Privacy Policy

Data: IP address, date and time of request, requested URL, referrer, HTTP status, transferred data volume, browser type and version, operating system.

Purpose: delivering the website, ensuring stability and security, defending against attacks and abuse.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is the secure and reliable operation of the site.

Retention: log data is deleted or anonymised after 30 days at the latest, unless a specific incident requires longer storage as evidence.

We store information on your device and read information from it. This requires your consent under § 25 (1) TDDDG, unless the storage or access is strictly necessary to provide a service you have expressly requested (§ 25 (2) TDDDG).

Strictly necessary (no consent required): session and authentication cookies (NextAuth), CSRF protection, your cookie choice itself, your light/dark theme preference, the Cloudflare Turnstile bot check on forms, and — where you arrive via a referral link — a short-lived referral cookie that stores only the referral code so we can attribute a later sign-up (§ 25 (2) TDDDG).

Consent-based: functional (live chat), analytics (Vercel Analytics / Speed Insights) and marketing categories as presented in our cookie banner. The marketing category is currently unused; no marketing cookies are set even if you enable it. Legal basis: § 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR.

You can change or withdraw your choice at any time via the cookie settings link in the footer, with effect for the future. You can also delete cookies in your browser at any time.

Data: anonymised or aggregated page views, referrer, device and browser category, approximate country, and page loading metrics (Core Web Vitals).

Provider: Vercel Analytics and Vercel Speed Insights. These services operate without cookies and do not build cross-site profiles.

Legal basis: your consent to the analytics category, Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG.

Data: email address, password (stored only as a bcrypt hash), verification status, account status, roles, notification preferences, referral code, acceptance of terms with timestamp and version, and — if you use social sign-in — your Google ID, name and profile picture, or your Discord ID and username.

Purpose: creating and managing your account, authenticating you, providing the dashboard.

Legal basis: Art. 6 (1) (b) GDPR (performance of the contract and pre-contractual steps).

Retention: for the duration of the account. After deletion, data is removed except where statutory retention obligations apply (see section 6).

If you choose social sign-in, the respective provider tells us your user ID, email address and public profile information. The provider learns that you have signed in to our service. Using social sign-in is optional; you can always register with an email address and password instead.

If you link your Discord account, we can add you to our Discord community server with your consent (OAuth scope guilds.join) and use your Discord account to deliver certain products and notifications.

Legal basis: Art. 6 (1) (b) GDPR for account creation and delivery, Art. 6 (1) (a) GDPR for the optional community join. Google and Discord act as independent controllers for their own processing; see their respective privacy policies.

Data: ordered products, prices, discount codes, billing address, country and VAT status, tax ID where provided, payment method, payment status, subscription and renewal data, invoice documents, account balance and transaction history.

Payment service providers: Stripe processes card and wallet payments and subscriptions; NOWPayments processes cryptocurrency payments. Your full payment credentials are entered directly with the payment provider and are never stored on our systems.

Legal basis: Art. 6 (1) (b) GDPR for performing the contract; Art. 6 (1) (c) GDPR for invoicing and accounting obligations under the German Commercial Code (HGB), the Fiscal Code (AO) and the VAT Act (UStG).

Payments are screened for fraud indicators by Stripe, including Stripe Radar. This involves an automated evaluation of, among other things, IP address, device and browser characteristics, billing and location data and payment history, and can result in a payment being declined or an order being rejected.

Insofar as this constitutes a decision based solely on automated processing within the meaning of Art. 22 (1) GDPR, it is permitted under Art. 22 (2) (a) GDPR because it is necessary for entering into or performing the contract. You have the right to obtain human intervention, to express your point of view and to contest the decision — contact us at hey@seamlessproxies.com.

Legal basis: Art. 6 (1) (b) and (f) GDPR. Our legitimate interest is preventing payment fraud, chargeback abuse and misuse of our infrastructure.

Data: logins, failed login attempts, password changes and comparable security-relevant actions, each with timestamp, IP address, browser and operating system and an approximate location derived from the IP address.

