Privacy policy

JoyStick Academy is operated by JoyStick Studios SARL AU (Casablanca, Morocco). This policy explains what we collect, why, who processes it on our behalf, and the choices you have. It covers the iOS and Android apps, the in-engine plugins, and the joystick-academy.com web properties.

What we collect

Account email, display name, and the learning data you generate inside the app (lessons completed, XP, streak, quiz answers, capstone submissions). Push notification token if you opt in. Anonymous device fingerprint for creator-affiliate attribution. Diagnostic and product analytics.

Marketing site & forms

When you submit the contact form or join the waitlist on this site, we store what you enter (your email, and for the contact form your name, organization, and message) plus a few signals so we can reply, prevent abuse, and understand where interest comes from: a salted one-way hash of your IP address (never the IP itself), your browser and device type, and basic attribution (referrer, any UTM campaign tags, the page you submitted from, your language, and timezone). The attribution uses cookie-free session storage, not tracking cookies.

This website sets no cookies, loads no advertising or third-party analytics, and self-hosts its fonts. Browsing the site, including the embedded interactive demos and animations, sends no data to advertising networks or analytics brokers. The only backend the site contacts is our own Supabase, used to store your form submission and to load the sample lesson content shown in the demos.

How we use it

To provide and personalize the learning experience, sync your progress across devices, process subscriptions and rewards, send the notifications you opt into, reply to your messages, prevent abuse, and improve the product. We do not use your data for third-party advertising.

Who processes it for us

We use a small set of processors under their own data-protection terms: Supabase (database, authentication, and file storage), PostHog (product analytics), Firebase Cloud Messaging (push notifications), and the Apple App Store and Google Play (purchase processing). We do not sell your data or share it with third-party ad networks. PostHog, Firebase, and the app stores operate only inside the mobile apps and in-engine plugins. This website itself relies on Supabase alone, and only to store the contact and waitlist messages you choose to send.

Data retention

We keep account and learning data while your account is active. When you delete your account, the associated records are removed (see Your rights). Contact-form and waitlist submissions are kept until they are no longer needed for the purpose above, or until you ask us to delete them.

What we don't collect

We don't sell your data. We don't buy ad targeting from third-party brokers. We don't track you across other apps.

Your rights

You can request access to, correction of, export of (GDPR Art. 20), or deletion of (GDPR Art. 17) your personal data. Export and account deletion run end-to-end from inside the app without operator intervention; for anything else, or to delete a marketing-form submission, email us at the address below.

Children

JoyStick Academy is intended for a general adult audience of aspiring and hobbyist game developers. It is not directed at children, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will remove it.

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected here with a new “last updated” date, and where appropriate we will notify you in the app.

Contact

Privacy questions or data requests: walid.mahfoud@joystickstudios.ma