Privacy Policy

1. Controller

The operator of NINJA PROXY is the controller of personal data processed through the Service. Contact @ninja_supp (Telegram) for privacy, access, correction or deletion requests.

This Policy covers the website, accounts, payments, orders, support and technical monitoring.

2. Data we receive

• Account data: internal ID, Telegram ID, name, username when available and notification settings.
• Order data: product, country, quantity, duration, protocol, status, price and technical identifiers.
• Payment metadata: amount, currency, network, payment address, provider ID and status. NINJA PROXY does not store wallet private keys.
• Support data: subjects, messages and handling history.
• Security and operations data: request times, shortened or hashed network identifiers, device/session details, errors and audit logs.
• Optional product analytics: pseudonymous interface events only after consent.

3. Purposes and legal bases

• Contract: registration, quotes, payment, delivery and support.
• Legitimate interests: account security, fraud prevention, error diagnosis and reliability, where not overridden by your rights.
• Legal obligation: financial records, lawful requests and applicable compliance duties.
• Consent: optional analytics and other features where consent is legally required. Withdrawal does not affect prior lawful processing.

4. Recipients and processors

We use providers for hosting/CDN, database and authentication, payments, Telegram messaging, error monitoring, product analytics and proxy infrastructure. Each receives only the information needed for its function under contractual and technical safeguards.

Current infrastructure may include Vercel, Supabase, Cloudflare, NOWPayments, Telegram, Sentry and PostHog. The processor list can change; current details are available from support.

5. International transfers

Providers may process data outside your country. Where required, we rely on adequacy decisions, standard contractual clauses or another lawful safeguard.

6. Retention

We retain data only as long as needed to operate accounts and services, resolve disputes, prevent abuse and meet legal obligations. Limited financial, audit and security records may remain after account deletion for mandatory periods. Backups expire through their rotation cycle.

7. Cookies and local storage

Necessary cookies and local storage support sessions, language, theme, security and saved configurations. They are required for requested functions.

PostHog and Vercel Speed Insights are optional analytics and start only after “Allow analytics” is selected. Refusing does not restrict the Service. Use “Cookie settings” in the footer to change your choice.

8. Your rights

• Access your data and obtain a copy.
• Correct inaccurate data.
• Request deletion or restriction where the law allows.
• Object to legitimate-interest processing.
• Withdraw analytics consent.
• Complain to the competent data protection authority.

9. Security and children

Controls include access separation, encrypted transport, hardened password hashing, administrator audit trails and incident monitoring. No storage method eliminates all risk.

The Service is not intended for people who cannot enter into this agreement under applicable law. We do not knowingly collect children's data.