Effective Date: November 14, 2025
Last Updated: September 22, 2026
Cookies: analytics cookies are only used with your consent, and you can withdraw it at any time: Cookie Settings. Details are in section 1.2.
JustFox Labs B.V. operating as JustFox ("we", "us", or "our") operates justfox.dev and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.
1. Information We Collect
1.1 Automatically Collected Information
When you visit our website, your browser sends technical data such as your IP address, browser type and the page requested to our hosting provider, Cloudflare, which needs it to deliver the site (section 2.3). Only if you accept analytics cookies do we also collect the following through Google Analytics and Microsoft Clarity (sections 2.1 and 2.2):
- Log Data: IP address, browser type, operating system, referral URLs, pages visited, time spent on pages
- Device Information: Device type, screen resolution, language preferences
- Usage Data: Interaction with website elements, click patterns, navigation paths
1.2 Cookies and Tracking Technologies
We set one cookie of our own, justfox_consent, which remembers your cookie choice for 365 days. Everything else is optional and depends on that choice:
- Before you choose, or if you reject: Google Tag Manager, Google Analytics and Microsoft Clarity are not loaded at all. Your browser sends them no request and they set no cookies. Rejecting takes one click, the same as accepting.
- If you accept analytics cookies: Google Tag Manager is loaded, and through it Google Analytics and Microsoft Clarity, on every page you visit until you change your choice.
- If you withdraw your consent later: the page reloads without them, so they stop. Any other justfox.dev page you have open does the same at its next check (about once a second), or as soon as you return to it. Their cookies on justfox.dev (
_ga,_ga_*,_clck,_clsk) are deleted.
You can change your choice at any time via the Cookies link at the bottom of every page, or open Cookie Settings here.
2. Third-Party Services
We use the following third-party services that may collect information:
2.1 Google Tag Manager & Google Analytics 4
- Purpose: Website analytics, user behavior tracking, performance monitoring
- When: Only after you accept analytics cookies. Google Tag Manager is the loader for Google Analytics and Microsoft Clarity and is not loaded without that consent either.
- Data Collected: Page views, session duration, bounce rates, demographics, user interactions
- Data Retention: Up to 14 months for user- and event-level data (Google Analytics 4 retention setting)
- Privacy Policy: Google Privacy Policy
- Opt-Out: Google Analytics Opt-out
2.2 Microsoft Clarity
- Purpose: Session recording, heatmaps, user experience analysis
- When: Only after you accept analytics cookies
- Data Collected: Mouse movements, clicks, scroll behavior, masked form inputs
- Data Retention: Session recordings (playback data) 30 days; click and heatmap data, and sessions we label or favorite, 9 months
- Privacy Policy: Microsoft Privacy Statement
2.3 Cloudflare
- Purpose: Website hosting, CDN, DDoS protection, performance optimization
- Data Collected: IP address, HTTP headers, performance metrics
- Data Retention: Limited to security and performance logs
- Privacy Policy: Cloudflare Privacy Policy
2.4 Cloudflare Turnstile
- Purpose: Bot protection, spam prevention (when implemented)
- Data Collected: Challenge response data, device fingerprints
- Privacy Policy: Cloudflare Privacy Policy
3. How We Use Your Information
- Website Analytics: Understand how visitors use our site to improve user experience
- Performance Monitoring: Identify and fix technical issues
- Security: Protect against malicious activity, fraud, and abuse
- Compliance: Meet legal and regulatory obligations
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your data based on:
- Consent: When you accept optional cookies (analytics, functional)
- Legitimate Interests: Website security, fraud prevention, technical operation
- Legal Obligation: Compliance with applicable laws
5. Your Privacy Rights
5.1 GDPR Rights (EEA Residents)
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
5.2 CCPA Rights (California Residents)
- Right to Know: What personal information we collect and how it's used
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt-out of the "sale" of personal information (we do not sell data)
- Right to Non-Discrimination: Equal service regardless of privacy choices
5.3 Cookie Management
You can manage your cookie preferences at any time by clicking Cookie Settings.
6. Data Retention
- Analytics Data: Up to 14 months (Google Analytics user- and event-level data); 30 days for Clarity session recordings, 9 months for Clarity click and heatmap data and for sessions we label or favorite
- Server Logs: 30 days (Cloudflare)
- Cookies: 365 days (consent preferences), varies by service
7. Data Security
We implement appropriate technical and organizational measures to protect your data:
- HTTPS/TLS encryption for all website traffic
- Cloudflare DDoS protection and WAF
- Regular security audits and updates
- Limited data retention periods
8. International Data Transfers
Your data may be transferred to and processed in countries outside your residence, including the United States. We ensure adequate safeguards through:
- EU-U.S. Data Privacy Framework: transfers to U.S. organizations certified under it are covered by the European Commission's adequacy decision of July 10, 2023. On September 22, 2026, Google LLC, Microsoft Corporation and Cloudflare, Inc. were listed as active participants on the Data Privacy Framework List.
- EU Standard Contractual Clauses (SCCs) for transfers that are not covered by an adequacy decision
- Other adequacy decisions by the European Commission, where the destination country has one
9. Children's Privacy
Our website is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
10. Do Not Track (DNT)
We honor Do Not Track signals. When DNT is enabled in your browser, we will not load analytics or tracking scripts.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our website after changes constitutes acceptance of the revised policy.
12. Contact Us
For privacy-related inquiries, data requests, or to exercise your rights, contact us at:
- Email: hello@justfox.dev
- Company: JustFox Labs B.V. (operating as JustFox)
- Chamber of Commerce (KvK): 42083066
- RSIN: 869629177
- VAT Number (BTW): NL869629177B01
- Address: Molendreef 1, 4641 CS Ossendrecht, The Netherlands
- Phone: +31 85 822 2050
13. Data Protection Officer
For GDPR-related inquiries, you may contact our data protection representative at hello@justfox.dev.
14. Supervisory Authority
If you are located in the EEA and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.
Last Updated: September 22, 2026