Privacy Policy - Muddlefox

Effective date: 8 October 2026 · Last updated: 8 October 2026

This Privacy Policy explains what personal information Muddlefox collects when you use muddlefox.com, place an order, or use Fox Rewards. It explains why we collect it, who receives it, and the choices you have. It covers the EU General Data Protection Regulation and the UK GDPR. It also covers the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). Please read it with our Terms of Service. If you have a question, email [email protected] or use our contact page.

In this policy, “personal information” means information about an identifiable person. The GDPR calls this “personal data”. We use one phrase for both.

1. Who we are and how to contact us

Muddlefox runs muddlefox.com. The site is a WooCommerce shop for Instagram and TikTok growth services. Those services include followers, likes, views, comments and packages. The site also offers Fox Rewards. Fox Rewards lets you complete partner offers and surveys to earn coins.

The data controller is Muddlefox, operated by Kenneth Wagner in Thailand. The controller decides why and how we use personal information for this site.

Legal name: Muddlefox
Email: [email protected]
Contact page: muddlefox.com/contact
Terms of Service: muddlefox.com/terms

2. The short version

We never ask for your Instagram or TikTok password. We also never ask for a Fox Rewards password, a card number, PayPal details, a private key, or a seed phrase.
The only personal detail we ask for at checkout is your email address. An order also needs a public Instagram or TikTok username. For likes, views or comments, it needs the public posts or videos you choose.
Fox Rewards lets you earn coins by completing partner offers and surveys. 100 coins equal $1 of value. You can cash out coins for services, and you can claim a free trial. You sign in with a link we email you.
We use your information to deliver and support your order, to run Fox Rewards, to keep the site secure, and to keep records the law requires.
We do not sell your personal information for money. Google Analytics and offerwall tools may still count as “sharing” under California law. Sections 14 and 15 explain how to opt out.
You can ask us to access, correct, or delete your information. Email [email protected].
Muddlefox is for people aged 18 and over. See section 18.

3. Information we collect

Information you give us

Email address. This is the only field at checkout. We use it to send your order confirmation and updates, and to reply if you contact us. Fox Rewards also uses your email address to send a sign-in link. There is no password.
Instagram or TikTok username, and selected posts or videos. To deliver followers, likes, views or comments we need the public username. For likes, views or comments we also need the public posts or videos you pick. We cannot deliver an order without them.
Support messages. If you use our contact form or email us, we receive your name if you give it, your email address, and whatever you write.

Orders and payments

Order details, such as the package you bought, the price, the date, the order number and the order status.
Payment details. Payments are in cryptocurrency, on Solana and through a wallet such as MetaMask. We receive the wallet address you pay from, the transaction hash and the amount. See section 7.

Fox Rewards

If you use Fox Rewards, we keep an account for you. That account can include:

your email address and your Fox Rewards user ID;
your coin balance and coin history;
offerwall activity, including offers you open and the postbacks partners send us when an offer is completed or reversed;
cashout requests;
free-trial claims.

100 coins equal $1 of value. You can cash out coins for services. Survey answers you type into a partner offer go to that partner. We receive the postback about the result, not the survey answers themselves. See section 8.

Information collected automatically

Technical data, such as your IP address, browser type, device and the pages you visit. Our host and security providers process this to deliver the site and protect it. Our order tool also uses your IP address for a short time to limit repeated requests.
Approximate location inferred from your IP address, such as your country. This is not precise GPS location.
Cookies and similar technologies. See section 9.

We do not ask for your social media password, a Fox Rewards password, your card or PayPal details, your private keys, or your seed phrase.

4. Where we get information

We get personal information from these sources:

From you. You give us your email address, the public username and posts or videos for an order, Fox Rewards sign-in details, cashout and free-trial requests, and any message you send to support.
Automatically from your device. When you use the site, we and our providers receive technical data such as your IP address, device, browser and the pages you view, including through cookies.
From offerwall partners, via postbacks. CPX Research, CPALead, CPAGrip and TheoremReach tell us when an offer is completed or reversed.
From public Instagram profiles via Apify, and from public Instagram or TikTok usernames and posts or videos you give us. Apify is a third-party data provider. We use it to look up public profile information. See section 6.
From public blockchains. When you pay, the Solana network shows the wallet address, the transaction hash and the amount. Those records are public.

