Privacy

Privacy Policy

Last updated: 3 August 2026

North Studio is a Moroccan technology studio creating apps and games for a worldwide audience — currently 2+ apps and games, played by over 1000 users with around 1K monthly active users. This policy explains what personal data we collect, why we process it, and how you can exercise your rights, in accordance with Moroccan Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data and its implementing decrees. Our apps and games are not intended for users under 16 — if you are under 16, please do not use our apps or games.

1. How we process your data in our apps and games

1.1. What information do we collect about you?

We collect information you provide directly (such as an email address or account details) and information generated automatically as you use our apps and games (such as device identifiers, gameplay events, and technical diagnostics).

1.2. Why and on what legal bases do we process your data?

Purpose Categories of personal data Legal basis
Providing and managing our apps and games — account setup, save-game sync across devices. Account identifiers, device identifiers. Performance of a contract.
In-app purchase validation — validating transactions and preventing fraud. Transaction data, device and platform data. Performance of a contract; legal obligation.
Advertising and monetization — displaying and measuring ads within our apps and games. Advertising identifiers, ad interaction data. Consent or legitimate interest, depending on jurisdiction.
Product improvement and analytics — understanding usage and stability. Gameplay events, crash and performance data. Legitimate interest.

1.3. Who do we share your data with?

  • Service providers: infrastructure, analytics, and customer support vendors acting on our instructions.
  • Advertising partners: for ad delivery and measurement, where you have given consent.
  • App stores and platform providers: Apple, Google, and similar platforms, as required to operate our apps and games.
  • Legal and regulatory authorities: where required to comply with the law.

1.4. How long do we keep your data?

Data Retention period
Account and progression data For as long as the account is active, plus [X] months of inactivity.
In-app purchase records As required by applicable tax and accounting law.
Analytics data Up to [X] months, after which it is aggregated or anonymized.

2. Children's privacy

Our apps and games are not designed or directed at children under the age of 16. If you are under 16, please do not use our apps or games. Where age rating tools are available on an app store, we encourage parents and guardians to use them to configure appropriate settings for younger users.

3. How is your data protected when transferred internationally?

Under Law No. 09-08, transferring personal data outside of Morocco is only permitted where the destination country ensures a sufficient level of protection, or where the transfer has been specifically authorized by the National Commission for the Control of Personal Data Protection (CNDP). Where we or our partners transfer personal data outside of Morocco, we rely on such CNDP-recognized safeguards (including CNDP-approved contractual clauses) to ensure your data continues to receive an equivalent level of protection.

4. What are your rights and how can you exercise them?

4.1. Who can you contact regarding your privacy?

For any questions about this policy or to exercise your rights, you can contact our Data Protection contact at privacy@northstd.com. You also have the right to lodge a complaint directly with Morocco's data protection authority, the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).

4.2. Your rights under Law No. 09-08

  • Right to information: to be informed about the processing of your personal data, including its purpose and recipients.
  • Right of access: to obtain confirmation of, and access to, the personal data we hold about you.
  • Right of rectification: to correct personal data that is inaccurate or incomplete.
  • Right of objection: to object, on legitimate grounds, to the processing of your data, and to object at any time to processing for direct marketing purposes.
  • Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time, without affecting prior processing.
  • Right to lodge a complaint: with the CNDP, Morocco's data protection authority, if you believe your rights under Law No. 09-08 have not been respected.

4.3. How to manage your preferences

You can manage advertising and analytics consent directly from your app or game's in-app settings menu, or through your device's privacy settings (e.g. limiting ad tracking in iOS or Android settings).

Join the conversation
Post a Comment