Privacy Policy
This policy explains what Toktok Proxy collects, why, how long we keep it, and who else sees it.
What we collect
- Account data: your email address, an optional display name, a hashed password, account status and role, and the time of your last sign-in.
- Plan and billing records: which plan you bought, the order number, amount, currency, and payment status. Card details never reach our servers — Stripe processes them.
- Device registrations: a device identifier generated by the client, plus the device name, platform, app version, and the IP address and time of the most recent registration. This exists to enforce the device limit of your plan.
- Usage totals: aggregate uploaded and downloaded byte counts reported for your account, used to apply plan allowances.
- Support messages: whatever you send us by email.
What we do not collect
We do not log the sites you visit, the destinations you connect to, or the contents of your traffic through the Service.
Why we process it
- To provide the Service and enforce plan limits — performance of our contract with you.
- To take payment and keep accounting records — contractual necessity and legal obligation.
- To answer support requests and prevent abuse — our legitimate interest in running a usable, non-abused service.
How long we keep it
- Account and device records: while the account exists. Removing a device keeps a revoked record so the slot accounting stays correct.
- Order and payment records: retained as long as accounting and tax rules require.
- Support email: deleted once the matter is closed and no longer needed for a dispute.
Who else sees it
- Stripe processes payments and acts as its own controller for the data you give it at checkout.
- Our email provider delivers account emails such as password resets and address verification.
- Our hosting provider stores the application and database.
We do not sell personal data and do not share it for advertising.
Where data is processed
Toktok operates from the State of Wyoming, United States, and the account, billing and device records described above are processed in the United States by us and by the providers listed. Proxy servers themselves are located in the regions shown in the client; they carry your traffic but are not where these records are kept.
If you use the Service from outside the United States, using it means your account data is transferred to and processed in the United States.
Cookies
The website sets a session cookie when you sign in, a CSRF token cookie to protect form submissions, and remembers a language choice if you make one. There are no advertising or analytics cookies.
Your rights
Whatever country you are in, you can ask for a copy of your data, correction of inaccurate data, deletion, restriction of processing, or object to processing based on legitimate interest. Write to privacy@toktok.cc. We may need to verify that the request comes from the account holder. Deleting an account ends access to any remaining paid period.
We do not sell personal information and do not share it for cross-context behavioural advertising, so there is nothing to opt out of. We will not discriminate against you for exercising any of these rights.
Children
The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, write to privacy@toktok.cc and we will remove it.
Automated decisions
We do not use profiling or automated decision-making that produces legal effects for you.
Contact
Data controller: Toktok, the State of Wyoming, United States. Privacy contact: privacy@toktok.cc.