Privacy Policy
1. General Provisions
1.1. This Policy describes what personal data Owner Nodes collects, why, who we share it with, how long we keep it and what rights users have.
1.2. This Policy applies to everyone who uses the website and the Service, including without registration, and is inseparable from the Terms of Service. Terms are used as defined in the Terms of Service.
1.3. We may change this Policy at any time without notice. Continued use of the Service means acceptance of the changes. The current version is always available on the website.
1.4. We process data in accordance with applicable data protection law: lawfully, fairly and transparently, only for specified purposes, to the extent necessary, keeping it accurate and secure.
2. Who This Policy Applies To
The Service is intended for persons over 18 years of age. We do not knowingly collect data from minors. If you believe a minor has provided us with data, let us know and we will delete it.
3. Data Controller
The data controller is Owner Nodes. Contact: support@ownernodes.com. To process a data request, we may ask you to confirm that the Account belongs to you. We do not collect special categories of data: information about race, religion, political opinions, health or biometrics.
4. Data We Collect
4.1. Account data: email address, password (stored in encrypted form only), invite code, referring affiliate.
4.2. Identity verification data. Only when a reseller agreement is concluded or if the administration requests identity verification for a large affiliate withdrawal. Verification is carried out by a third-party verification service acting on our behalf. Documents and photos are processed and stored by that service in accordance with its policy and applicable law. Owner Nodes receives the verification result and the data needed to confirm identity: name, date of birth, country, document type and number.
4.3. Account recovery data. When changing the email address or resetting two-factor authentication, we may ask you to confirm ownership of the Account, for example by providing the amount and hash of your last top-up.
4.4. Financial data: amount, currency and transaction ID, sending wallet address, wallet for affiliate payouts. Blockchain transactions are public by nature.
4.5. Logs: login IP address and time, browser and device data, which endpoints were used, when, and how much traffic passed. We do not record the content of traffic, the pages visited or the data transmitted through endpoints.
4.6. Cookies and analytics: see the Cookie Policy for details. Affiliate cookies are kept for 60 days.
4.7. Support communications. Please do not send documents, card details or third-party data to support.
4.8. Review invitations: name and email, used to invite you to external review platforms. This is not marketing.
4.9. Telegram data: Telegram user ID and username, language, messages sent to the bot, and the link to the Account if you have connected them.
4.10. Sign-in data from Google. Only if you choose to sign in with Google: your email address, whether Google has verified it, and the stable identifier Google issues for your account in our application. Nothing else: no name, no profile picture, no contacts. See section 13.
5. Purposes and Legal Bases
5.1. Performance of the contract: providing the Service, processing top-ups and charges, discounts, bonuses, the Affiliate Program, reseller agreements, support.
5.2. Consent: analytics, marketing cookies, notifications. Consent can be withdrawn at any time.
5.3. Legal obligations: accounting, prevention of fraud and money laundering, responding to lawful requests from government authorities.
5.4. Legitimate interest: protection against fraud and abuse, enforcing compliance with the Terms of Service and the Acceptable Use Policy, detecting linked accounts and block evasion, network security, analytics and development of the Service, marketing.
5.5. Mailings. We use your email for Owner Nodes news and offers. You can unsubscribe via the link in any email or through support. Service emails (security, payments, changes to terms) are sent regardless of your subscription.
6. Social Media, Messengers and the Telegram Bot
If we communicate with you on social media or messengers, or you use our Telegram bot, the rules of those platforms also apply. Make sure the account or bot is official: the link to the official bot is listed on the website. Log in to the Account only through the official domain ownernodes.com.
7. Who We Share Data With
7.1. We do not sell or rent personal data.
7.2. We share data with contractors to the extent necessary to operate the Service: hosting, payment providers, email delivery, support, analytics, bot protection, verification service. Contractors are bound by confidentiality.
