The data controller responsible for your personal data is:

Data We DON'T Collect

• Your files or text content - processed entirely in your browser
• Comparison results - never sent to our servers
• File names or metadata - stays on your device
• Personal information - no accounts, no registration

Data We DO Collect (with your consent)

Analytics data (opt-in only):

• Page views - which pages you visit
• Session duration - how long you use the site
• Device information - browser type, screen size, OS
• Geographic location - country/city (anonymized IP)
• Referrer data - where you came from (e.g., Google search)

Important: Analytics are loaded ONLY after you accept cookies. You can decline or revoke consent at any time.

TxtCmp is designed with privacy-by-design:

• All file comparison happens in your browser using JavaScript (diff.js library)
• Your files are NEVER uploaded to any server - they're read directly from your device
• Comparison results exist only in your browser's memory - nothing is transmitted
• When you close the tab, everything is gone - no traces left behind

This means: Even if we wanted to access your files, we technically cannot. Your data never reaches our servers.

Google Tag Manager (GTM) & Google Analytics 4 (GA4)

Purpose: Understand how visitors use TxtCmp (page views, popular features, traffic sources)

Data collected:

• Anonymous usage statistics
• Device and browser information
• Country/city location (IP-based, anonymized)
• Page views and session duration

Legal basis: Your consent (GDPR Art. 6(1)(a) / CCPA opt-in)

Data retention: 14 months (Google Analytics default)

Privacy policy: Google Privacy Policy

Microsoft Clarity

Purpose: Understand user behavior through heatmaps and session recordings (anonymous)

Data collected:

• Mouse movements and clicks (anonymized)
• Scroll depth and page interactions
• Device type and screen resolution
• Session recordings (no personal data captured)

Legal basis: Your consent (GDPR Art. 6(1)(a) / CCPA opt-in)

Data retention: 30 days

Privacy policy: Microsoft Privacy Statement

Note: Clarity does NOT record file contents or comparison results. Only UI interactions are logged.

How to Opt Out

You can control analytics tracking:

• Decline cookies when you first visit TxtCmp
• Change your choice by clicking the cookie banner (bottom of page)
• Use browser tools:
  • Google Analytics Opt-out Browser Add-on
  • Enable "Do Not Track" in your browser settings
  • Use privacy-focused browsers (Brave, Firefox with Enhanced Tracking Protection)

Cloudflare Pages

TxtCmp is hosted on Cloudflare Pages, a global content delivery network (CDN).

Data processed by Cloudflare:

• Server logs: IP address, request time, HTTP headers
• Security data: DDoS protection, bot detection
• Performance metrics: Page load times, bandwidth usage

Purpose: Deliver the website, ensure security, prevent abuse

Legal basis: Legitimate interest (GDPR Art. 6(1)(f)) - necessary for website operation

Data retention: Server logs retained for 3-7 days (Cloudflare standard)

Privacy policy: Cloudflare Privacy Policy

Important: Cloudflare only sees page requests (HTML, CSS, JS). Your file contents are NEVER sent to Cloudflare servers.

Cookies We Use

Essential cookies (like txtcmp_consent) are necessary for the website to function and don't require consent. Analytics cookies are set only after you accept cookies.

How to Delete Cookies

• Chrome: Settings → Privacy and security → Cookies and other site data → See all site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage Data
• Safari: Settings → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions → Cookies and data stored

GDPR Rights (EU/EEA Residents)

Under GDPR, you have the right to:

• Access - request a copy of your personal data
• Rectification - correct inaccurate data
• Erasure ("Right to be Forgotten") - delete your data
• Restrict processing - limit how we use your data
• Data portability - receive your data in a machine-readable format
• Object - opt out of certain data processing
• Withdraw consent - revoke cookie consent at any time
• Lodge a complaint - file a complaint with your local data protection authority

Note: Since we don't collect file data, most GDPR rights don't apply to our core service. They apply only to analytics data (if you accepted cookies).

CCPA Rights (California Residents)

Under CCPA, you have the right to:

• Know - what personal information we collect and how we use it
• Delete - request deletion of your personal information
• Opt-out - opt out of the "sale" of personal information (we don't sell data)
• Non-discrimination - equal service regardless of privacy choices

How to Exercise Your Rights

To exercise any of these rights, contact us:

• Email: hello@justfox.dev
• Subject line: "Privacy Request - TxtCmp"
• Response time: Within 30 days (GDPR) / 45 days (CCPA)

Your file data: Never leaves your browser - no international transfers.

Analytics data: If you accept cookies, data may be transferred to:

• United States: Google (GA4), Microsoft (Clarity) - covered by EU-US Data Privacy Framework
• Safeguards: Standard Contractual Clauses (SCCs), adequacy decisions

More info: EU Commission - International Data Transfers

We implement appropriate security measures:

• HTTPS encryption - all traffic is encrypted (TLS 1.3)
• Cloudflare DDoS protection - prevents attacks and abuse
• No server-side data storage - reduces risk of data breaches
• Regular security updates - dependencies and infrastructure kept up-to-date

Best security measure: Client-side processing means your sensitive files never face internet-related security risks.

TxtCmp is not directed at children under 18 years old. We don't knowingly collect personal information from children.

If you believe a child has provided us with personal information, please contact us at hello@justfox.dev.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.

For significant changes affecting your rights, we'll notify you via a banner on the website.

For privacy-related questions, requests, or complaints, contact:

Supervisory Authority (Netherlands):
Autoriteit Persoonsgegevens (Dutch DPA)