5. How we use information and our legal basis

This table pairs each purpose with the legal basis we rely on under the GDPR and the UK GDPR.

Purpose	Legal basis
To take your order, deliver followers, likes, views, comments or packages, and send order messages.	Contract. This covers the contract with you, and steps you ask us to take before you order.
To answer support requests about an order, a payment, or your Fox Rewards account.	Contract, where the request is about a service you asked for. For other messages, legitimate interests in replying to people who contact us.
To create and run your Fox Rewards account, keep your coin balance and coin history, record offerwall activity, process cashouts, and record free-trial claims.	Contract.
To keep the site secure, limit abuse and repeated requests, prevent fraud, and prevent offerwall fraud.	Legitimate interests. We protect the site, our customers, our partners and the offerwall.
To understand, in general terms, how the site is used, and to make basic improvements.	Legitimate interests in running and improving the site. Where a non-essential cookie needs consent, we use consent instead.
To handle debts and disputes.	Legitimate interests in defending and resolving claims.
To keep accounting and tax records.	Legal obligation.
To use non-essential analytics cookies, and partner cookies where the law requires consent.	Consent.
To send marketing emails. We send these only if you have asked for them.	Consent.

Where we rely on legitimate interests, we use the information only for the reasons in the table. You can object. See section 13. We will stop unless we have a compelling reason to continue, or we need the information for a legal claim.

You can withdraw consent at any time. Email [email protected], or change your browser cookie settings. Withdrawal does not affect processing that was lawful before you withdrew consent. If you withdraw consent for marketing email, we will stop those emails. If you block non-essential cookies, some measurement or partner offers may stop. Checkout can still work if the necessary cookies stay on.

6. Public Instagram and TikTok data

Orders need a public Instagram or TikTok username. For likes, views or comments, we also need the public posts or videos you select. We cannot deliver the order without them. Usernames and public posts can already be seen by anyone on that platform. We still treat the link between your email address and that username as personal information.

We never ask for your Instagram or TikTok password. We do not access private accounts, direct messages, or anything behind a login. We only use public information.

When you enter an Instagram username, we look up that account’s public profile through Apify. The lookup can include the profile picture, follower count and recent public posts. We do this so we can show you the profile and let you pick posts. We store lookup results only briefly. The cache lasts about 30 minutes, so the page stays fast. We then drop it.

For TikTok orders we use the public username and the public video links you give us. We do not access private TikTok data.

7. Crypto payments and buy guides

Checkout accepts cryptocurrency. You can pay on Solana, through a wallet such as MetaMask.

What we receive

We receive the wallet address you pay from, the transaction hash and the amount. We keep these with your order so we can confirm the payment.
Blockchain records are public and permanent. Anyone can see the wallet address, the transaction hash and the amount. We cannot delete that record. The wallet provider cannot delete it either.
We do not put your email address on the blockchain.
We never ask for your private keys or seed phrase. If someone asks for them and says they are from Muddlefox, do not share them. Email us instead.
Your use of MetaMask, or of another wallet, is also covered by that provider’s own terms and privacy policy.

Buy guides

Our buy guides explain how to buy crypto with a card or with PayPal through third parties, such as Bitget Wallet. Muddlefox does not receive or store your card number or your PayPal details. Those providers have their own privacy policies.

If you use our invite link or invite code, that provider may record that you signed up through our referral. The provider keeps that record under its own policy.

8. Fox Rewards and offerwall partners

Fox Rewards is an earn-coins offerwall. You complete offers or surveys from partner companies. You earn coins. 100 coins equal $1 of value. You can cash out coins for Muddlefox services. You can also claim a free trial. You sign in with a link we email you. There is no password.

What a partner receives

When you open an offerwall, the partner receives your Fox Rewards user ID and technical data, such as your IP address, device, browser and country. The partner may set its own cookies. The partner may collect survey answers directly from you. The partner does that under its own privacy policy. We do not control that collection.

Our offerwall partners include CPX Research, CPALead, CPAGrip and TheoremReach.

