Who we are
PapaProxy.net (“we,” “us”) provides datacenter and ISP proxy services and acts as the data controller for personal data collected through https://papaproxy.net. The full legal details of the operating company are stated in your service contract and payment documents, and are available on request.
For anything related to your personal data, contact us at [email protected].
Our services are intended for users aged 18 and over. We do not knowingly collect data from minors.
What data we collect
- Account data — name, email address, and phone number (if you provide one) when you register or contact us.
- Billing data — order history and payment confirmations. Payments are handled by payment processors; we never see or store full card numbers.
- Support communications — tickets, emails, and live chat messages you send us.
- Technical data — your IP address, browser and device information, and cookies when you visit our website.
- Connection metadata — aggregated, content-free network metadata (NetFlow) used for load monitoring and abuse prevention. We do not log or store the content of traffic passing through our proxies.
Why we process it and on what legal basis
We process personal data only when we have a legal basis to do so under Article 6 of the GDPR:
- To provide the service — creating your account, delivering proxies, billing, and support (Art. 6(1)(b), performance of a contract).
- To keep the service secure — monitoring load, preventing abuse and fraud, enforcing our Terms of Use (Art. 6(1)(f), legitimate interests).
- To improve the website — anonymized analytics (Art. 6(1)(a), consent, via the cookie banner).
- To send service notifications — renewal reminders, downtime notices, and changes to terms (Art. 6(1)(b)).
- To send marketing emails — news, offers, and product updates (Art. 6(1)(a), consent). You can opt out at any time via the unsubscribe link or by emailing us.
- To comply with the law — keeping accounting records and responding to lawful requests from authorities (Art. 6(1)(c), legal obligation).
Cookies and analytics
We use essential cookies to keep the website and your account session working, and analytics cookies (Google Analytics) to understand how visitors use the site. Analytics data is anonymized.
Non-essential cookies are set only after you accept them in the cookie banner. You can also block or delete cookies in your browser settings at any time; the website will keep working, though some features may be limited.
Payments
Payments are processed by third-party payment providers, including Stripe and cryptocurrency payment gateways. Your payment details go directly to the provider over an encrypted connection — we receive only a confirmation of payment and the details needed for invoicing.
If you pay in cryptocurrency, the transaction is recorded on the relevant public blockchain by design; wallet addresses you provide for refunds are used solely to process the refund.
Third-party processors
We share personal data only with service providers that help us run the service, and only to the extent necessary:
- Stripe — card payment processing.
- Cryptocurrency payment gateways — processing crypto payments and refunds.
- WHMCS — the billing and account management platform behind your Dashboard.
- Google Analytics — anonymized website analytics.
- Email and live chat providers — delivering our messages and support chat.
Each provider processes data under its own privacy policy and, where required, a data processing agreement with us. We never sell your personal data, and we do not share it with third parties for their own marketing.
How long we keep your data
- Account data — for as long as your account is active. If you ask us to delete your account, we remove it and all associated data within 24 hours.
- Billing records — for as long as accounting and tax law requires (typically up to 7 years).
- Support communications — up to 3 years after the issue is resolved, so we can reference past cases.
- Technical logs and connection metadata — short rolling windows, typically no longer than 90 days, unless needed for an ongoing abuse or security investigation.
International transfers
Our infrastructure and service providers operate in multiple countries, so your data may be processed outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses (SCCs), and require the same level of protection described in this policy.
How we protect your data
We use TLS encryption for data in transit, restrict access to personal data to staff who need it for their work, and monitor our systems around the clock. No system is perfectly secure, but if a breach affecting your data ever occurs, we will notify you and the relevant supervisory authority as the law requires.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you and receive a copy;
- Correct inaccurate or incomplete data;
- Delete your data (“right to be forgotten”);
- Restrict or object to processing based on legitimate interests;
- Port your data to another provider in a machine-readable format;
- Withdraw consent at any time, without affecting processing that happened before withdrawal.
We extend these rights to all users, wherever you live. To exercise any of them, email [email protected] — we respond within 30 days. If you believe we have mishandled your data, you also have the right to lodge a complaint with your local data protection authority.
Changes to this policy
When we change this policy, we will post the updated version on this page and revise the date below. For material changes, we will also notify you by email or through your Dashboard.
Last updated: July 2, 2026.
