Privacy Policy

Who is responsible for your data?

The data controller is ProxyGoat LLC, which operates PontProxy at https://pontproxy.com. The controller decides why and how your personal data is used.

This policy covers the website, the client area and the proxy service itself. It applies the EU General Data Protection Regulation (Regulation (EU) 2016/679) and the UK GDPR, together with the UK Data Protection Act 2018.

For any privacy question, write to [email protected].

Why do we collect so little?

We follow the data minimisation principle. Article 5(1)(c) of the GDPR says personal data must be "adequate, relevant and limited to what is necessary" for the purpose of the processing. The UK GDPR contains the same principle in the same words.

A proxy service needs an account, a payment and a traffic balance. It does not need your identity. That is why you can buy any plan on the pricing page with an account number only. The no-KYC proxies page explains how this works in practice.

What personal data do we collect?

We collect the data below, and nothing else:

• Account number — created for you at sign-up. It is your login.
• Email address (optional) — only if you add one, for receipts and account notices.
• Order history — the plans you bought, with dates and amounts.
• Payment records — the amount, coin, network and blockchain reference matched automatically to your top-up.
• Per-day traffic totals — how much traffic your account used each day, to show your balance.
• Connection metadata — the timestamp, target domain and bytes of each connection, kept for a short time for abuse handling.
• Messages you send us — the content of support or abuse emails, and the address they come from.
• Referral code — only if you reached the client area through a partner link. It is sent with your sign-up so we can credit that partner.

When you visit the website, our hosting provider also receives your IP address and the page you request. Every web server needs this to deliver a page.

What do we never collect?

We never ask for, and never store:

• your name;
• an ID document, such as a passport, driving licence or identity card;
• a selfie or any other biometric data;
• a postal address;
• a phone number;
• card or bank details.

We also do not store the content of the pages or files you load through the proxies. No KYC — no ID, no selfie, no documents. Pay in crypto.

On what legal basis do we use your data?

Each use of your data has one of three legal bases under Article 6(1) of the GDPR and the UK GDPR:

• Contract — Article 6(1)(b). We need your account number, orders, payment records and traffic totals to deliver the service you buy. The same applies to your email address if you choose to add one. The law allows processing that "is necessary for the performance of a contract" with you.
• Legitimate interests — Article 6(1)(f). We keep connection metadata for a short time to detect and stop abuse, to protect our network partners and to enforce the Acceptable Use Policy. We also keep a referral code, if any, to credit the partner who sent you. Some targets are blocked for every customer: online banking, government portals, payment processors and outgoing email (SMTP ports 25, 465 and 587).
• Legal obligation — Article 6(1)(c). We keep order and payment records when accounting or tax law requires it. We also answer legal orders that bind us.

We do not use your data for advertising, and we do not sell it.

Who else handles your data?

We use a small number of service providers. Each one receives only the data it needs for its task:

• Hosting and content delivery — serves this website and the client area. It receives your IP address and the pages you request.
• Crypto payment processing — creates the payment request and confirms the transaction. It receives the order amount, the coin and the transaction details. It does not receive your name, because we do not have it.
• Network partners — established residential and mobile networks carry your proxy traffic. They process the technical data needed to route it, and they may keep their own technical logs under their own policies. Read how we source our IPs.

On-chain crypto payments are also recorded on a public blockchain. The blockchain shows the transaction, not your account number.

We do not sell personal data, and we do not share it with advertisers or data brokers.

Is your data transferred outside the UK or the EU?

It can be. Some of our providers may process data outside the UK or the European Economic Area (EEA). When that happens, we use a transfer tool that the law recognises:

• an adequacy decision of the European Commission (EU GDPR Article 45), or UK adequacy regulations (UK GDPR Article 45A); or
• appropriate safeguards, such as standard contractual clauses (EU GDPR Article 46(2)(c); UK GDPR Article 46).

Your proxy traffic also leaves the network in the country you choose. That routing is the service you buy. To learn which transfer tool covers a given provider, write to [email protected].

What are your rights, and how do you use them?

You have these rights under the EU GDPR and the UK GDPR:

• Access (Article 15) — get a copy of the data we hold about you.
• Rectification (Article 16) — correct data that is wrong, such as your email address.
• Erasure (Article 17) — ask us to delete your data. We then keep only the records that the law requires.
• Restriction (Article 18) — ask us to pause the use of your data while a question is checked.
• Objection (Article 21) — object to processing based on legitimate interests, such as abuse handling.
• Portability (Article 20) — receive the account data you gave us in a structured, commonly used and machine-readable format.

To use a right, email [email protected] and include your account number. Never send your password. We check that the request comes from the account holder, and we never ask for an ID document to do so.

We answer within one month of receipt, free of charge. For complex or numerous requests, the law allows two more months. If we need them, we tell you why within the first month.

How do you complain to a regulator?

You can complain to us first, by email to [email protected]. Under section 164A of the UK Data Protection Act 2018, we acknowledge a data protection complaint within 30 days. We then respond without undue delay and tell you the outcome.

You also have the right to complain to a supervisory authority:

• United Kingdom — the Information Commission. It replaced the Information Commissioner, known as the ICO, on 30 September 2026. Use the complaint page on ico.org.uk.
• European Union and EEA — the data protection authority where you live, where you work, or where the alleged infringement took place (GDPR Article 77). The European Data Protection Board lists every national authority.

What happens when the police or a court ask for data?

We disclose data only to answer a valid legal order that binds us under the laws of the State of Delaware, United States. We check each order before we act on it.

We can only hand over the limited data listed on this page. That is the account number, the email address if one was added, order history and payment records. It also includes per-day traffic totals and any connection metadata not yet deleted. We hold no names, ID documents, postal addresses, phone numbers or card details, so we cannot disclose them.

We do not give customer data to people who report abuse. Authorities should follow the process on our contact page.

Does this website use cookies or trackers?

No. Our website and client area code set no cookies. They load no third-party analytics, advertising or social-media scripts. Three technical points apply:

• Referral and campaign links on the public website. Some links contain a ref or utm_ parameter. A short script then copies those parameters into the buy links on that page. The public website stores nothing in your browser.
• Referral code in the client area. If the client area opens with a ref parameter, it saves that code in your browser's local storage. The code is sent with your sign-up so we can credit the partner who sent you.
• Sign-in and language. The client area keeps a sign-in token in local storage, so you stay signed in. Signing out removes it. It also remembers your language choice.

UK law allows storage that is strictly necessary for a service you asked for. It also allows storage that adapts a website to your preferences, such as language (PECR regulation 6 and Schedule A1). EU law exempts storage that is strictly necessary for a service you asked for (ePrivacy Directive, Article 5(3)). You can remove all these items at any time by clearing this site's data in your browser settings.

How will we tell you about changes to this policy?

The date at the top of this page shows the last update. We list material changes, with their date, in the changelog.

How do you contact us about privacy?

Email [email protected] with your account number, and never your password. To report abuse of our network, write to [email protected]. All contact details are on the contact and abuse reports page.