Purpose: allowing you to detect unauthorised access to your account, and protecting our systems against account takeover and abuse.

Recipient: the approximate location is resolved via the external service ip-api.com, which receives the IP address for that purpose.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest, and yours, is the security of the account.

Data: the content of your message, your email address and nickname, and, if you are logged in, a pseudonymous token that links the conversation to your account so that your chat history is preserved. The contact form additionally processes your name and, optionally, your company.

Providers: Crisp IM SAS (live chat, France), Cloudflare Turnstile (spam and bot protection), Resend (email delivery).

Legal basis: Art. 6 (1) (b) GDPR where your request concerns a contract or its initiation, otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in answering enquiries.

Retention: support conversations are deleted no later than two years after the last message, unless they are needed as evidence for a longer period.

Service emails (email verification, password resets, order confirmations, invoices, expiry and renewal reminders, security alerts, low-balance notices) are part of the contractual relationship and are sent on the basis of Art. 6 (1) (b) GDPR.

Marketing emails about our own similar products and offers are sent to existing customers under § 7 (3) of the German Act Against Unfair Competition (UWG), with the corresponding processing based on Art. 6 (1) (f) GDPR. You can object at any time, free of charge, using the unsubscribe link in every email or in your account settings. Where we rely on a separate consent instead, the legal basis is Art. 6 (1) (a) GDPR.

Provider: Resend. Delivery data such as dispatch status is processed to operate the mailings.

Data: your referral code, referred accounts, qualifying purchases and credited rewards, plus entries and, where applicable, winner details for giveaways.

Purpose: operating and settling the referral programme, running giveaways and preventing abuse such as self-referral and multi-accounting.

Legal basis: Art. 6 (1) (b) GDPR for the performance of the participation relationship and Art. 6 (1) (f) GDPR for abuse prevention.

Delivering the service requires us to process the credentials and configuration of your proxy accounts and servers, the assigned endpoints and locations, saved proxy generator configurations, volume data such as bandwidth consumed and remaining, bandwidth transfers between accounts where you initiate them, and — if you create them — residential sub-user credentials and share codes that grant limited access to bandwidth.

Confidentiality of communications: we observe the secrecy of telecommunications under § 3 TDDDG. We do not inspect the content of the traffic routed through our services beyond what is technically necessary to deliver it.

Traffic data: under § 9 TDDDG, traffic data is processed only to the extent required to establish and maintain the connection and to bill the service, and is erased without undue delay once it is no longer needed for those purposes. Volume figures needed for billing are retained for the statutory periods.

Anonymous use: in accordance with § 19 (2) TDDDG we inform you that the service can be paid for in cryptocurrency, which allows a largely pseudonymous payment route. An account with a valid email address remains necessary for the delivery and management of the service.

Legal basis: Art. 6 (1) (b) GDPR, and Art. 6 (1) (c) GDPR where we are legally obliged to provide information to competent authorities (for example under §§ 174 et seq. of the German Telecommunications Act).

My IP returns your public IP address and approximate connection metadata (user agent, country, region, city, language) derived from the current request. The response is generated on the fly and is not stored by us beyond ordinary server log retention (section 4.1).

Proxy Tester forwards the proxy list you submit (up to the published limit) to our self-operated test endpoint in Germany so connectivity can be checked. If your list contains credentials, those credentials are transmitted to that endpoint for the duration of the test. Do not submit credentials you are not authorised to use.

Legal basis: Art. 6 (1) (b) GDPR where the tool is used in connection with our services, otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in providing the requested diagnostic function.

For branded short links we operate, we store the destination URL, creation metadata and an aggregated click counter with the time of the last click. We do not store the IP address, user agent or other identifiers of individual clickers for that purpose.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is operating and measuring the short-link service.

If you visit the site with a valid referral parameter, we set an httpOnly cookie that stores only the referral code for up to 30 days so that a later registration can be attributed to the referrer. No advertising profile is built from this cookie.

Legal basis: § 25 (2) TDDDG (strictly necessary for a service you requested by following the referral link) in conjunction with Art. 6 (1) (b) / (f) GDPR.