Privacy Policy
Effective Date: February 13, 2026
Last Updated: March 4, 2026
1. Introduction
BlackieShield ("we", "us", "our") operates the BlackieShield platform, which provides proxy and VPN services. This Privacy Policy describes how we collect, use, and protect your personal information when you use our services.
By using BlackieShield, you consent to the data practices described in this policy. If you do not agree, please do not use our services.
2. Information We Collect
2.1 Account Information
- Username
- First and last name
- Email address (for account creation and communication)
- Mobile phone number (optional for Google Sign-In users)
- Password (stored as a one-way bcrypt cryptographic hash — we cannot read it)
- Payment information (processed by PayPal or Paystack — we do not store credit card numbers)
2.2 Information from Third-Party Authentication (Google Sign-In)
If you choose to sign in or register using Google Sign-In, we receive and store the following information from your Google account:
- Email address — used as your account identifier
- Full name (given name and family name) — used to populate your profile
- Profile picture URL — displayed on your account profile (optional)
- Google account identifier (a unique ID) — used to securely link your Google account
- Email verification status — used to confirm your email is verified by Google
We do not receive or store your Google password. Authentication is handled entirely by Google's servers using the OAuth 2.0 protocol. We do not access your Google contacts, calendar, drive, or any other Google services beyond basic profile information.
BlackieShield's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
2.3 Usage Metadata
- Bandwidth consumption (total bytes transferred per session)
- Connection timestamps (when sessions start and end)
- Service type used (proxy or VPN)
- Server location selected
2.4 What We Do NOT Collect
- We do not log the content of your traffic (websites visited, data transferred)
- We do not log DNS queries
- We do not store your originating IP address after the session ends
- We do not sell or share your data with third parties for advertising
- We do not use your data for profiling or targeted advertising
3. How We Use Your Information
- To create and manage your BlackieShield account
- To authenticate you when you sign in (including via Google Sign-In)
- To provide and maintain the proxy and VPN services
- To enforce subscription quotas and fair usage limits
- To process payments and manage billing
- To communicate service updates and security notices
- To detect and prevent abuse of our services
- To respond to support requests
4. How We Share Your Information
We do not sell your personal information. We may share information only in these circumstances:
- Payment processors: PayPal and Paystack receive payment-related data to process transactions.
- Infrastructure providers: Our database hosting provider (MongoDB Atlas) stores data encrypted at rest and in transit.
- Legal obligations: We may disclose information if required by law, court order, or government regulation.
- Safety: We may share information if necessary to prevent fraud, abuse, or threats to safety.
5. Data Retention
| Data Type | Retention Period |
|---|
| Account information | Until account deletion |
| Google authentication link | Until unlinked or account deletion |
| Usage metadata (bandwidth) | 90 days |
| Connection timestamps | 30 days |
| Billing records | As required by law (typically 7 years) |
| Security audit logs | 1 year |
| Support tickets | 1 year after resolution |
6. Your Rights
6.1 All Users
- Access: Request a copy of all personal data we hold about you via your dashboard or by contacting us.
- Correction: Update your account information through the dashboard settings.
- Deletion: Delete your account and all associated data through your dashboard settings.
- Data export: Export your data in a machine-readable JSON format via the dashboard.
- Unlink Google: If you signed in with Google, you may set a password and continue using email/password authentication. You may also revoke BlackieShield's access from your Google account permissions page.
6.2 European Economic Area (GDPR)
If you are in the European Economic Area, you additionally have the right to:
- Portability: Receive your data in a structured, commonly used, machine-readable format.
- Restriction: Request that we restrict processing of your data in certain circumstances.
- Objection: Object to processing of your data for certain purposes.
- Lodge a complaint: File a complaint with your local data protection authority.
6.3 California Residents (CCPA)
California residents have the right to:
- Know what personal information is collected and how it is used.
- Request deletion of personal information.
- Opt out of the sale of personal information (we do not sell personal information).
- Non-discrimination for exercising privacy rights.
7. Cookies
BlackieShield uses the following cookies:
| Cookie | Purpose | Duration |
|---|
bp-session | Authentication session (HTTP-only) | 7 days |
bp-oauth-state | CSRF protection during Google Sign-In (HTTP-only, temporary) | 10 minutes |
We do not use third-party tracking cookies, analytics cookies, or advertising cookies.
8. Security
We implement industry-standard security measures including:
- Ed25519 cryptographic signatures for authentication tokens
- bcrypt password hashing with configurable salt rounds
- TLS encryption for all connections
- WireGuard protocol for VPN tunnels
- Rate limiting and brute-force protection
- HTTP-only, secure cookies for session management
- CSRF protection on all authentication flows
- Server-side verification of all third-party authentication tokens
9. Third-Party Services
10. Children's Privacy
BlackieShield is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will delete that information promptly.
11. International Data Transfers
Your data may be processed in countries other than your country of residence. We ensure appropriate safeguards are in place for any international data transfers in compliance with applicable data protection laws.
12. Law Enforcement
We may disclose information if required by law, subpoena, or court order. Because we do not log traffic content or browsing activity, we have limited data to provide. We will notify affected users of law enforcement requests unless prohibited by law.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email of any material changes at least 30 days before they take effect. The "Last Updated" date at the top of this page reflects the most recent revision.
14. Contact
For privacy-related inquiries, contact us at: support@blackieshield.com
To exercise your data rights (access, deletion, export), you may also use the self-service tools in your dashboard security settings.
Terms of Service | Back to Home