Privacy Policy

Last updated 2026-08-19 · consent version 2026-08-18

Who operates this site

foxalgo.io is operated by Nytra Digital s.r.o., Czech Republic. For anything in this policy, or to exercise any of the rights below, contact brief@foxalgo.io.

Newsletter signup — what we store

When you submit the subscribe form, we store your email address, a status (pending, confirmed, or unsubscribed), the source of the signup, the consent version you agreed to (currently 2026-08-18), and timestamps for when you signed up, when a confirmation email was sent, when you confirmed, and — if you unsubscribe — when that happened. We do not store your IP address or any other data alongside the subscription record.

Double opt-in

Submitting the form does not subscribe you immediately. It creates a pending record and sends a confirmation email containing a one-time link. Only clicking that link moves your record to confirmed and starts delivery. The confirmation link expires after 24 hours; requesting a new one is rate-limited to once every 10 minutes per address. If you never click the link, we hold the pending record but never send you the newsletter.

Unsubscribe tokens are stored as hashes

Every subscriber gets a unique unsubscribe token embedded in the link at the bottom of each email. We do not store that token in readable form — only a one-way hash of it. The raw token exists solely in the email link itself; it cannot be reconstructed from what we store in the database.

How to unsubscribe

Use the unsubscribe link in any newsletter email, or go to /unsubscribe with your token. Visiting the link alone does not change anything — it shows a confirmation step first, so an email scanner or preview tool opening the link cannot unsubscribe you by accident. You then confirm to actually stop delivery.

Anti-bot check on the signup form

The subscribe form is protected by Cloudflare Turnstile, a challenge that runs in your browser to confirm you're not an automated script. Cloudflare processes what's needed to issue and verify that challenge; we only receive a pass/fail result, not your form content.

Analytics

This site loads two analytics scripts, deferred until you first interact with the page (scroll, click, or a short idle timeout) so they don't run automatically on page load:

• Google Analytics (gtag.js) — standard pageview and usage analytics.
• Reddit Pixel — tracks visits for Reddit ad measurement if you arrived via a Reddit ad or link.

Both are third-party scripts operated by Google and Reddit respectively, governed by their own privacy policies. We do not control what they collect beyond the standard pageview event each script sends.

Where data is processed

The site runs on Cloudflare Workers, and subscriber data is stored in Cloudflare D1. Outbound email (confirmation, welcome, and admin notifications) is sent through Cloudflare's email sending infrastructure. No data is sold or shared with third parties beyond the processors named on this page (Cloudflare, Google Analytics, Reddit Pixel) and only for the purposes described above.

Retention

We keep subscriber records for as long as you're subscribed, plus a reasonable period after unsubscribing to honor suppression (so we don't accidentally re-add you). Pending (unconfirmed) records that never confirm are not actively purged today but are never used to send mail.

Your rights (GDPR)

If you are in the EU/EEA or UK, you have the right to:

• Access — request a copy of what we hold about you.
• Rectification — correct inaccurate data (e.g. a mistyped email).
• Erasure — request deletion of your subscriber record.
• Objection — object to further processing, including unsubscribing at any time.
• Portability — request your data in a portable format.
• Complaint — lodge a complaint with your local data protection supervisory authority.

To exercise any of these, email brief@foxalgo.io. We'll respond directly; for erasure or access requests we may ask you to confirm the email address on the subscriber record first.

Changes to this policy

If we materially change what we collect or how, we'll update the consent version above and the "last updated" date. Continuing to receive the newsletter after a consent-version change does not silently re-consent you to different terms — material changes will be communicated by email.