Skip to content
Easymoji

Privacy

Privacy Policy

What Easymoji processes, what stays on your computer, and who handles purchase, license, and website data.

Last updated August 10, 2026

On this page

Overview

Easymoji is a desktop application whose core picker data stays on your computer. We collect the minimum information needed to license, deliver, update, and support the product. This policy covers the Easymoji desktop application, easymoji.com, and support requests.

Controller and Privacy Officer

Easymoji is developed and operated by Magne Saetran, trading as Magsmi (막스미), a sole proprietor registered in the Republic of Korea under business registration number 482-28-02053. The registered business address is 2F, 214-S128, 46 Apgujeong-ro 2-gil, Gangnam-gu, Seoul 06034, Republic of Korea.

Magne Saetran is the privacy officer responsible for inquiries, rights requests, and complaints. Contact support@easymoji.com. The complete registered operator details are published on the Business Information page.

What We Process and Why

License activation and validation

When you activate your license, the following data is sent to our license provider (Polar):

  • Your license key
  • A generic platform label (“Easymoji on Windows” or “Easymoji on macOS”). It contains no hardware serial number, OS installation identifier, hostname, or custom device name.

Purpose: issue and verify the license you purchased and enforce the one-device limit. The activation service returns an activation ID, which the app stores locally and uses with your license key for later validation. The app periodically validates the license online. If your device is offline, it will continue to work for up to 3 days before requiring reconnection.

Purchases and refunds

Polar, acting as our Merchant of Record, collects your email and payment details when you purchase. If you use the self-service refund form on our support page, your license key and purchase email are sent to the Easymoji server and Polar to authenticate the request, locate the order, issue the refund, and revoke the license. We do not receive your full payment-card number. To prevent duplicate refund mutations and let you look up a completed refund later, we retain the minimum operational record in a Cloudflare D1 database: a one-way hash of the license key, Polar's license, customer, benefit, organization, order and refund identifiers as applicable, purchase email, refund state, and timestamps. We do not store the submitted raw license key in that record.

When you return from a Polar checkout, the checkout ID in the return URL is sent to the Easymoji Cloudflare Worker. The Worker queries Polar to verify that checkout ID, its succeeded status, the Easymoji organization, and the product. The Worker does not return Polar's purchase email to your browser or persist a checkout-confirmation record.

Update checks and downloads

The app periodically fetches an update manifest from GitHub to see whether a newer version is available. App downloads are also delivered from GitHub through the Easymoji website. These requests expose routine connection data such as an IP address, request time, device or browser information, and the requested file to GitHub and, for website downloads, to Cloudflare. Magsmi does not create a separate download-history database.

Website delivery

When you visit easymoji.com or download the app through our website, standard server logs (IP address, browser type, request time) may be collected by our hosting provider (Cloudflare). The Polar checkout flow may set cookies needed for payment processing.

Cloudflare Web Analytics is not currently enabled on easymoji.com. We do not currently use a Web Analytics beacon or process page views, visits, referrers, Web Vitals, or page-load measurements for website analytics. Before enabling that service, we will update this policy to describe the data, purpose, provider, and retention that apply.

Locale selection is part of the URL, so the website does not set a locale cookie or session marker. The website stores only your theme preference in browser localStorage for functionality, and does not send that preference to us.

Support correspondence

If you contact support, we process your email address, message, attachments, and any diagnostic information you choose to provide to answer the request, troubleshoot the product, prevent abuse, and keep records needed for disputes or legal obligations.

Data kept only on your device

All your emoji preferences, favorites, recents, and settings are stored locally on your device in a SQLite database. This data never leaves your computer.

When you trigger auto-paste, the app briefly reads a snapshot of the current clipboard into local process memory solely to restore the clipboard after the operating-system paste action. That snapshot is never transmitted, logged, or durably stored. We do not collect keystrokes, emoji history, favorites, or local app settings, and we do not sell or share personal information for cross-context behavioral advertising.

