PRIVACY POLICY FOR INCPROXY

Last Updated: November 10, 2025

Introduction

The incproxy extension respects your privacy. This policy describes what data we collect (or don't collect), how it's used, and how it's protected.

What Data We DO NOT Collect

incproxy does NOT collect, store, or transmit to third parties:

• Personal information (name, email, address, phone)
• Browsing history or visited websites
• Content of web pages you view
• Search queries
• Your online activity data
• Cookies or tracking identifiers
• Payment or financial information
• Geolocation data

We do not analyze your traffic or monitor your online activities.

What Data is Stored Locally

The extension stores the following data only on your device in local browser storage:

Extension Settings:

• Connection status (proxy enabled/disabled)
• Selected proxy server
• WebRTC disable setting
• Timezone spoofing preferences
• Specific sites list for selective proxying

Temporary Cache (8 hours):

• List of available proxy servers
• Authentication credentials for proxy servers

Important: This data is stored locally on your computer only and is never transmitted anywhere. You can clear it at any time by removing the extension.

Network Requests

The extension makes requests only to our API server:
- Purpose: Retrieve available proxy servers and authentication credentials
- Security: All requests protected with HMAC-SHA256 signature and XOR encryption

Data Sent in Requests:

• Extension version
• Extension ID (for cryptographic verification)
• Timestamp
• Nonce (random value)
• Digital signature

What is NOT Transmitted:

• Browsing history
• Personal information
• Your real IP address (proxied)
• User activity data

Required Permissions

activeTab - Display connection status on extension icon

proxy - Manage proxy settings in browser (core functionality)

privacy - Disable WebRTC to prevent IP leaks

storage - Save your settings locally on device

webRequest + webRequestAuthProvider - Auto-authenticate with proxy servers

management - Get Extension ID for cryptographic API protection

<all_urls> - Required for proxy authentication. We do NOT read or modify web page content

Security Measures

Cryptographic Protection:

• HMAC-SHA256 signature on all API requests
• XOR encryption of API response data
• Unique key for each extension installation
• Replay attack protection (timestamp + nonce)

Local Storage:

• All data stored in isolated browser storage
• Not accessible by other extensions or websites
• Automatically deleted when extension is removed

In-Memory Optimization:

• Credentials cached in memory for performance (50-100ms per request)
• Automatic synchronization with storage
• Cache cleared on extension update or removal

"No Logs" Policy

incproxy follows a strict no-logs policy:

• We do NOT record your browsing history
• We do NOT save information about your activity
• We do NOT store connection logs on servers
• We CANNOT recover your usage history

Your privacy is paramount. What you do online stays between you and the websites you visit.

Updates to This Policy

We may update this privacy policy from time to time. The "Last Updated" date at the top indicates when changes were made. Major changes will be announced through extension updates.

Contact Us

If you have questions about this privacy policy:

• Telegram Channel: incvpn_posts
• Support Bot: incvpnbot
• Developer: incdev

Transparency Commitment

We believe in full transparency:

• All extension code can be inspected
• Open communication about what we collect (nothing personal)
• Clear explanation of required permissions
• No hidden data collection or tracking

Your trust is important to us. If you have any concerns, please reach out.

Made with 🧡 by incdev

Protecting your privacy, one connection at a time.