Use case

Proxies for Just Eat: the block page, the terms and the partner routes

Just Eat answered our server with Cloudflare block pages, and its terms name scraping as misuse. What the block means, and what Just Eat allows.

HProxy Team··Updated September 28, 2026·5 min read
HProxy.Use case

Free proxies won't hold up here.

Shared datacenter IPs get flagged and dropped fast. When it has to hold, gaming, streaming, accounts, you need mobile and residential IPs that read as a real device, from $0.44/GB, pay as you go.

See plans & pricing→

People who search for Just Eat and proxies ask about menu scrapers, the Just Eat API, and why the site does not work with a VPN, going by Google autocomplete. This page answers from our own requests to Just Eat sites, the Cloudflare docs, the Just Eat terms and robots.txt, and the newsroom and developer portal of Just Eat Takeaway.com (JET). We read all of them on 28 September 2026. The short answer: every Just Eat site we tried sent our server a block or a challenge. The terms allow personal, non-commercial use and name scraping as misuse.

What our server got from Just Eat

We sent one plain request to each address below from our server, a machine in a data centre, with a normal browser name. Every answer came from Cloudflare, with HTTP 403. The last four are sites the Just Eat footer links to.

addresswhat came back
just-eat.co.ukblock page
just-eat.co.uk/robots.txtblock page
just-eat.co.uk/terms-and-conditionschallenge ("Just a moment...")
just-eat.ieblock page
just-eat.esblock page
lieferando.dechallenge
thuisbezorgd.nlchallenge

The block page reads "Sorry, you have been blocked" and "You are unable to access just-eat.co.uk". It says the site "is using a security service to protect itself from online attacks". Among the triggers it lists are "a certain word or phrase, a SQL command or malformed data". Its advice is short: "You can email the site owner to let them know you were blocked", with what you were doing and the Ray ID shown on the page.

A block is not a challenge

Cloudflare explains both. Its rules each carry an action, such as a challenge or a block. For a challenge, the client must pass a test: "If successful, Cloudflare accepts the matched request; otherwise, it is blocked". A block ends there: "Matching requests are denied access to the site", usually with HTTP 403.

So the block page is Just Eat refusing a request. It is not a puzzle to solve. The Just Eat terms add that access "may be suspended temporarily at any time and without notice".

Our free IP lookup shows the network (ASN) and proxy status of any IP address, even the one a VPN gives you.

What the Just Eat terms say

The live terms page sent us a challenge, so we read the copy the Internet Archive made on 8 April 2026. The page carries no date of its own.

Section 7.1 permits use of the website "for your own personal non-commercial use". Its first rule, 7.1.1, reads "You must not misuse the Website", and its brackets name hacking and "scraping". Under 7.1.5, using the website or its content "for commercial purposes" needs a licence from Just Eat.

Section 13 lets Just Eat end or suspend your right to use the website for a breach of 7.1. It can also act when there is "misuse, unauthorised, fraudulent or otherwise suspicious activity" on your account. The voucher terms add that "each customer or household is limited to one Voucher per promotion or offer". The terms do not mention VPNs or proxies.

What robots.txt covers

The live robots.txt sent the block page too. Among the rules the archive copy of 12 May 2026 gives all crawlers are these. Quoted text is the comment above the rule in the file.

  • /restaurants-demotest* and /restaurants-loadtest*: demo and load-test pages.
  • /area/*/*cuisine=*cuisine=*cuisine=: "Exclude more than two cuisines".
  • /area/*?*filter=: "Exclude query param filters".
  • /checkout: the checkout.
  • */menu/postcode and /restaurants-*/menu/*/products: "Remove after new menu".
  • /order-history, /account/ and /member/: "Logged in urls".

Area pages and restaurant menu pages as such are not on the list. The terms still name scraping as misuse, whatever robots.txt leaves open.

