Privacy policy
Last updated 2026-11-03
This policy explains what Hunt Proxy (“we”) collects when you use the Hunt Proxy website and the Hunt Proxy desktop application, why, and what you can do about it. Questions: privacy@huntproxy.com.
The short version
- Your projects, captured traffic and findings stay on your computer.
- We never receive your HTTP history.
- Team workspace data is encrypted on your computer before upload — we can't read it.
- We keep what we need to run licenses: your account, your keys and the computers they run on.
- We don't sell personal data and don't use advertising trackers.
Website
Google sign-in
When you sign in with Google we receive your name, email address, profile picture and Google account identifier. We use them to show your account page and to issue and look up your license and trial keys. We don't receive your Google password or access to anything else in your Google account.
Cookies
We set one essential cookie that keeps you signed in. It is encrypted and contains no tracking. We don't use analytics or advertising cookies.
Emails
We email you about a sale or a coupon only if you tick “Email me about offers” on your account page, or when we make an offer just for your account. Every such email has an unsubscribe link, and you can untick the box any time. When you buy a license, change your plan or renew, we email you what you paid and until when. Messages you send through the support form are emailed to our support inbox so we can reply. We send email through Resend.
Desktop application
License checks
When the application checks a license it sends us:
- the license key;
- a random install identifier created by the application;
- a hardware fingerprint — one-way hashes of identifiers such as the machine id, network cards, disk and CPU/RAM. The hashes can't be turned back into the original values; they let us recognise the same computer for device limits and one trial per computer;
- your IP address, as with any internet connection.
On a Team key, the application also sends the email address you enter when you join. The key's owner added that address to their team list, and sees it on their account page with when you joined and when the application last checked your license.
Usage statistics
When the application starts it fetches its configuration from us. We record, once per day, that the install identifier used Hunt Proxy — this tells us how many people use the product. It contains no personal information beyond the identifier and IP address.
Team workspaces
If you use a team workspace, your scanner results, attack surface, reports and scope are uploaded so your teammates can see them. They are encrypted on your computer with a key derived from your team's passphrase; we store only the encrypted data and can't read it. Your HTTP history is never uploaded.
AI features (optional, off by default)
Hunt Proxy can optionally use an AI provider to help analyse traffic, suggest payloads or draft reports. This is off until you turn it on and enter your own provider key. When you use an AI action, the specific requests, responses or findings you send to it are transmitted directly from your computer to the AI provider you chose (for example OpenAI or Anthropic), under that provider's own privacy terms. This data goes to your chosen provider, not to us — we never receive it.
What the application never sends
Captured requests and responses, HTTP history, notes, and the contents of private projects never leave your computer, except any data you explicitly send to an AI provider you have configured (see AI features above).
How long we keep data
- Account, license, trial and device records: as long as your license or trial exists.
- License-check and usage logs: about 90 days, then deleted.
- Team workspace data: until the workspace is deleted.
Who processes data for us
- Google — sign-in.
- Vercel — hosts this website.
- Resend — sends our emails.
- Our server host — runs the license and workspace service.
Your choices and rights
You can ask us for a copy of your data, to correct it, or to delete your account and its records by emailing privacy@huntproxy.com. Deleting your account ends any trial or license tied to it. You can also remove Hunt Proxy's access from your Google account settings at any time.
Changes
If we change this policy we'll update the date above, and tell signed-in users about significant changes.