Privacy Policy

Account & billing:

• Email address, name (optional), and a salted, hashed password — we never store your password in plain text.
• If you sign in with Google, your Google account email and display name, and an internal Google account identifier used to link the accounts.
• Payment metadata: amount, currency, payment method, and status. We do not receive or store your full card number, bank details, or crypto wallet private keys — those are handled entirely by PayPal, our self-hosted BTCPay Server, or NOWPayments.
• API key labels and a hashed fingerprint of each key. The full key value is shown to you once at creation and is not recoverable by us afterward.

Usage & support:

• Aggregate bandwidth usage (gigabytes consumed) per billing period, tagged only with a coarse category like "residential-https" — not the destination URLs, hostnames, or content of your proxied requests.
• Support ticket subject lines and message content you submit to us.

Central to how NodeLighthouse is built: the proxy gateway meters bandwidth by byte count, not by inspecting or recording what you're accessing. We do not log the destination URLs, hostnames, request/response bodies, or headers of traffic routed through your proxy connection.

• A session cookie (httpOnly, not readable by JavaScript) that keeps you signed in.
• A short-lived cookie used only during the Google sign-in redirect, to prevent cross-site request forgery. It is deleted immediately after sign-in completes.
• We do not use third-party advertising or analytics trackers on the dashboard.

• To provide, meter, and bill the Service.
• To authenticate you and secure your account.
• To respond to support requests and send transactional email (password resets, ticket replies).
• To investigate suspected Acceptable Use Policy violations or fraud.

• Our upstream network provider, to the extent necessary to route your proxy traffic (this does not include your account email or payment details).
• Payment processors (Paddle as merchant of record for card payments; NOWPayments) for the portion of a transaction they process. Crypto payments through our self-hosted BTCPay Server are processed on our own infrastructure, not a third party.
• Our email delivery provider, to send transactional email.
• Law enforcement or other parties, only where required by valid legal process or to prevent fraud, abuse, or harm.

We do not sell your personal information.

We retain account and billing records for as long as your account is active and for a reasonable period afterward to meet accounting, tax, and fraud-prevention obligations. You can request deletion of your account as described in Section 8; some records may be retained where we have a legal obligation to keep them.

Passwords are hashed with scrypt; API keys are stored as a one-way hash, never in plaintext. Sessions and password-reset links are single-use, random tokens with expiration. All dashboard and API traffic is served over HTTPS in production. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

You can access and update your account information from your dashboard at any time. To request a copy of your data or deletion of your account, email support@nodelighthouse.com. We will respond within a reasonable time and verify your identity before acting on the request.

The Service is not directed at, and may not be used by, anyone under 18. We do not knowingly collect information from children.

We may process and store information in countries other than your own. Where we do, we take reasonable steps to protect it consistent with this policy.

We may update this policy as the Service evolves. Material changes will be reflected by the "Last updated" date above.

Questions about this policy or your data: support@nodelighthouse.com