Privacy Policy

Last updated: 9 January 2026

This privacy policy explains how personal data is handled when you use Josh-Fun (https://josh-fun.co.uk/). It is intended to be clear and transparent and should be reviewed and updated if the site’s features change.

1) Who we are (data controller)

Josh-Fun ("we", "us") is operated by Josh (the site owner; an individual, not a company). For UK data protection law purposes, Josh is the data controller for personal data processed via this website.

Contact email (privacy enquiries and rights requests): info@josh-fun.co.uk

We do not publish a postal address because this is a personal project. We aim to handle privacy enquiries by email.

We are not required to appoint a data protection officer and do not currently have one.

2) What this policy covers

This policy explains what personal data may be processed when you use the site, why it is processed, the lawful bases we rely on, how long data is kept, and the rights available to you.

3) The site’s features and what we do not offer

Josh-Fun is primarily static pages plus simple games/tools that run in your browser. At the time of writing, we do not provide:

• user accounts or logins for general visitors;
• comments or public user submissions;
• purchases or payments;
• newsletters;
• a public contact form (email contact only).

4) Personal data we may process

Even if you do not actively provide information to us, some limited personal data is commonly processed to operate a website (for example, server logs). We may process:

A. Technical and log data (automatic)

• IP address;
• date and time of your request;
• pages requested (URLs);
• browser and device details (user agent);
• referrer information (sometimes);
• error and security event logs.

B. Data you choose to provide

If you email us, we process your email address and the contents of your message (and our replies).

5) Why we process personal data and our lawful bases

UK GDPR requires a lawful basis for each purpose of processing. We rely on the following:

A. Operating, securing and improving the website

• Purpose: to deliver pages to your device, monitor performance, prevent abuse, investigate faults, and keep the site secure.
• Personal data: technical/log data described in section 4A.
• Lawful basis: legitimate interests (running and protecting a website).

B. Responding to emails and privacy requests

• Purpose: to respond to your email and handle requests (including data protection rights requests).
• Personal data: contact details and message contents.
• Lawful basis: legitimate interests (communications) and, where applicable, legal obligation (compliance with data protection law).

C. Analytics (Plausible)

• Purpose: to understand overall site usage (e.g. popular pages, referrers) and improve the site.
• Provider: Plausible Analytics (a third-party analytics provider).
• Personal data: Plausible receives standard HTTP metadata (such as IP address and user agent) as part of normal web requests. According to Plausible, it does not use cookies or local storage for website analytics, and it does not store visitors’ IP addresses in its database; it produces aggregate statistics instead.
• Lawful basis: legitimate interests (measuring and improving the site in a privacy-focused way).

We use Plausible to track aggregate trends in traffic and content usage. It is not used for advertising profiling. For more information, see Plausible’s Privacy Policy and Data Policy.

D. Automated decision-making

We do not carry out automated decision-making or profiling about visitors.

6) Cookies and similar technologies

Cookies are small text files stored on your device. "Similar technologies" include localStorage/sessionStorage and other methods that store or access information on your device.

Analytics (Plausible)

This site uses Plausible Analytics to measure aggregate traffic trends. According to Plausible, its website analytics does not use cookies, browser cache, or local storage to track visitors, and it is designed to avoid collecting personally identifiable information.

Game/tool storage (localStorage)

Some games and tools may store progress or preferences in your browser using localStorage (for example, to keep a save file). You can clear this via your browser settings (often under “Site data” or “Cookies and site data”), but doing so may erase game saves.

Your choices

You can control cookies and site storage through your browser settings, including deleting site data or blocking storage. You can also use browser extensions/content blockers to block analytics scripts. Note that blocking site storage may affect how some games/tools function.

7) Games and tools (local processing)

Unless a specific page clearly states otherwise, inputs you type into games/tools are processed locally in your browser and are not sent to us. If a tool needs to send data to a server in future (for example, to fetch results), the page will explain what is sent, why, and to whom.

8) Sharing personal data

We do not sell personal data. We do not share personal data for advertising or profiling.

We may share limited personal data with service providers that help us operate the site (for example, hosting, security, or backup providers). Where required, these providers act on our instructions and are expected to protect the data appropriately.

Analytics provider: we use Plausible Analytics to process aggregate usage analytics as described above.

9) International transfers

If any service providers process personal data outside the UK, we will ensure appropriate safeguards are used (such as adequacy regulations or appropriate contractual protections) and we will update this policy with relevant details. Plausible states that its analytics service is hosted and processed in the EU; see its Security and Data Policy pages.

10) How long we keep personal data

We keep personal data only for as long as necessary for the purposes described in this policy.

• Server logs: kept for a limited period for security and maintenance, then deleted or anonymised unless needed longer to investigate incidents.
• Email correspondence: kept for as long as needed to respond and keep an appropriate record, then deleted.
• Analytics (Plausible): aggregate analytics data is retained in our Plausible account for as long as we need it for site measurement and improvement, unless deleted sooner.

11) Security

We use reasonable technical and organisational measures to protect the site and any personal data processed, including access controls and security monitoring. No method of transmission or storage is completely secure, but we work to reduce risks.

12) Your rights

Under UK GDPR, you may have the right to:

• be informed about how your personal data is used;
• request access to personal data (a "subject access request");
• request rectification (correction) of inaccurate data;
• request erasure in some circumstances;
• request restriction of processing in some circumstances;
• object to processing where we rely on legitimate interests;
• data portability (in limited circumstances); and
• withdraw consent at any time (where we rely on consent).

How to exercise your rights: email info@josh-fun.co.uk. To help us locate relevant information (especially for log-related requests), please include approximate dates/times and the pages you visited. We may ask for reasonable information to confirm your identity.

We normally respond within one month. If a request is complex, we may extend this timeframe (and will tell you if we do).

13) Complaints

If you have concerns about how we handle personal data, please contact us first and we will try to resolve the issue. You also have the right to complain to the UK supervisory authority, the Information Commissioner’s Office (ICO).

ICO website: ico.org.uk

14) Children’s privacy

Josh-Fun is an entertainment website and may be used by a wide audience. We do not intentionally collect personal data from children. If you believe a child has provided personal data to us (for example, by emailing us), please contact us and we will take appropriate steps to delete it where possible.

15) Links to other websites

This site may link to other websites or services (including administrative panels on subdomains). Those services have their own privacy policies and practices. We are not responsible for their content or privacy handling.

16) Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will change when updates are made.