Controller and Contact
Magsmi, a sole proprietor in the Republic of Korea, provides the Easymoji app and website. The Magsmi Privacy Desk handles privacy matters and related complaints. Send privacy requests to support@easymoji.com.
Information Processed
When you activate Easymoji, the app sends your license key and a generic device label, such as “Easymoji on macOS”, directly to Polar. It sends no hardware ID or computer name. Polar returns an activation ID. The app keeps the license key and activation ID in your operating system's credential store and checks the license with Polar when it starts and every 24 hours.
Checkout takes place on Polar's website, where Polar collects your email address and payment details as the seller. When you return to easymoji.com, the site sends the checkout ID to Polar to confirm the purchase and keeps no record of it.
The refund form sends your license key, purchase email, and optional order ID to easymoji.com, which asks Polar to find the order, issue the refund, and revoke its licenses. For a 3-license pack, the site retrieves all three licenses from Polar. To prevent duplicate refunds, easymoji.com keeps a record in Cloudflare D1 with one-way hashes of the order's license keys, your purchase email, Polar's license, benefit, customer, order, and refund identifiers, the refund status, and dates. It does not store the license keys themselves or display the other keys in the refund form.
An activated app fetches update information from GitHub when it starts, every 24 hours, and when the connection returns. You download the app, and each update you choose to install, from GitHub through easymoji.com.
Favorites, recent emoji, settings, and the time of the last license check stay in a database on your computer and are not sent anywhere. From Easymoji 1.1.8, when the app pastes an emoji for you, it keeps the plain text on your clipboard in memory, pastes, and puts that text back about one second after the paste. If the clipboard changed in the meantime, it leaves the new content alone. The app never saves or restores clipboard content that is not text, such as images or files, or content that a password manager marks as concealed or transient. Earlier versions restore the clipboard when the picker closes.
easymoji.com sets no cookies and loads no analytics or advertising scripts. It stores your theme choice in your browser.
Retention and Deletion
Data the app keeps on your computer stays there until you delete it.
A refund record that never reached Polar is deleted after 30 days. A completed refund record is kept for five years from its settlement, because Korea's Act on Consumer Protection in Electronic Commerce requires payment records to be kept that long. A record still being processed is kept until it is resolved. A cleanup that runs every day deletes expired records.
If you email support@easymoji.com, Magsmi receives your email address, message, and any attachments. Magsmi keeps support messages only as long as needed to answer and follow up, and deletes them on request unless the law requires keeping them.
When a record is no longer needed and no law requires keeping it, Magsmi deletes the electronic copy it controls. A deleted record leaves the live database right away. Cloudflare D1's point-in-time recovery can restore it for up to 30 days, after which it is gone.
Service Providers and International Processing
Polar sells Easymoji as the merchant of record. It handles checkout, payment, tax, invoices, licenses, and refunds under its own privacy policy.
Magsmi shares personal information only with the providers named in this policy and only for the purposes stated here. The recipients below receive personal information outside Korea.
Polar Software, Inc.
- Destination
- the United States, Canada, and other countries where its subprocessors operate.
- Items
- your email address, payment details, and order at checkout, the checkout language and currency, a billing country when Magsmi can pre-fill one from your connection, the license key, device label, and activation ID when the app activates or checks the license, and the license key, purchase email, and order ID of a refund request.
- When and how
- over an encrypted connection when you buy Easymoji, when the app activates or checks the license, and when you return from checkout or ask for a refund.
- Purpose
- selling Easymoji, issuing and checking licenses, and handling refunds.
- Retention
- Polar keeps these records for as long as it needs them to provide its service and meet its legal obligations.
- Privacy contact
- privacy@polar.sh. Polar's privacy policy is at https://polar.sh/legal/privacy-policy.
- Refusing
- do not buy or activate Easymoji. Magsmi cannot sell or license Easymoji without Polar.
GitHub, Inc.
- Destination
- the United States.
- Items
- your IP address, the request time, app or browser details, and the requested file.
- When and how
- over an encrypted connection when the app checks for updates, when you install an update, and when you download Easymoji.
- Purpose
- delivering Easymoji and its updates.
- Retention
- GitHub keeps request records for as long as its privacy statement and legal obligations require.
- Privacy contact
- privacy@github.com. GitHub's privacy statement is at https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement.
- Refusing
- do not download Easymoji. An activated app checks for updates on its own, so to avoid those checks do not use the app.
Cloudflare, Inc.
- Destination
- primarily the United States and the European Economic Area, with access from other countries where Cloudflare operates.
- Items
- request data such as your IP address, the checkout ID when you return from checkout, the refund records described above, and the addresses, headers, message, and attachments of support email it forwards.
- When and how
- over an encrypted connection when you open or download from easymoji.com, you install an app update, or you use the refund form, and through Email Routing when you email support.
- Purpose
- delivering easymoji.com and confirming purchases, delivering app updates, processing refunds without duplicates, and forwarding support email.
- Retention
- Magsmi keeps the records it stores there for the periods in the retention section above. Cloudflare keeps routine request and security records for as long as the purposes in its privacy policy and its legal obligations require.
- Privacy contact
- dpo@cloudflare.com.
- Refusing
- do not use easymoji.com, do not install app updates, do not use the refund form, and do not email support. Magsmi cannot answer a request it does not receive.
Google LLC
- Destination
- the United States and Google servers around the world.
- Items
- the sender and recipient addresses, headers, message, and attachments of support email.
- When and how
- when you email support, Cloudflare Email Routing forwards the message to Magsmi's consumer Gmail mailbox. Support email uses standard encrypted email transport where your email provider supports it.
- Purpose
- receiving, reading, and answering support requests.
- Retention
- Gmail keeps the message until Magsmi deletes it under this policy. Google says its complete deletion process generally takes about two months and encrypted backups can retain data for up to six months.
- Privacy contact
- the options at https://support.google.com/policies/answer/9581826. Google's privacy policy is at https://policies.google.com/privacy.
- Refusing
- do not email support. Magsmi cannot answer a request it does not receive.
Your Rights, Security, and Changes
Depending on applicable law, you can ask Magsmi to access, correct, delete, or stop processing information it controls, or withdraw consent, by emailing support@easymoji.com. Records the law requires Magsmi to keep stay until their period ends. In Korea, you can also contact the Privacy Infringement Report Center at 118 or the Personal Information Dispute Mediation Committee at 1833-6972. Where European data protection law applies, you may also request restriction of processing, object to processing, or receive data you provided in a structured, commonly used, machine-readable format and request its transfer to another controller, including directly where technically feasible, when the legal conditions for those rights are met. For EEA matters, you can complain to a competent data protection authority, in particular in the EEA country where you live or work or where the alleged infringement occurred. For UK matters, you can complain to the UK's Information Commissioner's Office.
The app and easymoji.com use HTTPS for their network requests. The app keeps the license key in your operating system's credential store, and the refund form limits requests by IP address and license key.
Magsmi posts changes to this policy here with a new effective date and gives additional notice where the law requires it.