JoyCraft

Privacy Policy

Effective date: [launch date]

This policy is written in plain language on purpose. It lists exactly what joycraft.dev collects, what it does not collect, and the choices you have. The short version: we collect three things — contact form messages, optional email subscriptions, and consent-based aggregate analytics — and nothing else. If anything below is unclear, email us at privacy@joycraft.dev.

1. Scope

This policy covers joycraft.dev, operated by JoyCraft ("we", "us"). JoyCraft builds two products: CourseSpeed, a Chrome extension for online-course playback speed and notes, and CostPilot Pro, a Shopify app for per-order profit tracking.

The same practices described here apply to sellertales.com, our editorial site about e-commerce profitability, which publishes the same policy with its own domain-specific details. Where this document says "the site", it means joycraft.dev; the data practices — and the limits on them — are identical on both sites.

2. What we collect

We collect three things, and only these three. Each is tied to a specific action you take.

2.1 Contact form submissions — yes, we collect this

  • Data: your name, your email address, and the content of your message.
  • Purpose: to read your message and reply to you. We do not add contact-form details to any mailing list.
  • Legal basis: consent. Submitting the form is a clear affirmative act; the form states this purpose next to the submit button.
  • Retention: deleted within 12 months after your request is resolved (see section 6).

2.2 Email subscription — yes, we collect this (optional)

  • Data: your email address. Nothing else.
  • Purpose: to send you the updates you signed up for — product updates on joycraft.dev, or new articles on sellertales.com, depending on where you subscribed.
  • Legal basis: consent, confirmed through double opt-in: after signing up you receive a confirmation email, and the subscription starts only when you click the confirmation link.
  • Retention: until you unsubscribe. Every email contains a one-click unsubscribe link, and unsubscribing removes your address (see section 6).

2.3 Privacy-friendly analytics (Plausible) — yes, we collect this, only after you consent

  • Data: aggregate visit counts — pages viewed, referrer, country-level region, browser and device type. IP address and browser user-agent are transiently processed to derive country and device type, and are not stored. Plausible uses no cookies and creates no persistent user identifier; a visitor cannot be tracked over time or across sites.
  • Purpose: to understand which pages help people so we can improve the site.
  • Legal basis: consent. The analytics script loads only after you choose "Accept" in the consent prompt. Choosing "Decline" changes nothing about your visit.
  • Retention: Plausible stores aggregated statistics; there is no personal profile to retain.

3. What we do NOT collect

This list is deliberate and complete for our current setup:

  • No card or payment information. We do not collect, store, or see card numbers, billing addresses, or checkout data. Paid plans are billed entirely on the platform side: CostPilot Pro subscriptions through Shopify App Billing, CourseSpeed Pro purchases through the Chrome Web Store. Those platforms process payment data under their own privacy policies.
  • No third-party advertising pixels, no cross-site tracking identifiers, no behavioral fingerprinting, no precise geographic location, and no sensitive-category data (such as health, religious beliefs, or political opinions). We run no ad tech and no remarketing on this site.
  • No user-level cross-site linking. JoyCraft operates two sites (joycraft.dev and sellertales.com). We analyze the funnel between them only through aggregated UTM parameters and referrer counts. Data from the two sites is never merged at the level of an individual person.

One boundary worth spelling out: this policy covers what our websites collect. The products themselves run inside the environments of their platforms: CourseSpeed is a Chrome extension that runs in your browser on the course platforms you use, and CostPilot Pro connects to your store's order data through the Shopify Admin with read-only access. Neither product is used to build a cross-site profile of you, and neither feeds data into an account or profile we maintain on these sites.

4. Cookies & consent

  • This site sets no marketing or tracking cookies.
  • Analytics (Plausible) is cookieless by design and is loaded only after you consent via the on-page consent prompt.
  • In the prompt, "Decline" is presented with the same prominence as "Accept"; declining simply means no analytics script loads.
  • You can change or withdraw your choice at any time: click "Analytics consent" in the site footer to reopen the consent panel. Withdrawing consent stops analytics from loading on subsequent page views.
  • Your browser stores your choice with a timestamp so we can honor it on return visits.

5. Third parties

We use a deliberately short list of processors:

  • Plausible Analytics — privacy-focused, cookieless web analytics (see plausible.io). Aggregate statistics only; it acts as a data processor under a written agreement.
  • Contact-form processing service — handles the contact form on this static site.
  • Email delivery service — sends the double-opt-in confirmation and subscription emails.

6. Data retention

  • Contact messages: deleted within 12 months after your request has been handled.
  • Subscription email addresses: deleted promptly when you unsubscribe — either through the one-click link in any email or by emailing us.
  • Analytics: no personal data enters our analytics pipeline, so there is no personal record to delete.

7. Your rights

Under the GDPR (and equivalent laws such as the UK GDPR), you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate data;
  • Erase your data;
  • Receive your data in a portable format (data portability);
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
  • Lodge a complaint with your local data-protection supervisory authority.

Under the CCPA/CPRA (California), you have the right to know what personal information we collect, to request deletion, and to not be discriminated against for exercising your rights. To be direct: we do not sell personal information, and we have not sold it — so there is no "Do Not Sell or Share" link to offer, and none is needed.

To exercise any right, email privacy@joycraft.dev with your request. We will respond within the timeframe the applicable law requires, typically within one month.

8. Children

Our sites and products are intended for a general audience and are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has submitted personal data to us, contact us and we will delete it.

9. International transfers

Your data may be processed in countries other than the one you are located in, including where our processors operate. Where required by law, such transfers rely on standard contractual clauses (SCCs) or another adequate transfer mechanism.

10. Security

We apply reasonable technical and organizational measures to protect the limited data we hold: encrypted connections (HTTPS) across both sites, access restricted to the people who need it, and processors chosen with security and data minimization in mind. We also maintain a written data-breach response process: detect a suspected breach, assess it, and notify the relevant supervisory authority and the affected users where applicable law requires it, within the deadlines that law sets. That said, no method of transmission or storage can be promised to be completely secure; we commit to reasonable care, not to absolutes.

11. Changes

When we update this policy, we will revise the effective date at the top and post a clear notice on the site so the change is visible before it takes effect. Material changes will be highlighted prominently rather than made silently.

12. Contact

For any privacy question, request, or complaint:

Email: privacy@joycraft.dev

We would rather answer your question than leave you guessing about any of this.