Get a key
Privacy

The whole file.

This is a list of everything GhostConnect stores, taken from the database it runs on. If something is not on this page, we do not have it, so no one can get it from us.

Never collected

Name. Email address. Phone number. Postal address. Identity documents. Date of birth. There is no form field for any of them anywhere on the site, and no way to add one to an account.

What an account holds

  • A hash of your access key. A one-way SHA-256 digest used to find your account when you sign in. The key itself is shown to you once and never stored.
  • An account number and the date it was created.
  • Your balance.
  • Invoices: what was bought, the amount, how it was paid, its status and when. For crypto and card payments, a reference to the payment (the processor's invoice id or the card processor's session id).
  • Your proxies: type, country, expiry, bandwidth, the credentials to use them, and any source IP addresses you choose to allowlist. Allowlisted addresses are the only IP addresses of yours that are ever stored, and only because you add them.
  • If your account moved here from Servury: it uses the same key as your Servury account, and we record the number of the Servury account it came from and whether it was suspended there. Apart from that, only your proxies came with you. Replace your key in Settings and this account no longer shares one with Servury.
  • API keys you create: a SHA-256 hash of each, its first eight characters so you can tell them apart, the label you give it and the date it was made. Nothing records when a key is used or from where.
  • Retry records for API orders: when an API purchase carries an Idempotency-Key, that key and the response are kept for 24 hours so a retry cannot buy twice, then deleted.
  • Support messages you send and the replies. Text only; nothing can be attached.
  • Notifications we send you about orders and expiry.

Cookies and the browser

Reading public pages sets no cookie and stores nothing. Creating an account or signing in sets one session cookie, which ends when you sign out or close the browser. Ticking "stay signed in" at sign-in adds a second cookie that keeps that device signed in for 30 days. It holds a random token, of which only a hash is stored; it is deleted when you sign out on that device, when the account is deleted, and on every device at once when you replace your key. The site runs no JavaScript: its Content-Security-Policy forbids scripts, and it loads nothing from any other website.

Abuse protection

To slow down password guessing and spam sign-ups, the site counts attempts per connection. It does this without keeping your address: the counter is named with a keyed hash that changes every day, lives in temporary files rather than the database, and is deleted within hours.

Proxy traffic

The proxy network keeps two things about each request it carries: the destination it went to and the response status code it got back. Nothing else. They are used for one purpose, measuring success rates so that exits that stop working can be replaced and the pool stays good. The address you connect from is never logged, in any form, at any point in the chain. Neither is the content of what you send or receive: on HTTPS the network cannot see it, and on plain HTTP it does not look.

Payments

  • Crypto goes through our own payment processor, not a payment company. A coin transaction is recorded on its public blockchain, as with any payment in that coin; Monero hides sender, receiver and amount.
  • Cards are paid on Stripe's own page. Stripe receives your card details and may ask for an email for its receipt, under its own privacy policy. We receive a session reference and whether it was paid, never the card number or email.

How long anything is kept

  • Accounts with no balance, no proxies and no messages are deleted after 24 hours, or 7 days after their last crypto invoice, so that a payment arriving late can still be credited.
  • Expired proxies are removed 14 days after they expire.
  • Support conversations are deleted 72 hours after our last reply if you do not answer.
  • Read notifications and bandwidth history are deleted after 90 days.
  • Deleting your account in Settings removes every record listed above at once.

Requests for data

Whoever asks, the most we could ever provide is what this page lists. It contains no way to tell who holds an account.

Scope

This page describes the data this website and its database hold. It makes no claims about the networks your proxied traffic travels across after it leaves an exit.