Privacy Policy

foidproxy is operated by foreignID LLC. In these policies "we", "us" and "foidproxy" mean that company. You can reach us at support@foidproxy.com. We are the controller of the personal data described here. Privacy questions and requests go to support@foidproxy.com.

Account data: your email address, an optional display name and account or company name, your password (stored only as a one-way hash) and any two-factor settings you turn on.

Security and audit data: the IP address, browser user agent and approximate country of sign-ups, sign-ins and active sessions, the IP address and time at which you accepted the terms, and a log of security-relevant account changes.

Billing data: your orders, invoices, refunds and Stripe customer and payment references. Card details are entered on Stripe and never reach our servers; we only see the card brand and last four digits.

Usage data: the number of bytes each of your proxy users transfers in each sync window, which we need to debit your balance. Plus the IP addresses you whitelist and the last IP an API key was used from.

Support data: the name, email address, message and IP address you send through the contact form, and the contents of support tickets and replies.

This website: the free tools process the URL or domain you enter in order to check it, and the What is my IP tool reads your address from the request to show it back to you. Neither is stored. Your IP address is held in memory for about a minute to rate-limit the tools.

We do not log the destination hosts, URLs or contents of traffic you send through the proxy gateways. The gateways count bytes per account; connection-level records hold only connection metadata such as the connecting IP address, timings and byte counts, not where the traffic went.

We do not sell personal data, and we do not share it with advertisers or data brokers. The site and the dashboard run no analytics or advertising trackers.

To provide the service you signed up for and bill it accurately (performance of our contract with you), to keep accounts secure and investigate abuse or fraud (our legitimate interests), to answer your messages, and to keep tax and accounting records (legal obligation).

We send service email only: verification, security notices, receipts, usage and expiry alerts and ticket replies. We do not send marketing email.

Stripe (payments, invoices and fraud screening), Mailgun (sending email), Cloudflare (network delivery, DDoS protection, bot checks on sign-up and sign-in, and receiving email to our support addresses) and Discord (internal notifications to our support staff, which can include the text of a ticket). Error monitoring, where enabled, receives technical error details with personal data stripped.

Proxy traffic leaves through upstream network partners who supply the exit IPs. They receive the traffic itself so they can carry it, but not your account details.

When you choose a password we check it against the Have I Been Pwned breached-password list using a partial hash, so neither the password nor its full hash leaves our servers.

Some of these providers process data outside your country, including in the United States. Where the law requires it, transfers rely on the providers' standard contractual clauses or an equivalent safeguard.

Account, usage and support data are kept while your account is open. Expired and revoked sign-in sessions are deleted after 30 days, and one-time links and codes 7 days after they expire. Database backups are kept for 14 days.

When an account is closed we delete or anonymise its personal data within 30 days, except billing records we must keep for tax and accounting law (typically up to seven years) and security audit records, which we keep for as long as needed to investigate abuse and defend legal claims.

You can ask for a copy of your data, ask us to correct it, ask us to delete your account and data, or object to how we use it. Where GDPR or similar law applies, you also have the right to data portability and to complain to your data protection authority.

To make a request, use the data request options under Settings in the dashboard where they are available, or email support@foidproxy.com from the address on your account (or choose "Privacy or data request" on the contact form). We confirm it is you and respond within 30 days.

This website sets no cookies of its own. The dashboard uses only strictly necessary cookies to keep you signed in. The Cookie Policy lists each one.

The service is for adults only. We do not knowingly collect data from anyone under 18, and we close accounts we find were opened by a minor.

We will post any change here with a new date, and email account holders about material changes before they take effect.