Legal
Privacy Policy
Last updated: October 21, 2026
In short: we collect what we need to run your account and show your progress, plus usage analytics only if you accept cookies. We don't sell your data or use it for ads. You can see, download or delete your data at any time.
Who we are
Flick Academy ("we", "us") runs flick.academy, an aim-training curriculum for mouse-and-keyboard shooters. Flick Academy is based in The Bahamas. For questions about this policy or your data, use our contact page.
What we collect
When you create an account
- Email address and username. Your password is stored only as a secure hash by our accounts provider; we never see it.
- If you sign in with Google: your name, email address and Google account ID. We don't get your Google password or access to anything else in your Google account.
When you use Flick Academy
- Your progress and results: lessons started and finished, drill sets and scores, results from the free tools (for example your eDPI, distance per 360° turn, mousepad size, Swipe Test angles and Overshoot results) and your Pivot Check aiming style.
- Your setup: mouse DPI, in-game sensitivity, game and mousepad size, so the tools remember them.
- Without an account, the tools keep these settings and results only in your own browser (local storage). They aren't sent to us unless you sign in.
When you join the launch list or newsletter
- Your email address, and when you added it. We use it to tell you when Flick Academy launches and to send the occasional Flick Notes newsletter. Every email has a way to unsubscribe, or you can ask us through the contact page.
When you pay for Pro
- Payments are handled by Lemon Squeezy, which acts as the seller of record. Your card or payment details go to Lemon Squeezy, not to us. We receive your email, subscription status, renewal and cancellation dates, and the country used for sales tax.
Analytics (only if you accept cookies)
- If you click Accept on the cookie banner, we use PostHog to understand how the site is used: pages visited, buttons clicked, which tools and lessons are used, page speed, and session recordings of how pages are used. Text you type into forms is hidden from recordings.
- PostHog also records your browser and device type and an approximate location (country or city) worked out from your IP address.
- If you click Decline, PostHog is never loaded. You can change your choice at any time (see "Your choices and rights" below).
- Our host, Cloudflare, counts visits with its own cookie-free Web Analytics, and keeps short-lived technical logs (such as IP addresses) to protect the site from attacks.
Why we use it
| Use | Data | Legal basis (EU/UK) |
|---|---|---|
| Running your account and saving your progress | Account, progress, results, setup | Providing the service you signed up for |
| Billing and Pro access | Payment status from Lemon Squeezy | Providing the service; legal obligations (tax records) |
| Improving lessons, drills and tools | Analytics | Your consent (the cookie banner) |
| Security and preventing abuse | Technical logs | Our legitimate interest in keeping the site safe |
| Emails about your account (confirmation, password reset, billing) | Email address | Providing the service |
We don't sell your data, share it for advertising, or use it to build ad profiles. We only send marketing emails if you've separately agreed to them.
Who helps us run the site
These companies process data on our behalf, only to provide their service to us:
- Supabase: accounts and database (servers in the United States).
- PostHog: analytics, only with your consent (United States).
- Cloudflare: website hosting, security and cookie-free visit counts.
- Lemon Squeezy: payments and sales tax, as seller of record.
- Google: "Continue with Google" sign-in, and the fonts used on the site (loading them sends your IP address to Google).
- jsDelivr: delivers the sign-in code library to your browser.
Some of these providers store data in the United States and other countries. Where the law requires it, they protect transfers with standard safeguards such as the EU Standard Contractual Clauses.
Cookies and local storage
- Always used (needed for the site to work): keeping you signed in, remembering your cookie choice, and your tool settings and results stored in your browser.
- Only with your consent: PostHog analytics cookies.
How long we keep it
- Account, progress and results: until you delete your account. We then delete them within 30 days.
- Analytics: up to 1 year.
- Billing records: as long as tax law requires. Lemon Squeezy keeps its own records as seller of record.
Your choices and rights
You can ask us to show you, correct, export or delete the data we hold about you, and object to or restrict how we use it. To make a request, use our contact page with the email address on your account. We'll reply within 30 days. If you're in the EU or UK, you can also complain to your local data protection authority.
To change your cookie choice, use this button. The banner will appear again so you can choose.
Children
Flick Academy is for people aged 13 and over. If you're under the age needed to agree to data use where you live (16 in some countries), ask a parent or guardian before creating an account. If you believe a child under 13 has given us data, contact us and we'll delete it.
Security
The site uses HTTPS everywhere, passwords are stored only as secure hashes, and each player can only reach their own data in our database. No system is perfectly secure, so if we ever discover a breach that affects you, we'll tell you as the law requires.
Changes to this policy
If we change this policy, we'll update the date at the top. If the change is significant, we'll tell signed-in players by email or on the site before it takes effect.