Privacy policy

Last updated: 8 November 2026

What we collect when you buy a pack, use the free audit, or email us — and what we do with it.

Who we are

KasaFox LLC (“Dosie Foxie”, “we”) sells production-ready brand files at dosiefoxie.com. Dosie Foxie is a division of KasaFox LLC (kasafox.com). For anything in this policy, email [email protected].

What we collect

• Order details: the email address you give at checkout, your brief and any notes, your order id, the price and currency, and when the order was created, paid and delivered.
• Payment details: payments are handled by Stripe. We receive confirmation that a payment succeeded, the amount, the currency and a payment reference. We never see or store your card number.
• Files: the pack we generate for you, and the spec it was generated from.
• The free audit runs entirely in your browser; the file you check is never sent to us.
• Support email: whatever you send us, including attachments.
• Technical logs: IP address, browser user agent, the requested URL and the response status in our web server and CDN logs. These are for security and debugging.
• Page counts: when a marketing page loads, our own server records the page, the hostname of the site you arrived from (never the full address or the search terms), your country, and whether the request came from a crawler. We store no IP address and no cookie, and the value we use to tell one visit from another is a one-way hash of your address and browser that is re-salted every day — so yesterday’s visits cannot be linked to today’s.
• The checklist: if you ask for it by email, we keep the address you typed, the page you asked from, and whether the email was sent.
• Cookies: the marketing site and the order pages set no advertising or analytics cookies, and the page counts above are made by our own server, not by a script from anyone else. Cloudflare, which fronts the site, may set a security cookie to tell humans from bots.

Why we use it

• To take payment, deliver your pack and email you the link to your status page — this is performance of our contract with you.
• To answer support questions and handle refunds and disputes.
• To keep the service secure and prevent fraud and abuse — our legitimate interests, and yours.
• To see which pages are read and which are not, in aggregate, so we know what to fix or to write next — our legitimate interests. Nothing here is profiled or shared.
• To meet tax, accounting and other legal obligations.

Who processes it

We use a small number of processors, each for one job:

• Stripe — payments and refunds.
• Cloudflare — DNS, CDN, the tunnel and encrypted database backups.
• Hetzner — the servers that run the site and generate packs.
• SMTP2GO — delivery of transactional email.

They process data on our instructions. If you are in the UK or EEA, your data is transferred to the United States to be processed by us and by these providers, under the safeguards they offer (standard contractual clauses or an adequacy decision).

How long we keep it

• Your pack files are deleted from our servers 30 days after delivery. Download them and keep your own copy.
• Order records — email, amount, status, payment reference — are kept while we need them for tax, accounting, refunds and disputes.
• Server logs are kept for a short period for security, then deleted or aggregated.
• Page counts are kept for 400 days and then deleted. They contain no address, so there is nothing in them that identifies a person for us to delete.
• A checklist address is kept until you unsubscribe or ask us to delete it. Every checklist email has a one-click unsubscribe.
• Emails you send us are kept while we handle the request and for as long as we may need them to defend a legal claim.

Your choices and rights

Our page counting honours Do Not Track and Global Privacy Control: if your browser sends either, no page count is recorded at all.

Email [email protected] to ask for a copy of your data, to correct it, or to delete it. We will action a deletion unless we must keep a record for tax or legal reasons — for example, the record of a completed sale.

If you are in the UK or EEA you also have the right to object to processing, to restrict it, and to complain to your data protection authority. If you are a California resident, you have the right to know, delete and correct personal information, and to opt out of its sale or sharing. We do not sell personal information and we do not share it for cross-context behavioural advertising.

Children

The service is for businesses and is not directed at children under 13. We do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will post the new version here and update the date at the top. An order keeps the policy that applied when it was placed, unless a change is required by law.

Contact

KasaFox LLC · [email protected]