Consent to personal data processing

Edition of 6 November 2026, version 2026-11-06. Covers the pingnitro.com website, the @pingnitrobot bot, the account page and the PingNitro apps for Windows and macOS (the "Service"). This consent is a separate document: it is not part of the terms of use or the privacy policy and is given by a separate action. Questions — support@pingnitro.com or @whiteping_support.

What has changed since the edition of 14 October 2026: a new purpose has been added — to improve the route and understand how the network and location affect quality; every 10 minutes the PingNitro app sends a summary of quality measurements — ping to exchanges via the route and directly, connection type, other network programs on the computer, drops, mode and errors, terminals, "Check connection" results — and the server determines the country, city and provider from the IP address; measurements are kept for up to 30 days (sections 2, 3 and 7). The measurements contain no keys, passwords or traffic content. Hostora (Russian Federation) and Vultr (Japan) have been added to the list of hosting providers (sections 5 and 6). They host backup route nodes: any user's connection to the Service may go through them (mainly when the main nodes fail), including users who have not accepted the new edition. The edition of 14 October 2026 added free period protection (fingerprints of the computer and of the system user profile — hashes only) and the computer's time zone. If you have already accepted the previous edition (14 October 2026), you do not have to accept the new one: app measurements are not collected from you until you accept the new edition yourself — on the account page ("Sign-in and security"). The backup nodes on Hostora and Vultr servers work for all users, including you. New users accept the new edition right away.

1. Who the consent is given to

I, a user of the Service, freely, of my own will and in my own interest, give the Operator named below my consent to the processing of my personal data ("data") on the terms of this document.

Operator: the PingNitro service administration. Data requests and withdrawal of consent — by email to support@pingnitro.com or on Telegram at @whiteping_support.

The consent is needed for the Service to work: without it a key cannot be issued, a payment accepted or an app connected.

2. Purposes of processing

• to grant access to the Service and a personal key, connect my devices and apps, and run my account;
• to keep the route working and safe: limit abuse and sharing of a key with other people, account for node load, check line quality;
• to improve the route: understand how the network and location affect quality (latency to exchanges, drops) and compare the route with a direct connection;
• to give the free period once per person and computer and protect it from abuse (repeated trials from new accounts);
• support: answer requests, find and fix failures;
• to accept payments, make refunds, keep payment records and protect against fraud;
• to send me service messages about my access: confirmation codes, "Did you connect?", a reminder before access ends and similar (no ads);
• to run surveys and collect feedback in order to improve the Service; during the test, answering a survey extends access;
• to run the partner program if I take part in it or came through a partner link: records of referred users, earnings and payouts;
• to meet legal requirements and requests of authorised bodies.

3. What data is processed

• Account: Telegram id, Telegram name and username, interface language; email address (main and backup), a password hash (the password itself is never stored), Google account identifier (when signing in with Google); linked sign-in methods, email two-factor check, time the account was created and last signed in.
• Access: personal route key, access period, assigned entry nodes, the terminal and exchange chosen in the bot, the code of the partner link I came through.
• Devices: device (computer) name, operating system, app version, the computer's time zone (to show times in my zone), time the device was added and last seen; the device token is stored only as a hash.
• Free period protection: a fingerprint of the computer and of the system user profile — the app sends not the numbers themselves but their hashes (system board, Windows or macOS installation and disk numbers or the Mac serial number, the user profile) and a virtual machine flag, and the server hashes them once more with its own secret key; the same kind of fingerprints of the Telegram ids and emails that have already had access, and of the email domain (only for companies' own domains); fingerprints of the IP addresses of registration, of the free period request, of app sign-in and of connections of trial accounts; records of account matches (without the values themselves).
• Connections to nodes: the IP address the app connects from, time, key name, exchange addresses (domain names and ports), traffic volume, line quality figures (latency, loss). The content of traffic is not read or stored.
• Quality measurements from the app: every 10 minutes the PingNitro app sends a summary of its measurements — ping to exchanges via the route and directly (number of measurements, median, 90th percentile, worst value, failed measurements), connection type (cable, Wi-Fi, mobile network, phone hotspot), whether there are other network programs and tunnels or a system proxy on the computer and whether the route goes around them, route drops and restarts, operating mode (TCP or UDP, automatic switch to "direct"), the selected entry node, error types, which terminals are connected and how, "Check connection" results, the OS and app version, the time zone. From the IP address the summary came from, the server determines the country, region, city and provider (network number) — the address itself is not stored with the summary. The summary contains no keys, passwords, email addresses, network names or traffic content.
• Location by IP address: country, region and city derived from the IP address of a connection or sign-in (the "IP Geolocation by DB-IP" database) — to protect a key from being shared with other people, to check compliance with the terms of use, and to show me where a sign-in started (IP address, browser, device, approximate city). Precise location is not determined.
• Surveys, feedback and requests: my survey answers, the texts of feedback and support requests, a contact for the reply if I give one.
• Payments: amount, date and time, payment number, subscription flag, operation identifier and payer details needed to verify receipt and make refunds, the result of the operation check. The Operator does not receive bank card details.
• Partner program (if I take part): the partner's code and links, who came through the link (the partner sees numbers only), earnings, payout requests and the payout details I enter.
• Website and emails: web server log (IP address, time, page address, browser); the sign-in cookie of the account; the email address and text of the emails the Service sends me.

