Quick answer
What personal data does CrawlRelay keep?
CrawlRelay keeps the minimum needed to run the service and handle abuse reports. We do not log the content of your requests, full URLs or page data. To handle abuse reports and billing disputes, we keep connection metadata (time, account, exit IP, target hostname, bytes) for up to 30 days, then delete it. We keep your account number, orders, top-up records and traffic totals while your account is open, and afterwards only as long as accounting rules require. We disclose records to authorities only when the law requires it. Our upstream network provider may keep its own logs under its own policy. Email is stored only when you choose to add it. Identity documents, selfies, names and postal addresses are not requested: there is no KYC, and payment is in crypto. We do not sell personal data or use it for advertising.
1. Who is responsible
ProxyGoat LLC, a Delaware limited liability company (USA) that operates CrawlRelay, is responsible for the data described here. Privacy questions and requests go to [email protected].
2. What we collect and why
| Data | Why | Legal basis (GDPR) | Source |
|---|---|---|---|
| Account number | Your login | Contract (Art. 6(1)(b)) | Generated at sign-up |
| Email address (optional) | Receipts, security notices, account recovery | Contract (Art. 6(1)(b)) | You, if you add it |
| Orders and top-ups: amount, coin, network, date | Delivery, refunds, accounting, fraud prevention | Contract; legal obligation for accounting (Art. 6(1)(c)); legitimate interest in preventing fraud (Art. 6(1)(f)) | Your purchases |
| Traffic totals per plan and sub-user | Usage display, billing | Contract (Art. 6(1)(b)) | The gateway |
| Connection metadata: time, account, exit IP, target hostname, bytes (up to 30 days) | Answering abuse reports and billing disputes, protecting the network and the sites it reaches | Contract; legitimate interest in handling abuse (Art. 6(1)(f)) | The gateway |
| API keys, sub-user settings and allowlisted IPs | Running the service as you configured it | Contract (Art. 6(1)(b)) | You |
| Support emails | Answering you | Contract; legitimate interest in answering requests (Art. 6(1)(f)) | You |
3. What we never collect
- Identity documents, selfies, proof of address: with no KYC, none are requested.
- Payment cards and bank accounts: crypto is the only payment method.
- The content of your requests, full URLs and page data: not logged.
Your traffic crosses partner networks that operate their own infrastructure and may keep their own connection records under their own policies; the sourcing page describes that relationship.
4. Cookies and analytics
The client area keeps you logged in with a single session cookie, removed when you log out or when the session times out. The public website sets no advertising cookies.
5. Payments
Crypto top-ups are processed by a payment processor that we do not name publicly. It sees the payment amount and the on-chain details required to confirm it, and no identity documents, since we have none. Blockchain transfers are public by design, which matters when you pick the wallet you pay from.
6. How we use data
Account operation, credential delivery, usage reporting, support replies, refunds, abuse investigations, security and legal compliance: nothing else. We do not sell personal data, share it for advertising or use it to profile you.
7. Recipients
- Our payment processor, for the data needed to confirm a payment.
- Partner networks, only what they need to carry traffic and handle abuse reports about it.
- Authorities, when valid legal process requires it under the applicable law. We can only provide data we hold; partner networks keep their own records.
We share nothing else with anyone else.
8. How long we keep data
Connection metadata (time, account, exit IP, target hostname, bytes) is kept for up to 30 days, then deleted. Your account number, orders, top-up records and traffic totals stay while your account is open, and afterwards only as long as accounting rules require. Abuse cases and legal duties can require keeping specific records longer; write to [email protected] to learn the period for a specific item.
9. Your rights
You may request access to your data, its correction, or the deletion of the account and everything tied to it. Send the request to [email protected] from the email linked to the account, or include your account number, which is your login. Without either, we cannot link a request to an account. Once an account is deleted, its remaining balance can no longer be used.
Depending on where you live, laws such as the EU and UK GDPR or the California Consumer Privacy Act, as amended by the CPRA, give you these and other rights. Replies come within the deadline set by the law that applies to you.
10. Security
We protect stored data with reasonable technical and organisational safeguards. Because the account number doubles as your login, keep it in a password manager. Give each scraper its own sub-user, and change any proxy password or API key you think has leaked. We never ask for your account number by email or chat.
11. Children
Customers must be 18 or older, and we do not knowingly keep data about minors.
12. Changes and contact
This policy can change; the date above identifies the version in force, and the changelog notes significant edits. Questions and requests: [email protected].