Privacy Policy

Punch is run by Fruit Solutions Ltd, a company registered in England and Wales (company number 17295771), registered office 124 City Road, London, England, EC1V 2NX. Fruit Solutions Ltd is the controller of your personal data. ICO registration number: ZC260018.

From Discord, when you sign in. Your Discord ID, username, avatar and email address. We never ask for access to your Discord messages.

Sign-in checks. When you sign in we check your Discord account's age, whether its email is verified and whether two-factor authentication is on. Our Discord bot also checks whether you are in the Punch server and when you joined it; this needs no extra permission from you. Only if we turn on the server count, Discord asks your permission to share your server list when you sign in, and we count how many servers you are in. We keep only the results of these checks. We do not keep your server list, and we do not keep the Discord access used to run the check.

Your orders and proxies. What you bought, when and for how much; your packs, assigned IPs, proxy usernames and expiry dates; your residential balances; the IP addresses you whitelist.

IP assignment records. A record of which of our IP addresses were assigned to which Discord account and for which dates, with the order and Stripe payment references. We use it to answer abuse reports and legal requests about a specific IP.

Payment details. Stripe handles your card. We receive a customer and payment reference, the card type and last four digits, and the outcome of each payment, including disputes. We never receive your full card number.

Proxy usage. For each account we record the websites (host names) requested through our proxies, the number of requests, the amount of data used and when. We do not record or inspect the content of your traffic.

Referrals. Who referred you or whom you referred, credit earned and spent, and the signals we compare to prevent self-referral and referral fraud: the IP addresses you use to sign in and use the dashboard (see Security logs), which we compare across accounts; sign-up IP address (we store only a scrambled, one-way hash of it, not the address itself); payment card fingerprint from Stripe; and Discord account, including the results of the sign-in checks above.

Support. The messages and files you send us in Discord tickets.

Security logs. IP address, browser type and times of requests to our site and dashboard. We record the IP addresses you use to sign in, use the dashboard, start a checkout or open a referral link, with your browser type and when, and compare them across accounts to prevent referral fraud. A shared IP address alone is never treated as proof: a person reviews it.

You need to provide your Discord sign-in data and payment details to use Punch. We can't provide the service without them.

We do not send marketing emails, and we do not sell your data.

• Discord, which you use to sign in and where our support tickets and announcements live, and where our team receives order alerts. Our bot sends Discord your Discord ID to check whether you are in the Punch server, and, after a purchase, to give you a role in our Discord server (with our order number as the reason, which our server's staff can see). Discord handles your messages under its own privacy policy.
• Stripe, which processes payments and runs its own fraud checks under its own privacy policy.
• Our IP supplier and UK data centres, which carry proxy traffic, and the networks that carry residential proxy traffic. They see traffic on the network but are not given your identity, except as described in section 5.
• Our own servers. Our site and its database run on our own servers in a UK data centre. We do not use an outside hosting, database, email or error-logging provider.
• ipify, only if you click “Use my current IP” or “Add my current IP”. Your browser then asks ipify for your IP address, so ipify sees it.

We disclose account or usage data only in two situations:

• Legal requests. When we receive a valid legal request, such as a court order or a lawful request from the police or another authority.
• Abuse reports. When our IP supplier passes us an abuse complaint about a specific IP, we may share with the supplier what is needed to answer it, such as confirmation of the time the IP was in use and the action we took.

We do not give your details to the person or company that made a complaint.

Some of the organisations in section 4 are based or store data outside the UK, including in the United States, and our IP supplier is based outside the UK. Where data leaves the UK we rely on UK adequacy regulations, including the UK-US data bridge where the recipient is certified, or on the UK International Data Transfer Agreement or Addendum.

We use only what is needed to run the site. We do not use advertising or tracking cookies.

Stripe Checkout and Discord sign-in open on Stripe's and Discord's own websites, which set their own cookies under their own policies. Neither sets cookies on our site.

Where we need data for a dispute or legal claim, we keep it until that is resolved.

Our sign-in and referral checks run automatically. If a check fails, referral credit may be withheld. If you think a check got it wrong, open a ticket and a person will review it.

Under UK data protection law you can ask us to:

• give you a copy of your data;
• correct data that is wrong;
• delete your data;
• stop or restrict how we use it, including where we rely on legitimate interests;
• give you your data in a portable format.

Requests are free and we reply within one month. To make one, or to complain about how we have handled your data, open a ticket in the Punch Discord server. We may need to keep some records, such as order records, where the law requires it.

If you are unhappy with our reply, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Punch is not aimed at children. Discord requires its users to be at least 13. If you are under 18, you need a parent or guardian's permission to use Punch.

We will post any changes on this page and announce significant ones in our Discord server.

Open a ticket in the Punch Discord server: discord.gg/wqP7c4eCse.