1. What this page covers
This page explains what LotusProxy keeps when you use lotusproxy.com, and what we do not keep. It covers the website, the account area, and the proxy packs.
2. What we keep
We keep the account data needed to sign you in and keep the account secure: your username, a password hash, the account creation time, the last sign-in time, your role, an optional two-factor secret, and the source IPs or CIDRs you add to your allowlist.
We keep pack orders and the data needed to deliver them: the exit IPs, relay ports, term, expiry, and the balance and deposit records needed to credit payments and settle refunds. We keep support ticket messages so we can answer them.
3. What we do not keep
We do not keep access logs. The origin server does not record visitor IP addresses, request paths, or user agents. We do not log the traffic that passes through a proxy pack, or the sites you reach through it.
The site uses your IP in memory for rate limits and captcha checks. It is not written to a log or stored with the account.
We do not ask for an email address, so we normally hold none. We do not store card numbers, bank details, identity documents, or advertising profiles. We do not run analytics or third-party trackers on the site.
4. Crypto payments
Deposits are checked on-chain. To add a deposit to your balance and answer a payment question, we keep the coin, amount, deposit address, transaction ID, confirmation state, and the result of the credit. We do not keep wallet keys, seed phrases, or withdrawal credentials.
We do not write payment details to server logs. The deposit watcher logs only its interval and errors, not addresses or amounts.
5. Cookies
The site uses a short set of essential cookies and nothing else. There are no analytics cookies, advertising cookies, or third-party cookies.
sessionkeeps you signed in. It lasts up to seven days.capties a captcha challenge to your browser. It lasts 30 minutes.p2faholds a short marker while two-factor sign-in is completed. It lasts five minutes.presetholds a short marker while a password reset is completed. It lasts 15 minutes.
These cookies are required for sign-in, forms, captcha, and password reset. If you clear them, you will be signed out and forms will fail until you load a new page. We do not use a consent banner because there are no non-essential cookies to consent to.
6. Who processes data
Cloudflare terminates TLS and forwards requests to our origin. It may process request metadata under its own policy. Our origin does not keep access logs. Our hosting and database providers process account and order data on our instructions. We do not sell data.
7. How long we keep records
Account, order, and deposit records stay while your account is open, because they are needed to run the service and answer payment questions. Support tickets stay for up to 24 months. We do not keep access logs, so there is no access history to delete.
8. Your choices
You can ask to see, correct, or delete your account data by opening a ticket. Because we do not hold an email address, we verify the request through your account. You can also clear the site's cookies in your browser, though that signs you out.
9. Changes
If this page changes, the date at the top changes too. Material changes take effect at least fourteen days after they are posted.
10. Contact
Open a ticket from your account, or message us on Telegram at t.me/lotusproxysupp.