7.3. Data is provided to government authorities only in response to a lawful request.
7.4. Data may be provided to other third parties, including payment providers and affected services, in response to a lawful request, or where we consider disclosure necessary to prevent damage or in connection with a fraud investigation.
7.5. In the event of a reorganisation or sale of the business, data may be transferred to the successor, and this Policy will continue to apply.
7.6. Google, only if you choose to sign in with it: the sign-in request itself tells Google that you are signing in to Owner Nodes. We receive data from Google rather than sending your data to it. See section 13.
8. International Transfers
Our servers and contractors may be located in different countries. When transferring data, we use appropriate safeguards, including standard contractual clauses.
9. Retention Periods
9.1. Connection logs are kept for at least 6 months from the time they are recorded and for at least 6 months after the Account is closed or blocked.
9.2. Account data is kept while the Account is active and for at least 6 months after it is closed.
9.3. Data received as a result of identity verification is kept while the Account is active and for at least 6 months after it is closed.
9.4. Records of top-ups and payouts are kept for as long as required for accounting.
9.5. In-app notifications are removed about a year after you read them, and about two years after they are sent whether you read them or not.
9.6. Closed support conversations, together with the messages in them, are removed after about two years. A conversation is not removed while it remains open.
9.7. Data may be kept longer where required by law, for dispute resolution or for investigating abuse.
10. Security
We apply technical and organisational security measures: encrypted connections, data encryption, two-factor authentication, access control and incident response. No system is completely secure, so keep your password and API keys secret and notify us immediately if you suspect unauthorised access.
11. Your Rights
11.1. Every user has the right to:
- opt out of marketing emails;
- know what data we process and obtain a copy;
- correct inaccurate data;
- request deletion of data;
- restrict processing;
- receive data in a portable format;
- object to processing;
- withdraw consent;
- lodge a complaint with the data protection supervisory authority of their country.
11.2. We do not sell personal data or share it for targeted advertising on third-party websites.
11.3. Automated decisions. Automated anti-fraud systems may restrict an Account when there are signs of fraud or rule violations. You have the right to request that such a decision be reviewed by a staff member.
11.4. We respond to requests within 30 days. If necessary, this period may be extended, and we will inform you. Exercising your rights has no negative consequences for you.
12. Cookies
See the Cookie Policy for details.
13. Signing in with Google
13.1. You can sign in with a Google Account instead of a password. This is optional. We request only the openid and email scopes. They give us your email address, whether Google has verified it, and the stable identifier Google issues for your account in our application. We do not request or receive your name, profile picture, contacts, calendar, files or any other Google data.
13.2. We use that data for one purpose: to identify you so that you can sign in, and to keep your Google Account linked to your Owner Nodes Account. The stable identifier, not the address, is what keeps that link correct if your email address later changes.
13.3. We do not store Google access or refresh tokens. We ask Google for a one-off sign-in, verify the signed response and discard it. Revoking our application's access in your Google Account therefore removes nothing on our side: your Account and its balance remain, and you can keep signing in with a password once you set one. You can disconnect Google at any time in the Account settings, under Security → Sign-in methods, as long as another way to sign in remains.
13.4. Limited Use. Owner Nodes' use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use or transfer this data for advertising of any kind, including personalised, retargeted or interest-based advertising; we do not sell it and do not provide it to data brokers or information resellers; we do not use it to determine credit-worthiness or for lending purposes; we do not use it to build databases; and we do not use it to develop, improve or train any AI or machine-learning model, personalised or not. No human reads it except with your explicit consent, for security purposes, to comply with applicable law, or as part of aggregated anonymous operations.
13.5. An Account created by signing in with Google is not subscribed to Owner Nodes news and offers. Marketing emails are sent to such an address only if you subscribe to them yourself in the Account settings.
13.6. The Google identifier is kept for as long as your Google Account stays connected. It is deleted when you disconnect Google, and when the Account is erased.
13.7. Owner Nodes is a proxy network service. It has no feature that generates, edits or processes images, and data received from Google is never used for that.