StickMap Privacy Policy
Last updated: October 19, 2026 (version 1.3)
StickMap (package app.web.stickmap) turns a game controller's buttons and sticks, or an external keyboard's keys, into on-screen touches on Android phones and tablets. It is free to download, with optional Pro purchases through Google Play. Everything happens on your device. This policy explains what the app does with your information. In short: we don't collect it.
What we collect
Nothing. StickMap has no account, no server, no analytics, no advertising and no crash reporting. The app has no internet permission, so Android does not let it send anything anywhere. We, the developers, never receive your data. Nothing is shared or sold.
What stays on your device
What you set up is stored only in the app's private storage on your device:
- your layouts: their names, phases, the controls you placed (positions and sizes as fractions of the screen), their
labels, settings and the buttons, keys or sticks you bound to them, and per-layout switches such as capturing sticks or passing unmapped buttons to the game;
- the apps you chose for a layout, so it can load when that app is in front and appear on the game shelf (the app's
package name only);
- your calibration settings (deadzones, response curve, invert, trigger thresholds);
- up to the last 10 saved versions of each layout (its history), so you can restore an earlier one;
- up to 2 screen variants of each layout (new in 1.3), each with the shape of the screen it was made for (its aspect
ratio and size), so the right one runs on a foldable's cover or inner screen or a tablet;
- the player numbers you give your controllers in Settings › Players (new in 1.3). Each one is kept with the
controller's Android input-device ID, a code Android makes for that controller on this phone. These numbers stay on this device: they are never exported, never in a backup and are deleted by Delete everything;
- your choices for split screen and other displays (which half of the screen the game uses, which display StickMap
touches) and low-power play mode (new in 1.3);
- if you choose one, a background picture for the editor that you picked from your own images: StickMap copies a
smaller version into its private storage for that layout. It is never exported, never included in a backup and is deleted with the layout or by Delete everything;
- the dates on which you agreed to the accessibility disclosure and read the Fair-play notice;
- your settings, such as theme and language;
- if you bought Pro: the purchase data Google Play gives the app (product, purchase token, the purchase record and its
signature) and the time it was last checked, cached in a separate private file so Pro keeps working offline.
Controller presses, keyboard keys, mouse movement and buttons, gyroscope readings and stick movements are processed in memory and never logged or stored. StickMap's own input-delay readout keeps only the last 200 delay numbers in memory, never the presses themselves. Keyboard keys are used only when they are mapped in the active layout; other keys pass through untouched. Only the layouts and settings you save are kept. Settings › Privacy & data shows what is stored and lets you delete it.
Accessibility service
Gesture mode uses Android's Accessibility service. StickMap asks for your consent on its own screen before it sends you to Android's settings, and the service stays off until you turn it on. When it is on, it is used only to:
- read your controller button presses, the keyboard keys and the phone's volume keys you mapped and, on
Android 14 and newer, your stick movements while mapping runs (keys you have not mapped pass through untouched);
- on Android 14 and newer, read your mouse movement, buttons and wheel, only while a layout that uses a mouse is
running (new in 1.1), and in the same way a controller touchpad that Android reports as a mouse (movement, click and two-finger swipes), only while a layout that uses the touchpad is running (new in 1.3);
- tell which controller sent a press or stick movement, only to tell players apart when a layout has controls for
player 1 to 4 (new in 1.3);
- on Android 13 and newer, if you turn on "Follow the app in front to its display", see which display the app in
front is on (its number only), so touches go to that display (new in 1.3);
- take a normal Android screenshot when you press a button you set up as a screenshot button (Android 9+, new in
1.1). The screenshot is saved by Android like any other; StickMap never reads it;
- see the name of the app in front, to load the layout you chose for that app and to pause mapping on the home
screen;
- draw StickMap's own controls over the screen: the floating editor, the status chip, the virtual-mouse cursor, the
binding hints and (new in 1.3) an open radial menu or the selected hotbar point. These are drawn by the accessibility service itself and never take touches, so StickMap needs no "draw over other apps" permission;
- perform the taps, holds and swipes in your layout, each one following a press or stick movement you made.
It does not read the content of other apps' screens, your messages or your passwords, it never looks at screenshots, and it does not act on its own. It does not collect, store or send personal data. You can turn it off at any time in Android's Settings › Accessibility, or from StickMap's Settings › Privacy & data.
Multi-touch mode (optional): Shizuku and the PC helper
Both routes are optional and free. They run StickMap's own touch injector, which is code inside the StickMap app itself; nothing is downloaded.
- Shizuku: if you have installed the Shizuku app and allow StickMap in it, StickMap starts its injector through
Shizuku as Android's shell user. StickMap checks only whether Shizuku is installed and running.
- PC helper: you start the helper from your own computer with the one-line `adb` command StickMap shows you,
together with a fresh pairing code.
- Root (new in 1.3): on a rooted phone you can tap "Start with root" instead. After you agree on StickMap's root
notice, StickMap asks your root manager once to start the same helper (same code, same limits) as Android's root user. It runs only when you tap the button and never at startup.
In both cases:
- The injector talks only to StickMap, through a local, on-device channel (an Android binder handed over through
StickMap's own provider, which accepts only Android's shell or system user and the current pairing). It opens no network port and cannot be reached from another device.
- It accepts a small fixed set of commands: your layout, your controller presses and stick positions, pause, resume and
stop. It cannot run other commands, read your files or reach the network, and it only injects the touches your layout makes.
