Privacy & Cookie Policy

Last updated: May 5, 2026

1. Who we are

Outfox Labs ("we", "us", "our") is a hybrid marketing and production agency registered in Bulgaria, with offices at: 10 Vihren Street, Sofia 1618.

Privacy contact: [email protected]

2. What data we collect

Data you provide

Contact form: name, email, message — when you contact us.
Email correspondence: the content of exchanged messages.

Data collected automatically

Server logs: IP address, browser type, OS, date/time, pages visited.
Analytics: on-site behavior (clicks, scrolls, time on page) — only after your consent.
Cookies: see section 6.

3. Why we process your data (legal basis)

Performance of contract / pre-contractual — handling inquiries and providing services (Art. 6(1)(b) GDPR).
Consent — for marketing, analytics and tracking (Art. 6(1)(a) GDPR). You can withdraw consent at any time.
Legitimate interest — site security, fraud prevention, and service improvement (Art. 6(1)(f) GDPR).
Legal obligation — accounting and tax requirements.

4. Third parties we share data with

We use the following service providers, who process some of your data as our Data Processors:

Provider	Purpose	Data	Location
Google LLC (Google Analytics 4, Google Tag Manager)	Web analytics	IP (anonymized), site behavior, device type	USA (DPF)
Microsoft Corporation (Clarity)	Heatmaps and session recording	Site behavior, clicks, scrolls	USA (DPF)
Meta Platforms, Inc. (Facebook Pixel)	Marketing and advertising	IP, site behavior, ad identifiers	USA (DPF)
SuperHosting.bg	Hosting and email	Files, emails, log data	Bulgaria (EU)
Microsoft Bing (IndexNow, Bing Webmaster Tools)	Search engine indexing	URLs and site content	USA (DPF)

DPF = EU-US Data Privacy Framework — legal basis for transferring data between EU and USA.

5. How long we keep data

Contact inquiries: up to 2 years after last communication.
Analytics data (Google Analytics): up to 14 months.
Session recordings (Clarity): up to 90 days.
Marketing data (Meta Pixel): up to 180 days.
Server logs: up to 30 days.
Accounting records: 10 years (legal requirement).

6. Cookies

Cookies are small text files the site stores in your browser. We use the following categories:

Category	Examples	Purpose	Duration
Necessary	PHPSESSID, outfox_consent	Session, language preference, consent state	Session / 1 year
Analytics	_ga, _gid, _gat, _clck, _clsk	Google Analytics, Microsoft Clarity	Up to 24 months
Marketing	_fbp, fr	Meta Pixel	Up to 90 days

On your first visit you see a banner where you can accept or reject non-essential cookies. Without your consent we do not load analytics or marketing scripts.

Manage your consent

You can withdraw consent at any time using the button below:

7. Your GDPR rights

Right of access — to know what data we process about you.
Right to rectification — to correct inaccurate data.
Right to erasure ("right to be forgotten") — to request deletion of your data.
Right to restrict processing — to temporarily pause processing.
Right to data portability — to receive your data in a structured format.
Right to object — to processing based on legitimate interest.
Right to withdraw consent — at any time, without consequence.
Right to lodge a complaint — with the Commission for Personal Data Protection (Bulgaria) or your local DPA.

To exercise these rights, write to [email protected]. We will respond within 30 days.

8. Data security

The site uses HTTPS encryption. Server access is restricted with passwords. In case of a security breach we will notify affected users within 72 hours per GDPR.

9. Changes to this policy

We may update this policy. For material changes we will update the date above and notify you on the site.

10. Contact

Outfox Labs
10 Vihren Street, Sofia 1618, Bulgaria
Email: [email protected]
Phone: +359 87 966 3887