Privacy policy

Version 1.0 · Effective 20 September 2026

The controller for this Policy is the No Socks service (https://nosocks.net). Data questions: [email protected].

1. Scope

This Policy covers data on the site, in the cabinet, at payment, during proxy checks and in support. Naming GDPR or US state laws does not mean each law always applies — only when it actually does.

2. What we collect

• Account: email, password hash (we do not store the password), Google id if you use Google, email-verified time, role, ban flag.
• Telegram id if you bind the cabinet.
• Balance: GB granted and used, ledger.
• Payments: amount, invoice id, status, processor, and the IP/User-Agent when you create an invoice in the cabinet. We do not store full wallet or card numbers.
• Proxy lists and checker logs. Public result links last a limited time (currently 30 minutes).
• Login journal: each sign-in (password, Google, registration, Telegram) and each cabinet visit from a new IP — address, User-Agent, time. History per account is not overwritten by the latest value.
• Technical: IP and User-Agent to the site, for security.
• Support correspondence.

3. Pool data

Residential and mobile IPs belong to pool infrastructure, not your No Socks cabinet. We do not keep names or ID documents of those device owners. Your usage logs belong to your Account.

4. Purposes

Account and proxies — contract. Billing — contract and accounting duties where they exist. Login and payment-IP journals — contract, security, fraud prevention and lawful requests from authorities. Security and abuse — legitimate interest. Support — contract / legitimate interest. Email codes — contract. No marketing mail unless you opt in separately. Without email we cannot create a cabinet; without payment we cannot add traffic.

5. Cookies

See the Cookie Policy (https://nosocks.net/cookies). We only set what the site needs: cabinet session and language. No ad pixels.

6. Recipients

• Hosting.
• Payment processors — amount and invoice id.
• Google — if you choose Google sign-in.
• Transactional email provider — address and confirmation code.
• Pool provider — technical data needed to issue proxies (login, caps, geo), not a sale of your list.
• Authorities — only on a lawful demand.

We do not sell personal data and do not run CCPA-style ad sharing.

7. Storage

• Account — while it exists and up to 12 months after deletion unless law requires longer.
• Payments, cabinet login journals and payment-creation IPs — as law requires, often up to 7 years. Older rows are not overwritten by the latest IP.
• Technical logs — up to 12 months, longer only for security or law.
• Support — up to 24 months.
• Public checker link — about 30 minutes.

8. Rights

You may ask for access, correction, deletion, restriction, objection and, where GDPR applies, portability and withdrawal of consent. Write to [email protected]. We may verify it is you. You may complain to your data-protection authority.

9. Security, children, changes

Passwords are hashed; the session cookie is httpOnly. No method is perfectly safe. We notify of personal-data breaches as the law requires. Services are 18+ only. Current text: https://nosocks.net/privacy. Controlling language: Russian. Contact: [email protected].