Quick answer
MetroProxies keeps the records it needs to run accounts, credit payments and handle abuse, and no more: no ID documents, no request content and no full URLs. Connection metadata is deleted after 30 days. This policy, last updated on 18 October 2026, explains each record. The controller is ProxyGoat LLC, a Delaware limited liability company (USA).
What we keep
| Record | Why | How long |
|---|---|---|
| Account number, password, optional email | Login and, if you add an email, account recovery and notices | While the account is open |
| Top-up records (amount, coin, network, transaction ID, date) | Crediting payments, accounting, disputes | While the account is open, then as long as accounting rules require |
| Orders and traffic totals per plan and sub-user | Billing and usage display | While the account is open, then as long as accounting rules require |
| Connection metadata: time, account, exit IP, target hostname, bytes | Abuse reports and billing disputes | Up to 30 days, then deleted |
| Support emails | Answering you | As long as needed to answer, then deleted unless needed for a dispute |
What we do not keep
We do not log the content of your requests, full URLs or page data. To handle abuse reports and billing disputes, we keep connection metadata (time, account, exit IP, target hostname, bytes) for up to 30 days, then delete it. We keep your account number, orders, top-up records and traffic totals while your account is open, and afterwards only as long as accounting rules require. We disclose records to authorities only when the law requires it. Our upstream network provider may keep its own logs under its own policy. We do not ask for identity documents, selfies, phone numbers or postal addresses. If you include such details in an email, we keep them only as long as needed to answer.
Who else can see data?
- Our upstream network provider carries your traffic and may keep its own logs under its own policy.
- Hosting and email providers that run our infrastructure process data for us under contract.
- Public blockchains: crypto payments are visible on-chain by nature; we do not publish which account made them.
- Authorities: we disclose records only when the law requires it, and only the records we hold.
We do not sell personal data and do not share it for advertising.
Cookies
One session cookie keeps you signed in to the client area and ends when you sign out or the session expires. The public website uses no advertising or tracking cookies; it may remember your language choice in your browser.
Your rights
You can ask for a copy of the personal data linked to your account, its correction or its deletion, and you can object to its use, by writing to [email protected] from the email on the account (or from the client area). Never send your account number or password by email. We answer within the time limit set by the law that applies to you. Records we must keep for accounting or a pending dispute are kept until that duty ends. Residents of US states with a consumer privacy law in force (for example California, Virginia, Colorado or Texas) and of the European Economic Area or the United Kingdom have these rights under their law; we apply the same process to everyone. You may also complain to your local data protection authority.
Legal bases (EEA and UK)
We process account and payment records to perform our contract with you (GDPR art. 6(1)(b)), keep accounting records to meet legal obligations (art. 6(1)(c)), and keep connection metadata for 30 days for our legitimate interest in handling abuse and billing disputes (art. 6(1)(f)).
Security, age and changes
Stored records are protected by reasonable technical and organisational measures. Your account number is your login, so keep it in a password manager and replace any proxy password that may have leaked. We never ask for your account number by email or chat. The service is for adults (18+). We may update this policy; the date at the top changes, and significant edits are listed in the changelog. See also the terms of service, the acceptable use policy, where our IPs come from and about MetroProxies.