SissyWorld

Privacy Policy

Last updated 1 May 2025

1. Who we are

SissyWorld (“we,” “our,” “the platform”) is a private adult education platform. We take your privacy seriously — pseudonymity and discretion are core product values, not afterthoughts.

2. What we collect

  • Account data: display name (pseudonym), email address, encrypted password hash.
  • No real name, ever: we never ask for your legal name and have no field to store it.
  • Progress data: lessons completed, XP, challenge progress, journal entries — all private by default.
  • Payment data: handled entirely by our payment processor; we never store card numbers.
  • Technical data: server logs (IP addresses scrubbed after 30 days), session tokens.

3. What we do not collect

  • No third-party analytics (no Google Analytics, no Meta Pixel, no Hotjar).
  • No advertising trackers of any kind.
  • No social login data (we do not use Google/Facebook OAuth).
  • No cross-platform identity data.

4. How we use your data

Your data is used solely to operate your account, deliver content, process payments, send transactional email (receipts, password resets), and improve the platform. We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Email

Your email address is encrypted at rest. It is used only for transactional messages — receipts, security alerts, and opt-in newsletters. You can update your communication preferences in account settings at any time.

6. Billing discretion

Charges appear on your statement under a neutral descriptor that does not reference this platform by name. This is documented at signup and cannot be changed by the user — it is by design, for your protection.

7. Your rights

Depending on your jurisdiction (GDPR, CCPA, UK DPA 2018), you have the right to access, correct, export, or delete your personal data. To exercise any of these rights, contact us at privacy@theacademy.com. Deletion requests are honoured within 30 days.

8. Cookies

We use only essential cookies required for authentication and session management. No advertising or tracking cookies are set.

9. Data retention

Active account data is retained for the life of the account. Server logs are scrubbed of IP addresses after 30 days. On account deletion, your personal data is removed within 30 days; aggregate anonymised statistics may be retained.

10. Changes to this policy

Material changes will be communicated by email and noted with a new “Last updated” date above. Continued use after the effective date constitutes acceptance.