JOYWORLD (joy.world) is run by a small family of operating entities. Each entity is the data controller for the part of the platform it operates. This Privacy Policy explains what information we collect, who collects it, how it’s used, and the choices you have.

1. Who controls your data

See the Operating Entities section of the Terms of Service for full descriptions. In short:

• JOYWORLD LLC (Wyoming) — brand owner; coordinates this Policy.
• JOYweb LLC (Florida) — data controller for the digital side of joy.world: account, login, wallet verification, JOYchat, NFT display, and on-chain features. Digital and crypto only — no physical merchandise.
• JOYworkshop LLC (Florida) — data controller for the JOYshop (the Shopify-powered storefront on joy.world): order data, shipping addresses, order status, and sales-tax handling. Most of this is processed by Shopify on JOYworkshop’s behalf.
• JOYware LLC (Florida) — data controller for the Apple App Store apps (Scratch, Scribble) and any related services.

Where a category of data is collected by one of the entities specifically, the controller is named below. For a single point of contact across all of them, write to hi​@​joy.world.

2. Information we collect

a. Account & authentication data (JOYweb)

When you create an account or sign in, JOYweb collects:

• Your email address and password (passwords are stored only as salted hashes by our auth provider, Supabase).
• One-time codes sent to your email for sign-up confirmation, password reset, or email change.
• The wallet address and signed message you produced via Sign-In with Ethereum (SIWE) when verifying a wallet.
• The list of wallet addresses you have linked to your account (verified wallets table).
• Optional profile fields: display name, profile picture (a token from a JOY collection you own).
• Authentication session tokens stored in your browser, used to keep you signed in.

We do not collect or store your private keys, seed phrases, or wallet passwords. Wallet signing happens entirely between your wallet and your browser.

b. Blockchain & on-chain data (JOYweb)

We read publicly available Ethereum data to display NFT ownership, auctions, leaderboards, and collector profiles. This includes:

• Wallet addresses of NFT owners
• Token IDs and collection holdings
• Auction bid history (bidder addresses, bid amounts, timestamps, bid messages)
• Transaction data tied to JOYWORLD smart contracts
• Delegations from the Delegate.xyz on-chain registry, looked up at sign-in for collector-gate purposes

This information is publicly visible on the Ethereum blockchain and is not considered private. We mirror some of it in our database so the site can render it quickly.

c. JOYchat content (JOYweb)

JOYchat posts are stored with the following:

• Post content (text, emoji)
• Author wallet address
• Timestamps
• Optional expiration time you set
• Aggregate reaction counts
• Reply relationships between posts

JOYchat content is public to other JOYWORLD collectors. We may moderate, hide, or remove content at our discretion.

d. Shopping & cart data (JOYworkshop)

When you use the JOYshop:

• Cart contents are stored locally in your browser and in our database under a cart identifier so your cart persists across sessions.
• When you place an order, your name, shipping address, and email are collected by Shopify on JOYworkshop’s behalf for fulfillment.
• Payment information (card numbers, billing address) is collected and processed by Shopify and its payment processors. JOYWORLD never sees or stores your payment card.
• Order history (items, prices, shipping, sales tax) is retained by Shopify and JOYworkshop for business records, fulfillment, accounting, and tax compliance with the Florida Department of Revenue and other applicable jurisdictions.

e. App data (JOYware)

The Scratch and Scribble apps may collect data necessary for their core functionality. See joy.world/joyware for details about each app, and the in-app privacy notes visible at first launch and in the App Store listing.

f. Interaction & preference data

When you interact with JOYWORLD, we may collect:

• Emoji reactions on Dispatch posts — stored as aggregate counts per post
• Search queries — processed in real time, not permanently stored
• Theme preferences (Light / Dark / JOY mode) — stored locally in your browser only

g. Automatically collected data

Like most websites, our servers and our hosts may automatically collect standard log information such as your IP address, browser type, referring pages, and pages visited. We use this for operational, security, and abuse-prevention purposes; it is not linked to your wallet identity.

3. How we use your information

• To display your account, NFT collections, leaderboards, and JOYchat posts.
• To facilitate auction participation and on-chain transactions.
• To process and fulfill JOYshop orders, calculate and remit sales tax (via JOYworkshop and Shopify).
• To send transactional email (account confirmation, password reset) from noreply@joy.world via our email provider, Resend.
• To display your ENS name alongside your wallet address for a better experience.
• To maintain, improve, and secure the platform.
• To comply with legal obligations.

