Cookies are small text files a website stores in your browser. Related technologies - local storage and session storage - do a similar job. This policy lists everything Foxio uses, so you can see exactly what is happening rather than a generic description.
1.Your choices
The first time you visit foxio.eu we ask for your cookie choices in a window in the middle of the screen. You can accept everything, reject everything non-essential with one tap, or open the settings and choose category by category. Whatever you choose, the whole site stays open to you. On the legal pages the question appears as a bar at the bottom instead, so you can read this policy first.
- Strictly necessary cookies are always active - without them you cannot sign in, and the site cannot work.
- Every other category is off until you turn it on. We do not pre-tick boxes, and rejecting is exactly as easy as accepting.
- Your choice is stored for 12 months, after which we ask again. We also ask again if this policy changes materially.
- You can change your mind at any time using the Cookie settings link in the footer of every page.
You can also delete or block cookies in your browser settings. Blocking strictly necessary cookies will sign you out and break parts of the site.
2.The categories we use
- Strictly necessary
- Needed for the site to function and for you to stay signed in. These do not require consent under the ePrivacy rules, and cannot be switched off.
- Functional
- Remember preferences that make the site nicer to use - your language, whether game sound is muted, how far you got in a game. Not required for the site to work.
- Analytics
- Detailed visit statistics: which pages a visit went through, in what order and for how long, linked by a temporary identifier that your browser's session storage keeps until you close the tab, plus Vercel's cookieless page-view statistics. Loaded only if you allow this category. This is separate from the cookie-free visit count described below, which needs no consent because it stores nothing on your device and identifies no one.
- Marketing
- The Meta pixel, which tells Meta (Facebook and Instagram) whether a visit came from one of our ads and whether it led to a sign-up or purchase, so we can measure the ads and Meta can show them to people likely to find Foxio useful. It sets the _fbp cookie and, when you arrive from an ad, _fbc. Loaded only if you allow this category, and switched off the moment you withdraw it.
3.Counting visits without cookies
So that we know how many people the site reaches - including people who decline cookies - we count every visit by a visitor who is not signed in. Each page shown adds one to a daily total for that page. Nothing is written to your device for this, no identifier is created, and your IP address is not stored.
- The page, reduced to its template (for example "a course page", not which course a child opened)
- The day, the country our hosting provider resolves from the connection, and whether the device is a phone, tablet or computer
- The language of the page, and the kind of place the visit came from (a Meta ad, Facebook or Instagram, a search engine, an email, a partner link, another website, or direct), with the campaign name if the link carried one
- Steps of the sign-up form, such as starting it, submitting it, or which field stopped a submission - never what you typed
- Whether you answered the cookie window, and how
We keep only the totals, for example "212 visits to the home page from Meta ads on 3 October". Two counts from the same person are not linked in any way, so there is no profile, and nothing we could later find, show or delete as yours. We rely on our legitimate interest in knowing whether the site and our advertising work (Article 6(1)(f) GDPR). If you prefer not to be counted, a content blocker that blocks scripts on foxio.eu prevents it.
4.Everything we store
The following are set by foxio.eu itself (first-party) unless stated otherwise.
| Name | Category | Purpose | Lifetime |
|---|---|---|---|
| sb-*-auth-token | Strictly necessary | Your sign-in session, issued by our authentication provider. Without it you are signed out on every page load. May be split across numbered parts when large. | Up to 1 year, refreshed while you stay active |
| sb-*-auth-token-code-verifier | Strictly necessary | Protects the "Sign in with Google" exchange against interception. Deleted as soon as sign-in completes. | Minutes |
| NEXT_LOCALE | Strictly necessary | Remembers which of the five site languages you chose, so you are not sent back to the default on your next visit. | 1 year |
| foxio_currency | Strictly necessary | Set only when you pick a currency on the English site (US, Canadian or Australian dollars, or pounds), so prices stay in the one you chose. Without it every visit starts from the currency of your country. | 1 year |
| foxio_consent | Strictly necessary | Stores your cookie choices and the policy version they were given against. Without it we would have to ask you on every page. | 12 months |
| foxio_ref (local storage) | Functional | Remembers a referral code you arrived with, so it survives the email confirmation round-trip and the referrer gets credited. | Until you clear it or registration completes |
| foxio.games.* (local storage) | Functional | Your progress in the mini-games and whether game sound is muted. Stays in your browser and is never sent to us. | Until you clear your browser storage |
| foxio_a_sid, foxio_a_seen, foxio_a_entry, foxio_a_off, foxio_a_auth (session storage) | Analytics | Group the pages of one visit for the detailed statistics, and remember for the rest of the visit if you are not to be measured. Written when a visit starts; the server stores the visit only if you allowed analytics or are signed in. | Until you close the tab |
| _fbp, _fbc | Marketing | Set by the Meta pixel on foxio.eu to recognise your browser across visits and to tell which ad a visit came from. | 90 days |
4.1Third-party and related technologies
| Provider | Category | What happens | Cookies set |
|---|---|---|---|
| Vercel Analytics | Analytics | Counts page views to give us aggregate traffic statistics. It does not use cookies, does not fingerprint your device and does not follow you across other sites. We load it only if you allow the analytics category. | None |
| Meta Platforms Ireland | Marketing | The Meta pixel: for visits that allowed marketing, reports page views, sign-ups and purchases from your browser, and for purchases also from our server, so our ads can be measured. Meta also uses this data for its own purposes under Meta's privacy policy. | _fbp, _fbc on foxio.eu |
| Stripe | Strictly necessary | When you pay, you are taken to Stripe's own checkout page. Stripe sets its own cookies there, on its own domain, for payment security and fraud prevention. Those cookies are governed by Stripe's privacy policy, not by this one. | Set by Stripe on Stripe's domain |
| Strictly necessary | Only if you choose "Sign in with Google". Google sets cookies on its own domain as part of signing you in. We receive your name, email address and Google account identifier, nothing else. | Set by Google on Google's domain |
5.Cookies and children
We do not profile children, and we do not serve behavioural advertising to anyone. A child signed in to a child account is subject to the same choices you made as the account holder - a child cannot change the cookie settings for your household in a way that enables tracking, because there is no tracking to enable.
6.Managing cookies in your browser
Every major browser lets you view, delete and block cookies. The relevant settings are usually under Privacy and Security:
7.Changes and contact
If we add or remove a cookie, we update this table and bump the version at the top of the page. If a change affects a non-essential category, we ask for your consent again.
Questions about cookies: privacy@foxio.eu. How we handle personal data more generally is described in the Privacy Policy.
Questions about this document?
Write to us and a real person will answer. For anything about your data, your child's data or exercising your rights, use the privacy address.