outcome and the minimal record the law requires, not copies of your documents. We may screen customers and payments against US sanctions and denied-party lists, and refuse or end service on a match.

Why we use your data, and our legal basis

We use your data to run the service, bill you for what you use, prevent fraud and abuse, keep the platform secure, answer your questions, and meet legal obligations. Under GDPR our bases are: performing our contract with you, our legitimate interest in a secure and abuse-free network, and compliance with law. For marketing email and its open and click tracking, we rely on your consent, or on our legitimate interest where the law allows it, and you can opt out at any time. If an automated check is ever used, you can ask for a human to review a decision that affects you.

Your data vs. our data

We control your account and connection data as described here. You control - and are responsible for - anything you collect through the proxies: the lawful basis for it, and compliance with the laws that apply. Our Terms of Service (see Acceptable use) set the boundaries.

Who we share it with

Only the providers we need to run the service, and each gets only what its job requires:

  • Payment processor - to take payments and issue refunds.
  • Identity-verification provider - to confirm who you are.
  • Email providers - to send waitlist, newsletter, and account email, and to report deliveries, bounces, and spam complaints.
  • Infrastructure and network providers - to host the platform and carry proxy traffic.
  • Google - website analytics and marketing measurement, only as "Cookies and analytics" describes and, in Europe, only after you agree.

We do not sell your data. We do not hand it to data brokers.

Law enforcement and legal requests

We may disclose information about you or your use of the service where we believe in good faith it is necessary to comply with a law, regulation, subpoena, court order, or other valid legal process - domestic or foreign - or to detect, prevent, or address fraud, security issues, or violations of our terms. We disclose only what the request lawfully requires.

How long we keep it

  • Waitlist and newsletter email, with open and click records: until you ask us to remove them. If you unsubscribe, we keep your address and email history so we don't email you again, unless you ask us to delete them.
  • Connection and usage metadata: for as long as we need it to run the service and keep the network safe, and as the law requires.
  • Account data: while your account is open, plus the period tax and legal rules require, then deleted.
  • Verification records: the minimal record the law requires us to keep, for as long as it requires.

The networks that carry proxy traffic set their own retention, which we don't control.

International transfers

We're a US company and use providers in the US and abroad, including the networks that carry proxy traffic. Where data leaves the EEA or UK, we rely on the EU's approved safeguards - adequacy decisions or Standard Contractual Clauses (the standard legal contracts for moving data across borders).

Your rights - EU and UK (GDPR)

You can ask us to show, correct, delete, or export the data we hold on you, object to certain processing, or restrict it, and withdraw consent where we rely on it (for example, non-essential cookies). Email privacy@proxymint.com - we respond within 30 days, and may first confirm your identity so we don't hand your data to someone else. You can also complain to your local data-protection authority. If a representative in the EU or UK is legally required, we appoint one and name them here.

Your rights - California (CCPA/CPRA)

You can ask to know what we hold, to delete it, to correct it, and to limit how we use sensitive personal information. We do not sell your personal information, and we don't share it for cross-context behavioural advertising (tracking you across other sites to target ads). We honour Global Privacy Control signals and won't discriminate against you for exercising these rights.

Security

We use industry-standard encryption (TLS) to protect account and connection data in transit, and encrypt stored account data at rest. We don't control the encryption of the traffic you route through the proxies, or of the systems of the networks that carry it. Access is limited to the people who run the service, and only when they need it. If a breach affects your data, we notify you and the relevant authority as the law requires.

Cookies and analytics

Essential cookies keep you logged in and remember your theme. They are always on.

With your OK we also use two kinds of cookies on this website, both from Google and loaded through Google Tag Manager:

  • Analytics (Google Analytics) - counts visits and the pages people read, and where visitors come from, so we can improve the site.
  • Marketing (Google Ads and Google signals) - lets Google measure which of our campaigns bring visitors and sign-ups, and show our offers to past visitors on other sites. For visitors signed in to Google who allow ad personalization, Google signals adds aggregate age, interest and cross-device reports. We only see totals, never a profile of you.

If you visit from the EU, the EEA, the UK or Switzerland, nothing from Google loads until you choose. The banner at the bottom of the page lets you accept, reject, or pick Analytics and Marketing separately. If you reject, Google's code never loads on our pages. Our only partner for these cookies is Google. You can change your choice at any time with the Cookie settings link in the footer; we ask again after about six months. Google's own use of this data is described in How Google uses information from sites that use its services.

When Analytics is on for you on this website (you allowed it, or you visit from outside the regions above, where it is on by default), then when you start a checkout or pay in the dashboard, our server tells Google Analytics that it happened: the product, the quantity, the amount and our order number, linked to the same anonymous Analytics ID as your visit. It never sends your name, email, card or IP address. Google Ads may count that purchase toward the campaign that brought you only when Marketing is on for you too. If Analytics is off, nothing is reported. The dashboard itself loads nothing from Google.

Email tracking is separate and works per address, as "Email we send" explains.

Children

proxymint is not for anyone under 18. We don't knowingly collect data from minors. If we learn we have, we delete it.

Changes

When this policy changes, we post the new version here and update the date at the top. For material changes we also email account holders. No quiet edits.

Contact

Questions about your data? Write to privacy@proxymint.com.