Privacy Policy

Last updated: 23 August 2026

== Who we are

FreeProxy is operated by Digital Chitrakar, India. It comprises the
FreeProxy Android application (com.digitalchitrakar.freeproxy),
the FreeProxy browser extension, and this website.

For anything in this policy, or to request deletion of your data, email
digitalchitrakar@gmail.com
or use the contact form.

== The short version

In the Android app you can browse the proxy list, unlock ports by
watching an ad, and use the built-in VPN without an account and without
giving us any personal information. An account is needed only to buy or
spend coins, and a phone number only at the moment of payment.

The Firefox extension does require signing in with Google, because
it spends coins from the same balance and a balance has to belong to an
account that survives a reinstall.

== What we collect, and when

-- Using the app without an account

You still do not need to create an account, give us an email address, or
tell us anything about yourself to browse the proxy list and unlock proxies.

• An anonymous account identifier — issued automatically on first
  launch by Firebase Authentication. It contains no personal information and
  is not a hardware or advertising ID. Uninstalling the app or clearing its
  data ends it permanently and a new one is issued next time.
• Which proxies you have unlocked, held on our servers against that
  anonymous identifier. This is what lets an unlock you paid for come back
  after reinstalling, and it is why we need an identifier at all.
• A count of verified ad rewards you have earned and not yet used.

-- If you sign in with Google

• Your email address, display name, and Google account
  identifier. We use these solely to attach your coin balance to an account
  so it survives reinstalling the app or changing phones.
• Your coin balance and a record of coins spent.

-- Using the Firefox extension

The extension needs you to sign in with Google, because it works from the
same coin balance as the app and a balance has to belong to an account.

• Your email address and Google account identifier, obtained when
  you sign in and used to identify your coin balance. Your email is shown in
  the extension so you can see which account is active.
• A sign-in token kept in the browser's own extension storage so you
  are not asked to sign in on every use. Signing out deletes it.
• Which proxies you have unlocked, and the connection details of
  those proxies, cached in the browser so reconnecting does not need another
  request.

The extension changes which server your traffic is routed through. It does
not read, record, or transmit the pages you visit, and it sends us nothing
about your browsing. See the note below about third-party proxy operators,
which applies equally here.

-- If you buy coins

• A mobile number, which our payment gateway requires on the order
  and uses for the payment receipt.
• The order amount, coin pack, and a payment reference.

We never see your card, UPI, or bank details. Payments are processed
entirely by Cashfree Payments; those details go to them and never reach our
servers or this website.

-- If you contact us

• The name, email address, and message you submit, so we can reply.

-- Advertising

• We show ads via Google AdMob, which may use your device's
  advertising identifier to select ads. Where the law requires it, we ask for
  your consent first through Google's consent form, and you can change that
  choice at any time in the app.
• When you watch an ad to unlock a proxy, we pass your anonymous
  account identifier to Google so that Google can confirm back to us that
  the ad was genuinely watched, and we credit the right person. It is the
  identifier described above, not your name or email.

-- Notifications

• If you allow notifications, Firebase Cloud Messaging issues a device
  token so we can tell you when new proxies are added.

== What we do not collect

• Your browsing history. We do not record which sites you visit.
• Your traffic. The VPN carries your connection to the proxy server
  you chose; we do not inspect, log, or store its contents.
• Your DNS lookups. The VPN is configured so that domain resolution
  is handled inside the tunnel rather than sent to a DNS server on the
  network you are connected to.
• Your card details. See the payment note above.

An important limit on that. The proxy servers listed in the app are
operated by third parties, not by us. Once your traffic reaches one of them
it is subject to whatever that operator does or does not log, which we have
no visibility into or control over. Treat public proxies accordingly and do
not use them for anything sensitive.

== Who processes your data

• Google — Firebase Authentication, Firestore, Cloud Functions and
  Cloud Messaging (hosting and infrastructure); AdMob (advertising);
  Google Play (app distribution).
• Cashfree Payments — payment processing for coin purchases.
• Resend — delivery of transactional email and contact-form
  messages.

We do not sell your personal information, and we do not share it for
advertising purposes beyond the AdMob processing described above.

== How long we keep it

• Account and coin balance — until you ask us to delete the account.
• Payment records — retained as long as required for tax and
  accounting obligations in India.
• Contact messages — kept while we handle your query and for a
  reasonable period afterwards.
• Unlock records — which proxies your identifier has unlocked, kept
  while that identifier exists, so a proxy you paid for stays available to
  you. Deleted with the account.
• Locally cached data (proxy details for unlocks you own, sign-in
  token) — removed when you clear the app's data, uninstall it, or sign out
  of the extension.

== Your choices

• Delete your account and data — email us and we will remove your
  account, balance, and associated records. Note that deleting an account
  also forfeits any unspent coins.
• Use the app anonymously — simply do not sign in. Unlocking ports by
  watching an ad works without an account.
• Ad personalisation — change your consent choice in the app.
• Notifications — turn them off in your device settings.

== Children

FreeProxy is not directed at children under 13, and we do not knowingly
collect information from them. If you believe a child has provided us with
personal information, contact us and we will delete it.

== Security

Access to your coin balance is enforced server-side: a signed-in user can
read and spend only their own balance, and balances can only ever be
increased by our server after a payment has been verified with the payment
gateway. No client can credit itself.

That said, no method of transmission or storage over the internet is
completely secure, and we cannot guarantee absolute security.

== Changes

We may update this policy as the product changes. The date above always
reflects the current version, and material changes will be announced in the
app.