4. Data storage & security

We use the following processors:

• Supabase — primary database, authentication, file storage
• Resend — transactional email delivery (auth-related)
• Shopify — e-commerce, payment processing, fulfillment data
• Alchemy — Ethereum RPC and blockchain data services
• Pinata / IPFS — decentralized storage for media files
• Apple — App Store distribution and Apple-managed user data for JOYware apps
• Browser local storage — theme and cart on your device only

We use commercially reasonable security measures — encrypted connections, salted password hashes, scoped API keys, signed authentication tokens, and access controls. No system is 100% secure; we cannot guarantee absolute security.

5. Third-party services

JOYWORLD integrates with third-party services that may independently collect information under their own policies:

• Shopify — processes JOYshop transactions; collects payment, billing, and shipping information directly
• Alchemy — provides Ethereum RPC and blockchain data services
• WalletConnect — facilitates wallet connections; may collect connection metadata per its policy
• Resend — delivers transactional email
• Apple — distributes JOYware apps; may collect device, account, and analytics data per its policies
• Google (Genkit) — powers any AI-assisted features; queries may be processed by Google’s AI services

We are not responsible for the data practices of these services. Review their policies for details.

6. Cookies & local storage

JOYWORLD uses minimal browser storage:

• Theme preference — remembers your Light / Dark / JOY mode
• Cart data — persists your shopping cart
• Auth session — keeps you signed in (Supabase auth tokens)
• Wallet connection state — managed by your wallet or WalletConnect

We do not use advertising cookies or third-party tracking pixels. Shopify and Apple may set their own cookies or identifiers when you interact with their respective surfaces.

7. Public information

Some information is inherently public on JOYWORLD:

• Wallet addresses and NFT holdings are publicly visible on the Ethereum blockchain.
• Collector profiles, leaderboards, and JOYchat posts display wallet addresses, ENS names, and (if you set them) display names and PFPs.
• Auction bids, including bidder address, amount, and message, are public.
• Reaction counts on Dispatch posts are public aggregates.

8. Data retention

• Account data — retained while your account is active; deleted on request (see Section 9).
• Verified wallets — retained while linked; you can remove a wallet from your account at any time, which deletes the row from our database.
• JOYchat posts — retained until expiration (if you set one) or until you delete them. Posts you make from a wallet remain attributed to that wallet.
• Order data (JOYworkshop) — retained by Shopify and JOYworkshop per legal and accounting requirements (typically 7 years for tax records).
• Cart data — retained until cleared by you or auto-expired.
• Server logs — retained for a limited operational window.
• Blockchain data — permanently on the Ethereum blockchain; we mirror it for display.

9. Your rights & choices

• Detach a wallet from your active session without removing it from your account.
• Remove a wallet from your account, which deletes the verified-wallet row from our database.
• Sign out at any time to end your session.
• Clear browser storage to remove locally stored preferences and cart data.
• Browse without an account — most of JOYWORLD is accessible without signing in.
• Request data deletion — contact hi​@​joy.world to request deletion of data we store about you. Note: blockchain data cannot be deleted, and Shopify-held order data is retained per legal requirements.
• Email change / password reset — available from your account settings.

If you are in the European Economic Area (EEA), United Kingdom, California, or another jurisdiction with specific privacy rights (GDPR, UK GDPR, CCPA / CPRA), you may have additional rights including access, correction, deletion, restriction, objection, and data portability. Contact us to exercise them.

10. Children’s privacy

JOYWORLD is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn we have, we will delete it.

11. International data transfers

Your data may be processed and stored in the United States and other countries where our service providers operate. By using JOYWORLD, you consent to those transfers.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We’ll update the “Last updated” date at the top and, for material changes, surface a notice on the site or by email. Continued use after a change constitutes your acceptance.

13. Contact

For privacy questions or to exercise your rights, write to hi​@​joy.world or @JOYdotWORLD on X. For entity-specific mail:

JOYWORLD LLC · 30 N Gould St Ste N, Sheridan, WY 82801
JOYweb LLC · 7901 4th St N Ste 300, St. Petersburg, FL 33702
JOYworkshop LLC · 7901 4th St N Ste 300, St. Petersburg, FL 33702
JOYware LLC · 7901 4th St N Ste 300, St. Petersburg, FL 33702