The Operator does not request or process special categories of data (health, beliefs and so on) or biometric data.

4. Actions with data

Collection, recording, organising, accumulation, storage, updating (changing), retrieval, use, transfer (provision, access) to the persons listed in section 5, anonymisation, blocking, deletion and destruction. Processing is automated and uses information and telecommunication networks.

5. Who processes the data for the Operator and who receives it

I agree to processing being entrusted to, and data being passed to, these persons to the extent needed for the purposes in section 2:

• Hosting providers whose servers run the Service and the website: EdgeCenter (Russian Federation), Hostora (Russian Federation), Amazon Web Services (Japan), Gcore (Japan), Vultr (Japan). They provide servers and do not receive the data for their own purposes.
• Telegram (Telegram Messenger Inc. and group companies): the bot, account sign-in and payment with Stars work through it.
• Resend, the email-sending service: sees the email address and the text of the email (confirmation codes and notices).
• Payment-check services that the Operator uses to protect against fraud: receive only the data of the operation itself.
• Google, if I sign in with Google: the Operator receives my email address and account identifier, and Google sees that I am signing in to PingNitro. Google acts under its own rules, not on the Operator's instructions.

The Operator is responsible to me for the actions of the persons it has entrusted processing to. The Operator does not sell data and does not pass it on for advertising. If this list changes (for example, another hosting provider or service appears), the Operator will publish a new edition of this consent on this page; how it applies is described in section 9.

6. Transfer of data abroad

I agree to my data being transferred to Japan (Amazon Web Services, Gcore and Vultr servers; the account database is stored there too), to the United States of America (the Resend email-sending service) and to the countries where Telegram's servers and group companies are located (according to Telegram's policy, including the British Virgin Islands, the United Arab Emirates and the Netherlands). I have been told that Japan is on the list of foreign states that provide adequate protection of the rights of personal data subjects (Roskomnadzor Order No. 128 of 5 August 2022), and that other countries, for example the USA, the United Arab Emirates and the British Virgin Islands, may not provide adequate protection.

7. Term of the consent and of storage

The consent is valid from the moment I give it, for as long as I use the Service, and until I withdraw it. Data is kept no longer than needed for the purposes in section 2, within the terms from the privacy policy:

• account, access, devices, surveys and feedback, payments, partner details — while the account exists;
• connection log and line quality — up to 7 days, daily traffic volume — 60 days;
• quality measurements from the app — up to 30 days (anonymised totals by country, provider and connection type, without the account, may be kept longer);
• web server log — up to 7 days;
• confirmation codes from emails — 15 minutes (stored only as a hash);
• free period protection: computer fingerprints — 180 days from last use, Telegram id, email and domain fingerprints — 180 days from the start of the free period, match records — 180 days, address fingerprints — 30 days;
• database backups — up to 30 days, the bot's service logs — up to 8 weeks.

The Operator keeps a record that the consent was given (time, document version, language) in order to be able to confirm it. Data that the law requires to be kept longer (for example, payment records) is kept only to that extent and until the end of the period set by law.

8. How to withdraw the consent

You can withdraw the consent at any time:

• by an email to support@pingnitro.com — from the email address on your account;
• by a message to support, @whiteping_support — from the Telegram account you use the Service with;
• with the "Delete my data" button — in the bot ("FAQ" → "How to delete my data") or in your account ("Sign-in and security"): a request to delete the account also withdraws the consent.

After withdrawal the Operator stops processing and deletes the account with all its data within 7 days (data leaves backups when they expire, within 30 days). Payment and partner earnings records that the law requires to be kept for accounting remain without any link to me — no name, username, email or Telegram id. The computer, Telegram id and email fingerprints of free period protection also remain without any link to me until the end of their period (up to 180 days), so that the free period cannot be obtained again by deleting the data; the domain fingerprint, addresses and match records are deleted. The consent is needed for the Service to work, so access ends after withdrawal. Deleting the chat with the bot, signing out of the account page or disconnecting an app does not withdraw the consent.

9. How the consent is given and what I confirm

• In the bot — with the "I accept" button on the consent screen (it appears before a key is issued, before signing in to an app or to the website through the bot, before a survey and before payment). In the PingNitro app — with a tick when registering. On the website — with a tick when registering (by email or with Google), before the trial and before a survey, and on the account page and the payment page — before paying or getting access days. The time, version and language of the consent are saved.
• A new edition. The Operator publishes it on this page with its date and what has changed. If I have already accepted an earlier edition, the Service keeps working for me; the backup nodes on Hostora and Vultr servers work for all users, including me. I do not have to accept the new one, and new purposes and data that were not in the earlier edition do not apply to me. I can accept the new edition at any time if I wish — on the account page ("Sign-in and security"). If a change cannot be applied under the earlier edition, the bot and the account page will ask me to accept the new one before my next action with a key or a payment.
• I have read the privacy policy; I give this consent separately from the terms of use.
• My rights have been explained to me: to find out what data is processed, to ask for it to be corrected, blocked or deleted, to withdraw the consent, and to complain to Roskomnadzor or a court; the procedure is in sections 7–8 and in the privacy policy.
• There are no advertising or news mailings; if any appear, they will need a separate consent.
• The Service is intended for adults.