What partners send us

Partners send us postbacks about completed offers. A postback can also say that an offer was reversed. Fox Rewards records offerwall activity, offer completions, reversals, coin balances, coin history, cashout requests and free-trial claims.

Each partner describes its own practices in its privacy policy. That policy applies to information the partner collects on its offerwall. We have not listed those policy links here. You can read the policy on the partner’s offerwall, or email us if you want help finding it.

9. Cookies

Cookies are small files stored in your browser. We group them like this.

Strictly necessary cookies

WooCommerce cart and session cookies. These remember what is in your cart and your order selection.
Login and session cookies. These keep you signed in to Fox Rewards after you use the emailed sign-in link, and they keep a store session.
Cloudflare security cookies, such as __cf_bm. These help tell people apart from bots and protect the site.

The site needs these cookies to take an order and to keep a session. If you block them, checkout will not work.

Analytics cookies

We use Google Analytics to count visits and see which pages are used. We may also use MonsterInsights, which sets up Google Analytics, and Jetpack statistics from WordPress.com (Automattic). These tools may use cookies. They may receive your IP address, browser, device type and the pages you view. We use this in general terms to understand the site. Where the law requires consent for these cookies, consent is our legal basis. You can withdraw it at any time.

Fox Rewards also sets a visitor cookie called mf_vid. It holds an anonymous random id and lasts 180 days. We use it only to measure how visitors use Fox Rewards, our free services and free tools, such as which buttons and offers get clicked. It does not contain your name or email, and we do not sell or share it.

Offerwall and partner cookies

When you open a partner offerwall, that partner may set its own cookies. We do not control those cookies. The partner’s privacy policy explains them. Blocking or refusing them may mean the partner cannot show you some offers.

How to control cookies

You can block or delete cookies in your browser settings. You can also set your browser to refuse some cookies and allow others. If you block strictly necessary cookies, the cart and checkout will not work. Blocking analytics or partner cookies does not stop you from emailing us about an order.

10. Who we share information with

In this section, “share” means we give information to the recipients below so they can help run Muddlefox, or because the law requires it. California law also uses “sell” and “share” in a special way. That is explained in section 14. We do not sell personal information for money.

Some of these providers act only on our instructions. Offerwall partners, analytics providers, and wallet or blockchain providers also use information for their own purposes. Their privacy policies cover that use.

JAP (Just Another Panel). JAP is the third-party panel that fulfils orders. It receives the Instagram or TikTok username and the post or video links for the order. It does not receive your email address.
Apify. Apify looks up public Instagram profile information when you enter a username. See section 6.
Offerwall partners: CPX Research, CPALead, CPAGrip and TheoremReach, when you open their offerwall. See section 8.
Bluehost. Bluehost hosts the site on cPanel and stores site data, including orders and Fox Rewards accounts.
Cloudflare. Cloudflare delivers the site and protects it. It may process IP addresses and set a security cookie such as __cf_bm.
Email hosting. We send and receive email through cPanel mail hosted with our host. This includes order emails and support emails.
Google Analytics and other site tools. We use Google Analytics. We may also use MonsterInsights and Jetpack statistics from WordPress.com (Automattic). Other site tools, such as our contact form and store software, process the information they need for their feature.
Crypto networks and wallet providers. This includes the Solana network and MetaMask. If you choose a buy-guide provider, such as Bitget Wallet, that provider receives what you submit to it. We do not receive your card or PayPal details.
Authorities and others, when the law requires it. We may share information if the law requires it, to protect our rights or the safety of others, or to deal with fraud.
A buyer, if the business is sold. If we sell or transfer the business, or its assets, the buyer may receive the information needed to continue the service.

We do not give your contact details to other companies for their own postal or email marketing lists.

11. International transfers

We are based in Thailand. Our providers may process personal information in the United States and in other countries outside your own. Those countries include Thailand. Data protection laws there may differ from the laws where you live.

Where a provider offers them, we rely on safeguards such as the European Commission’s Standard Contractual Clauses, or on the provider’s own transfer mechanisms.

You can ask us for more information about these transfers and safeguards. Email [email protected].

12. How long we keep information

We keep personal information only for as long as we need it for the reasons in this policy. The periods below are maximums, unless we say a period is typical. When a period ends, we delete the information or anonymise it, unless we must keep it for a legal reason. Information on a blockchain cannot be deleted.

