Privacy Policy

Last updated: March 1, 2026

1. Overview

BC Systems Ltd ("browser.city," "we," "us," or "our") operates browser.city and associated services. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to that information.

Our platform is built on a zero-logs architecture. This means we do not retain browsing-history logs, page content, screenshots, recordings, cookies, local storage, keystrokes, or client-requested artifacts as BrowserCity vendor logs by default. Operational systems may still process API requests, lifecycle events, billing and session usage facts, routing or destination metadata, provider metadata, and abuse-prevention signals as described below and in the Zero-Logs Policy.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect:

• Email address (required for account access and service notifications)
• Password hash (we store only a salted cryptographic hash, never plaintext)
• Payment information (processed by our payment processors; we do not store full card numbers)
• Account preferences and configuration settings

2.2 Billing Metadata

To operate billing, we collect minimal session metadata:

• Session start and end timestamps
• Session duration in minutes (for billing calculation)
• Proxy tier selected for the session (datacenter, residential, mobile)
• Plan tier active at session time

Billing records are not browsing-history logs and do not include retained page content, request bodies, response bodies, screenshots, or a default retained list of page URLs. Network routing and provider layers may still process destination or routing metadata to deliver traffic, protect the service, and support abuse prevention.

2.3 Usage and Technical Data

We collect limited technical information to operate and improve the platform:

• API request logs at the infrastructure level (endpoint called, response code, latency — no request body content)
• Error and crash reports from the control plane
• Dashboard interaction data to understand feature usage patterns

2.4 Communications

When you contact us by email or through support channels, we retain the content of those communications to respond and resolve your inquiry.

3. How We Use Your Information

We use the information we collect to:

• Provision, operate, and maintain the Service
• Process payments and generate invoices
• Send transactional emails (account creation, billing receipts, alerts you configure)
• Respond to support requests and inquiries
• Detect and prevent abuse, fraud, and violations of our Terms of Service
• Improve the reliability and performance of the platform
• Comply with legal obligations

We do not sell your personal data. We do not use your data to train machine learning models. We do not share your data with advertisers.

4. Data Retention

We retain account information for as long as your account is active. Billing metadata (session duration records) is retained for seven years to satisfy financial record-keeping obligations. When you delete your account, personal information is deleted or anonymized within 30 days, except where retention is required by law.

Session container data is destroyed immediately on session termination. There is no post-session recovery of session content.

5. Cookies and Tracking

We use a small number of strictly necessary cookies to operate the dashboard and maintain your logged-in session. We do not use third-party advertising cookies, tracking pixels, or behavioral analytics on the dashboard.

We do not deploy any analytics or tracking tools inside browser sessions. The sessions you run are isolated from browser.city's own telemetry.

6. Third-Party Services

We share data with a limited set of third-party service providers only as necessary to operate the Service:

• Payment processors — to handle credit card and cryptocurrency payments. These processors are PCI-DSS compliant and process payment data under their own privacy policies.
• Cloud infrastructure providers — for compute, networking, and storage of control-plane data. These providers are contractually bound to process data only on our behalf.
• Transactional email provider — to deliver account and billing emails.

We do not use third-party analytics services (e.g., Google Analytics) on the browser.city dashboard or any page that handles authenticated user data.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data ("right to be forgotten")
• Restrict or object to certain processing of your data
• Receive a portable copy of your data in a machine-readable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@browser.city. We will respond within 30 days.

8. GDPR Compliance

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we process personal data under the General Data Protection Regulation (GDPR) and applicable national implementations. Our legal bases for processing are:

• Contract performance — processing necessary to provide the Service you have subscribed to
• Legal obligation — retention of financial records as required by law
• Legitimate interests — fraud prevention, platform security, and service improvement
• Consent — where we ask for and obtain your explicit consent

If you are in the EEA and have concerns about our data practices, you have the right to lodge a complaint with your local supervisory authority.

9. CCPA Compliance

For California residents, we comply with the California Consumer Privacy Act (CCPA) as amended by the CPRA. You have the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact privacy@browser.city.

10. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest for sensitive account data, access controls limiting employee access to personal data, and regular security reviews. No transmission over the internet is 100% secure; we cannot guarantee absolute security.

11. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

13. Contact

For privacy-related inquiries or to exercise your rights, contact us at:

• Email: privacy@browser.city
• General inquiries: hello@browser.city