Get a key
Privacy

The whole file.

This is a list of everything GhostConnect stores, taken from the database it runs on. If something is not on this page, we do not have it, so no one can get it from us.

Never collected

Name. Email address. Phone number. Postal address. Identity documents. Date of birth. There is no form field for any of them anywhere on the site, and no way to add one to an account.

What an account holds

  • A hash of your access key. A one-way SHA-256 digest used to find your account when you sign in. The key itself is shown to you once and never stored.
  • An account number and the date it was created.
  • Your balance.
  • Invoices: what was bought, the amount, how it was paid, its status and when. For crypto and card payments, a reference to the payment (the processor's invoice id or the card processor's session id).
  • Your proxies: type, country, expiry, bandwidth, the credentials to use them, and any source IP addresses you choose to allowlist. Allowlisted addresses are the only IP addresses of yours that are ever stored, and only because you add them.
  • API keys you create: a SHA-256 hash of each, its first eight characters so you can tell them apart, the label you give it and the date it was made. Nothing records when a key is used or from where.
  • Retry records for API orders: when an API purchase carries an Idempotency-Key, that key and the response are kept for 24 hours so a retry cannot buy twice, then deleted.
  • Support messages you send and the replies. Text only; nothing can be attached.
  • Notifications we send you about orders and expiry.

Cookies and the browser

Reading public pages sets no cookie and stores nothing. Creating an account or signing in sets one session cookie, which ends when you sign out or close the browser. There is no remember-me token. The site runs no JavaScript: its Content-Security-Policy forbids scripts, and it loads nothing from any other website.

Abuse protection

To slow down password guessing and spam sign-ups, the site counts attempts per connection. It does this without keeping your address: the counter is named with a keyed hash that changes every day, lives in temporary files rather than the database, and is deleted within hours.

Payments

  • Crypto goes through our own payment processor, not a payment company. A coin transaction is recorded on its public blockchain, as with any payment in that coin; Monero hides sender, receiver and amount.
  • Cards are paid on Stripe's own page. Stripe receives your card details and may ask for an email for its receipt, under its own privacy policy. We receive a session reference and whether it was paid, never the card number or email.

How long anything is kept

  • Accounts with no balance, no proxies and no messages are deleted after 24 hours.
  • Expired proxies are removed 14 days after they expire.
  • Read notifications and bandwidth history are deleted after 90 days.
  • Deleting your account in Settings removes every record listed above at once.

Requests for data

Whoever asks, the most we could ever provide is what this page lists. It contains no way to tell who holds an account.

Scope

This page describes the data this website and its database hold. It makes no claims about the networks your proxied traffic travels across after it leaves an exit.