Order and payment records, including your email address, username, selected posts or videos, wallet address, transaction hash and amount. We keep these for as long as we need them for accounting, tax and disputes. That is generally up to 5 years after the order, unless the law requires longer.
Fox Rewards account, coin and offerwall records. We keep these while the account is open. After the account is closed, or after inactivity, we keep them for up to 12 months to handle fraud checks, reversals and disputes. Records we also need for accounting follow the order period above.
Support emails and contact form messages. We keep these for up to 2 years after the request is resolved.
Instagram lookup cache. About 30 minutes. This is a typical cache time, not a long-term record.
Security and server logs. Short periods set by our host and by Cloudflare.
Analytics data. According to Google Analytics retention settings, and no longer than 14 months.
Blockchain data. Public and permanent. We cannot delete it.

13. Your privacy rights (GDPR / UK GDPR)

If the GDPR or the UK GDPR applies to you, you have the rights below. These rights are not absolute. Where the law sets a limit, we will explain it when we reply. To use a right, follow section 16.

Access. You can ask for a copy of the personal information we hold about you, and for information about how we use it.
Rectification. You can ask us to correct information that is wrong or incomplete.
Erasure. You can ask us to delete your personal information. We will do so unless we need to keep it, for example for tax records or a legal claim. We cannot delete information recorded on a blockchain.
Restriction. You can ask us to limit how we use your information in certain cases, for example while we check a correction you asked for.
Portability. You can ask for the information you gave us, in a common electronic format, where we process it by automated means and the basis is contract or consent.
Objection. You can object to processing based on legitimate interests, including profiling based on those interests. We will stop unless we have a compelling reason to continue, or we need the information for a legal claim. You can also object to direct marketing. We do not send marketing emails unless you asked for them. If you object, we will stop.
Withdraw consent. Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that was lawful before then.
Automated decisions. You have the right not to be subject to a decision based solely on automated processing that has a legal effect on you, or a similarly significant effect. We do not make decisions of that kind.
Complain. You can complain to your local data protection supervisory authority. In Thailand, you can complain to the Personal Data Protection Committee under the PDPA.

14. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the rights in this section under the CCPA/CPRA. They sit alongside the rights in section 13. To submit a request, email [email protected].

Categories collected in the last 12 months

This table lists the categories of personal information we collected in the last 12 months.

Category	Examples
Identifiers	Email address, Instagram or TikTok username, IP address, Fox Rewards user ID, and crypto wallet address.
Commercial information	Orders, coin history, and cashout history.
Internet or other electronic network activity	Pages viewed, device and browser information, and offerwall activity.
Geolocation	Approximate location from your IP address. Not precise location.
Inferences	None. We do not draw inferences to build a profile of you.

Sensitive personal information

We do not collect sensitive personal information. We do not collect government ID numbers, precise location, account passwords, or card or PayPal details. Fox Rewards uses an emailed sign-in link, not a password. Because we do not collect sensitive personal information, the right to limit the use of sensitive personal information does not apply. If you think we have collected some, email us and ask us to delete it.

Sources

We collect personal information from the sources in section 4. Those sources are you, your device, offerwall partners via postbacks, public Instagram profiles via Apify, and public blockchains.

Business purposes

We use personal information for the purposes in section 5. In short, those purposes are:

to perform our contract with you, including orders, delivery, your Fox Rewards account, coins and cashout;
for our legitimate interests, including security, fraud prevention, abuse limits, preventing offerwall fraud, basic site improvement, and handling debts and disputes;
to meet legal obligations, including accounting and tax records;
with your consent, where the law requires it, for non-essential analytics or partner cookies and for any marketing emails.

Sale and sharing

We do not sell personal information for money. We have not sold personal information for money in the last 12 months.

Our use of Google Analytics, and offerwall partners’ tracking tools, may count as “selling” or “sharing” for cross-context behavioral advertising under California law. In the last 12 months, the categories that may have been sold or shared in that sense are identifiers, internet or other electronic network activity, and approximate geolocation. The recipients are analytics providers and offerwall partners.

We do not knowingly sell or share the personal information of consumers under 16.

