Privacy Policy

The controller of the personal data collected via the airproxy.store website is:

By accessing the site or creating an account, you acknowledge that you have read this policy and consent to the processing of your data under the conditions described below.

We collect only the data strictly necessary to provide the service. No superfluous data is gathered.

Each processing operation is based on a legal basis within the meaning of Article 6 of the GDPR:

We carry out no commercial canvassing and send no newsletters without prior explicit consent.

Your data may be communicated to the following processors, strictly within the framework of providing the service:

These processors act exclusively on our instructions and are contractually bound to comply with the GDPR. No data is sold to third parties.

Stripe Inc. and Resend are US companies. Transfers to the United States are governed by the Standard Contractual Clauses (SCC) approved by the European Commission, in accordance with Article 46 of the GDPR.

As the main server is hosted by OVHcloud in France, the vast majority of processing takes place within the European Union.

In accordance with the GDPR (Articles 15 to 22) and the French Data Protection Act, you have the following rights:

To exercise one of these rights, send your request by email to privacy@airproxy.cloud, specifying your account email address and the nature of your request. We will respond within 30 days.

The Airproxy site uses a minimal number of cookies, all strictly necessary for the operation of the service:

In accordance with Article 82 of the French Data Protection Act, strictly necessary cookies do not require your prior consent.

We implement appropriate technical and organizational measures to protect your data:

• Password encryption: bcrypt algorithm (cost 12) — never stored in clear text
• JWT authentication: tokens signed with a strong secret, limited validity period
• Secure transport: HTTPS/TLS across the entire site
• Attempt limiting: rate limiting on authentication routes (10 req/min)
• Daily backups: encrypted, kept for 7 days, stored locally on the server
• Restricted access: only the administrator account can access user data
• Dependency updates: regular monitoring of vulnerabilities (npm audit)

In the event of a personal data breach likely to create a risk to your rights and freedoms, we undertake to notify the CNIL within 72 hours in accordance with Article 33 of the GDPR, and to inform you without undue delay if the risk is high (Article 34 GDPR).

The Airproxy service is intended exclusively for adults (18 years or older). We do not knowingly collect personal data concerning minors.

If you are a parent or legal guardian and become aware that a minor has provided us with personal data, please contact us at privacy@airproxy.cloud so that we can delete it as soon as possible.

We reserve the right to amend this privacy policy at any time, in particular to comply with new regulations or with the evolution of the service.

In the event of a substantial change, you will be informed by email at the address associated with your account, at least 30 days before the new provisions take effect.

The date of the last update appears at the top of this document. Continued use of the service after the effective date constitutes acceptance of the changes.

For any question relating to the protection of your personal data or to exercise your rights, contact our data protection officer:

If you consider that your rights are not being respected, you have the right to lodge a complaint with the CNIL (French Data Protection Authority):

You may also use the European online dispute resolution platform: ec.europa.eu/consumers/odr