Prices and fees in the terms

Section 5.1 says prices include VAT "but may exclude delivery costs (if you opt for delivery instead of collection) and any administration or service charge". Whoever delivers, the business or Just Eat, may charge the delivery fee and service charge. Both "may vary depending on a number of factors, including your location, the Business you select, and the value of the items in your Order". The terms promise that "these costs will always be shown to you before you complete and pay for your Order".

The partner routes

JET runs a "Public Developers Portal". Its docs have two sections: "Point-of-Sale (JET Connect)" and "Delivery-as-a-Service (JET Go)". The page names cover POS setup, onboarding, webhooks and certification. None of them mentions menus or prices. The portal loads its text by script, so we read only those names.

Who runs Just Eat

Just Eat is part of JET, whose newsroom calls it "the UK’s leading food delivery platform". The UK website is run by Just Eat.co.uk Ltd, a company registered in England and Wales. Prosus declared its offer for JET unconditional on 2 October 2025, with 90.13% of the shares tendered. Settlement was set for 6 October 2025.

The About text on JET releases says it connects "362,000 partners" and is "Operating across 14 countries". JET said Menulog in Australia would stop taking orders from 26 November 2025. Its service in Denmark was to end on 30 April 2026, and it planned to stop delivery in Bulgaria on 15 September 2026.

If you use proxies for other work

Nothing on this page routes Just Eat traffic through a proxy. We cover other delivery sites on their own pages, such as Deliveroo and Wolt. For the basics, see datacenter and residential proxies and sticky and rotating sessions. Our free proxy list, its UK proxies and our proxy checker cost nothing. Our residential and ISP proxies are on the pricing page, and residential traffic starts at $0.44/GB.

The limits of this page

We sent one request per address and did not retry, log in, order, or test a proxy or VPN against Just Eat. The terms and robots.txt come from Internet Archive copies of 8 April and 12 May 2026, because the live pages sent us Cloudflare pages. The live text may have changed since. The developer portal loads its docs by script, so we read only its section and page names. The help centre pages we found in the archive held no article text. This page is due for a check by 28 December 2026.

Sources

We read every source below on 28 September 2026.

Frequently asked questions

Why does Just Eat show a Cloudflare block page?
Just Eat sits behind Cloudflare, a security service. Cloudflare says a block denies matching requests access to the site, most often with HTTP 403, while a challenge is a test the visitor can pass. The block page asks you to email the site owner with what you were doing and the Ray ID.
Is it allowed to scrape Just Eat?
Not under its terms. They allow use of the website for your own personal non-commercial use, and section 7.1.1 says you must not misuse the website, naming hacking and scraping. Commercial use of the website or its content needs a licence from Just Eat.
Does Just Eat work with a VPN?
The Just Eat terms do not mention VPNs or proxies. Our server, a machine in a data centre, got a Cloudflare block or challenge from every Just Eat site we tried on 28 September 2026. If you see the block page, it asks you to email the site owner with the Ray ID.
Does Just Eat have an API?
Just Eat Takeaway.com runs a Public Developers Portal. Its docs have two sections, Point-of-Sale (JET Connect) and Delivery-as-a-Service (JET Go), with pages on POS setup, onboarding, webhooks and certification. None of its page names mentions menus or prices.
Who owns Just Eat?
Just Eat is part of Just Eat Takeaway.com (JET). Prosus declared its offer for JET unconditional on 2 October 2025, with 90.13% of the shares tendered and settlement set for 6 October 2025. JET says it operates across 14 countries.

Proxies that don't die mid-job

Residential, ISP, datacenter and mobile, verified by the same engine that runs tens of millions of checks. They read as a real device and hold up under load. Pay as you go, and your balance never expires. $0.44/GB is the 2,000 GB+ rate; a single gigabyte is $0.50/GB, with no minimum order.

129M+ proxy checks run · 100+ countries · HTTP / HTTPS / SOCKS · re-checked every few minutes · no signup

HProxy.

Honest guides and comparisons on proxies, scraping and staying unblocked, from the team that runs the network.

RSS feed