Privacy Policy
This Privacy Policy describes how Shadow Moon Labs ("we," "us," or "our") collects, uses, and shares information when you use the ProxyCat application and website (collectively, the "Service").
1. Information We Collect
Account information: When you register for a ProxyCat account, we collect your email address and a hashed password. We do not store your plaintext password.
Payment information: Payments are processed by Stripe, Inc. We do not store your full credit card number or billing details. Stripe stores payment information on our behalf subject to their own privacy policy. We receive limited billing metadata (last 4 digits, card type, billing country) from Stripe.
Proxy traffic: ProxyCat captures HTTP/HTTPS traffic that passes through its proxy on your local machine. This traffic is stored locally on your device. We do not transmit your captured requests or responses to our servers. Your proxy traffic is entirely your own data.
Optional AI connections: MCP access is off by default. If you enable it for an app session, your chosen MCP client can read capture metadata such as hostnames, methods, status codes, timings and sizes. This version omits bodies, URL paths, queries, headers and account details. Your client may send that metadata to its AI provider under that provider's terms. Disconnect in ProxyCat to revoke access.
Usage data: Plan limits are enforced on your own machine; we receive no traffic counts, and we do not log the content, URLs, or metadata of your proxied requests on our servers.
Device activations: When you sign in from the app or create a server licence, the account service records an opaque device id, the computer's name (for servers, the name you gave it), its platform, and when it was last seen, so that the plan's device limit can be enforced and you can remove a device from your account page.
Log data: Our API server logs basic request metadata (endpoint, HTTP method, response code, timestamp) for operational purposes. These logs do not contain the content of your proxied traffic.
2. How We Use Your Information
Trial eligibility: To prevent repeated free trials across accounts, we keep hashed account and supplied installation identifiers, and hashed Stripe card fingerprints, associated subscription IDs, and trial decision dates. We do not receive or store full card numbers for this check. These eligibility records survive account deletion while needed to enforce the one-time trial offer; contact privacy@proxycat.app about access or deletion requests.
- To provide and maintain the Service (account management, subscription billing, plan enforcement).
- To send transactional emails (account confirmation, billing receipts, subscription changes).
- To respond to support requests.
- To improve the Service and diagnose technical issues. Our account service keeps aggregate counts of sign-ups and checkouts by where they started (for example, from the daily-limit prompt); these are totals only and are not linked to any account.
- To comply with legal obligations.
We do not sell your personal information to third parties. We do not use your data for advertising.
3. Data Sharing
We share your information only in the following circumstances:
- Stripe: Your email and subscription information is shared with Stripe for payment processing.
- Your chosen MCP client and AI provider (optional, "Connect AI"): If you enable MCP access, your client can read local capture metadata for that app session. Bodies, URL paths, queries, headers and account details are omitted. Your client controls whether it sends the metadata to an AI provider; that client's and provider's privacy terms apply. ProxyCat does not receive the conversation or require a provider API key. Disconnect revokes access immediately.
- Legal requirements: We may disclose information if required by law, regulation, or valid legal process.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity with prior notice.
4. Data Retention
We retain account information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).
5. Your Rights
Depending on your location, you may have rights regarding your personal data, including:
- The right to access the personal data we hold about you.
- The right to correct inaccurate data.
- The right to delete your account and associated data.
- The right to data portability (export your data in a machine-readable format).
- The right to object to or restrict certain processing.
To exercise these rights, email us at privacy@proxycat.app. We will respond within 30 days.
6. Security
We use industry-standard security measures including HTTPS encryption in transit, bcrypt password hashing, and JWT tokens for session management. No method of transmission over the internet or electronic storage is 100% secure; we cannot guarantee absolute security.
7. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.
8. Cookies
The ProxyCat marketing website uses no tracking cookies or analytics scripts. The application may use localStorage to persist preferences (theme, API base URL) locally in your browser. No cross-site tracking is performed.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the application. The "Last updated" date at the top of this page reflects the most recent revision.
10. Contact
Questions or requests about your privacy? Email us at privacy@proxycat.app.
© Shadow Moon Labs. Terms of Service