- On Android versions below 14, the PC helper reads the controller's input device to get stick positions and, if a
mouse is connected and your layout uses it, the mouse's movement, buttons and wheel, and nothing else. On any version, while your layout uses a controller touchpad, it reads that touchpad's finger position and click (new in 1.3). Key, stick, mouse and touchpad values are never logged.
- It writes only a small working folder (`/data/local/tmp/stickmap/`, or `/data/local/tmp/stickmap-root/` when started
with root) with a status log of starts, stops and errors. The PC helper stops when you tap Stop, after 15 minutes idle, when the app is updated or removed, and when the phone restarts. The Shizuku route stops when you disconnect or Shizuku stops. Neither starts by itself.
Motion sensors (motion look)
If you add a motion-look control (StickMap Pro), StickMap reads the phone's gyroscope, or on Android 12 and newer a connected controller's gyroscope, only while a layout with that control is running. Your own turning moves the finger one to one; nothing is stored or sent. No permission is needed for this, and the sensor is switched off as soon as mapping stops.
Installed apps
When you choose an app for a layout, StickMap lists the apps on your device that have a launcher icon, so you can pick one. For the apps you added to the game shelf, it also checks whether the app declares controller support, to show a hint. It also checks which app is your home screen, so mapping never runs there. The list is read on the device only for these purposes. It is not stored, except the apps you choose, and it is never sent anywhere. StickMap does not request the "query all packages" permission.
Purchases (Google Play Billing)
StickMap is free to download. StickMap Pro is sold through Google Play Billing: a one-time Lifetime purchase, or a Yearly subscription with a 7-day free trial for new subscribers. Google Play shows the prices in your currency.
- Google handles the payment, your payment details and your Google account under the
Google Privacy Policy. We never see your payment details.
- StickMap talks to the Google Play Store app on your device (not to the internet) to show prices, start a purchase and
restore purchases. It checks the purchase signature on your device and caches the purchase data privately, as listed above, so Pro works offline. This cache is never included in any backup and never sent anywhere.
- There is no server of ours and no account: a purchase is restored from Google Play with the same Google account.
- The Yearly plan renews automatically until you cancel it in Google Play › Subscriptions. Google Play's refund policy
applies.
- There are no ads.
Exports, imports and backups
Nothing leaves the app unless you share it yourself:
- Layout export (.stickmap file, share code, or QR code image): created only when you tap Export, Share or Copy
share code, and handed to the location or app you choose (the share code goes to the clipboard). It contains your layout and its screen variants, not personal data.
- Layout picture (new in 1.3): "Share as a picture" draws your layout, its labels and the buttons bound to it (and
your editor background, if you picked one) into a PNG on your device, then hands it to the app you choose.
- Encrypted backup: "Create encrypted backup" in Settings writes your layouts (with the apps chosen for them, their
saved versions and screen variants), calibration and settings to a file in a location you choose with Android's file picker. The file is encrypted on your device with AES-256-GCM, using a key made from a password you set. We never see the password and cannot recover it; without it the backup cannot be restored. Restoring a backup replaces the layouts, calibration and settings on the device. The purchase cache is not part of the backup.
- Once a file or text is shared, it is under your control. If another app (for example a cloud drive or a messenger)
receives it, that app's own policy applies.
- Import: a file you open (.stickmap, or a .padbench file from our PadBench app), text or a share code you paste or
share into StickMap, or a picture of a StickMap QR code that you pick or share, is read only to bring its layout (or, for a backup, its data) into the app, after it is checked against the editor's limits. A QR picture is decoded on your device; StickMap never uses the camera and does not keep the picture.
Android device backup
If Android's own device backup or phone-to-phone transfer is on for your phone, Android may include your layouts, calibration and settings in it; Google then handles that backup under its own policy. The Pro purchase cache is always left out.
Permissions
- Google Play Billing (com.android.vending.BILLING): to sell StickMap Pro through the Play Store app on your device.
- Vibration (VIBRATE): short haptic feedback in the app and, if you turn it on, a short buzz when a mapped control
fires (or the controller's rumble on Android 12+).
- Accessibility service (BIND_ACCESSIBILITY_SERVICE) and Quick Settings tile (BIND_QUICK_SETTINGS_TILE): these
let Android connect to StickMap's own service and tile; they give StickMap no extra access.
- Pictures you pick (editor background, QR import) are opened through Android's own file picker, which needs no
permission.
- Not requested: internet, network state, location, camera, microphone, contacts, calendar, phone, SMS, Bluetooth,
storage and media, draw over other apps, "query all packages", exact alarms, high-rate sensors and foreground services.
Deleting your data
Settings › Privacy & data › Delete everything removes all layouts with their history and screen variants, editor backgrounds, chosen apps, controller player numbers, calibration, consent records and settings from the app permanently. Your Pro purchase stays with your Google account and is restored from Google Play. Uninstalling the app removes everything, including the purchase cache. Files you exported and backups you saved stay where you saved them until you delete them.
Fair play
Some online games forbid third-party input tools, remappers or macros in their terms. Using them may get your account restricted. Check each game's rules. StickMap only turns your own presses into touches. It does not aim, automate, or hide itself.
Children
StickMap is meant for teenagers and adults (13+). It is not directed to children and collects no data from anyone.
Changes and contact
If this policy changes, the new version will be published at the same address with a new date. Questions: fighttech.vn@gmail.com