Your California rights

Know and access. You can ask us to tell you the categories and the specific pieces of personal information we collected about you. You can also ask about sources, purposes, and the categories of third parties we disclosed it to.
Delete. You can ask us to delete personal information we collected from you, subject to the exceptions the law allows. We cannot delete blockchain records.
Correct. You can ask us to correct inaccurate personal information we hold about you.
Opt out of sale or sharing. You can opt out of the sale or sharing of your personal information. See section 15.
Limit the use of sensitive personal information. This right does not apply, because we do not collect sensitive personal information.
Non-discrimination. We will not deny you the shop or Fox Rewards because you exercise a privacy right. We will not charge you a different price, or offer a different level of service, because you exercise a right. If you opt out of sale or sharing, an offerwall partner may not be able to show you some offers. Those offers depend on the partner’s own tools.

How to submit a request and how we verify it

Email [email protected]. For a request to know, delete, or correct, use the email address on the order or Fox Rewards account. Include your order number, or enough Fox Rewards details for us to find the account. We may ask for more information if we cannot match the request to an account. We never ask for your password, a social media password, a private key, or a seed phrase.

To opt out of sale or sharing, use section 15. We only collect what we need to apply that opt-out.

Authorized agents

You may use an authorized agent to submit a request for you. The agent must have your written, signed permission to act for you. We may contact you to verify the request directly with you.

California response times

We confirm that we have received your request within 10 business days. We respond within 45 days. If we need more time, we will tell you. We may extend the time once, by another 45 days.

If we deny your request, you can reply to our email and ask us to reconsider. We will explain the result in writing. You can also contact the California Privacy Protection Agency.

15. Do Not Sell or Share My Personal Information

To opt out of the sale or sharing of your personal information, email [email protected] with this subject line:

Do Not Sell or Share My Personal Information

You do not need an account to send this request. We do not ask you to verify your identity beyond what we need to apply the opt-out to the right browser, order, or account.

If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of personal information linked to that browser.

Please also send the email if you want the opt-out applied to a particular order or Fox Rewards account. We need a way to find those records. Opting out does not mean we will refuse service or charge a different price. An offerwall partner may not be able to show you some offers after you opt out.

16. How to exercise your rights and response times

Email [email protected] from the email address you used for your order or Fox Rewards account. Include your order number if you have one. You can also use our contact page.

For access, correction, and deletion, we check that the request comes from the email address on the order or account. We may ask for more information if we cannot find the right records. We never ask for a password, a private key, or a seed phrase. For a Do Not Sell or Share request, section 15 applies. We only ask for what we need to apply the opt-out.

We respond to GDPR and UK GDPR requests within one month. If a request is complex, or if you send several requests, we may extend that time by up to two further months. If we extend, we will tell you within the first month and explain why.

We respond to California requests within 45 days. We confirm receipt within 10 business days. We may extend once by another 45 days if we tell you. See section 14.

We handle these requests free of charge. If a request is manifestly unfounded or excessive, we may refuse it or charge a reasonable fee. We will tell you why.

17. Security

We use reasonable measures to protect your information. The site uses encrypted HTTPS connections. Our host and Cloudflare provide protections against common attacks and abuse.

No method of sending or storing information online is completely secure. We cannot promise that your information will never be accessed, disclosed, or lost.

Please do not send us passwords, private keys, or seed phrases. We will not ask for them.

18. Children

Muddlefox is for people aged 18 and over. Our Terms of Service say you must be at least 18 to use the service.

The service is not intended for anyone under 16. We do not knowingly collect personal information from anyone under 16. We do not knowingly sell or share the personal information of anyone under 16.

If you believe we have collected information from someone under 16, email [email protected] and ask us to delete it. Please include enough detail for us to find the account or order.

19. Changes to this policy

We may update this Privacy Policy. When we do, we will post the new version on this page and change the effective date at the top.

If we make a material change, we will highlight it on the site. Where we have your email address and email is a suitable way to reach you, we may also email you.

20. Contact

Questions about this policy or your information? Email [email protected] or use our contact page. We are happy to help.

Controller: Muddlefox, operated by Kenneth Wagner in Thailand.

Legal name: Muddlefox
Email: [email protected]