Under the Korean Personal Information Protection Act, we process information when it is necessary to perform a contract with you or take requested pre-contract steps, comply with a legal obligation, or pursue a legitimate interest that clearly overrides the effect on your rights. Where the GDPR or UK GDPR applies, the corresponding bases are contract, legal obligation, and legitimate interests under Article 6(1). We ask for consent where the applicable law requires it; you may withdraw that consent prospectively.

Contract performance covers checkout support, licensing, updates, downloads, and refunds. Legal obligations include tax, accounting, consumer-protection, and dispute records. Legitimate interests include service security, abuse prevention, and error diagnosis.

Service Providers and International Transfers

The providers below process information outside South Korea. These transfers are necessary to provide the purchase, license, update, download, and website services you request and are disclosed under Article 28-8(1)(3) of the Korean Personal Information Protection Act. Transfers occur over encrypted HTTPS when you perform the stated action.

  • Polar Software, Inc. — United States, Canada, and other locations used by its subprocessors. Items: purchase email and order information; the checkout ID when you return from checkout; license key, generic platform label, and Polar-issued activation ID; refund identifiers and request details. Timing and method: at checkout, return from checkout, activation, validation, or refund, by encrypted network request. Purpose: seller-of-record checkout, payment, tax, invoicing, license management, fraud prevention, and refunds. Retention: while needed to provide the service and longer where required for legal obligations, disputes, or fraud prevention. Privacy contact: privacy@polar.sh. See Polar's Privacy Policy.
  • GitHub, Inc. — United States and other locations used by its subprocessors. Items: IP address, request time, operating system, app or browser information, and requested update or download file. Timing and method: when the app checks for an update or you request a download, by encrypted network request. Purpose: update checks and software delivery. Retention: for the period GitHub needs to provide and secure the service, meet legal obligations, and resolve disputes. Privacy contact: privacy@github.com. See GitHub's Privacy Statement.
  • Cloudflare, Inc. (Workers and D1) — United States and other locations in its global network. Items: IP address, request time, requested page or file; when you return from checkout, the checkout ID; for self-service refunds, a one-way license-key hash, purchase email, minimum Polar identifiers, refund state, and timestamps. Timing and method: when you visit or download from easymoji.com, return from checkout, or use self-service refunds, by encrypted network request. Purpose: website hosting, delivery, security, error diagnosis, checkout confirmation, exact refund lookup, and duplicate-mutation prevention. Retention: routine service data for the minimum period Cloudflare considers necessary; refund operational records only while needed for refund support, dispute handling, and applicable legal obligations. Cloudflare processes this information as our service provider across its global network. Privacy contact: sar@cloudflare.com. See Cloudflare's Privacy Policy.
  • Cloudflare, Inc. — United States and its global network. Items: sender and recipient addresses, message headers, content, and attachments. Timing and method: when you email support@easymoji.com, through standard encrypted email transport where supported. Purpose: route support email to Magsmi's business mailbox. Retention: routing and security records according to Cloudflare's service configuration and legal obligations; the delivered message follows Magsmi's support-retention period. Privacy contact: sar@cloudflare.com. See Cloudflare's Privacy Policy.
  • Google LLC (consumer Gmail) — United States and servers around the world. Items: sender and recipient addresses, message headers, content, and attachments. Timing and method: when Cloudflare Email Routing forwards a support message, through standard encrypted email transport where supported. Purpose: store and present the message in Magsmi's support mailbox so Magsmi can read and answer it. Retention: until Magsmi deletes the message under the support period below; Google says complete deletion generally takes about two months and encrypted backups can retain data for up to six months, with longer retention for legal or security needs. Google states that it does not offer a data-processing agreement or act as a data processor for consumer Gmail. See Google's Privacy Policy and its privacy contact information.

You may refuse these transfers by not purchasing or activating Easymoji, disabling update checks, not requesting a download, or not using the website, as applicable. Refusal does not affect local app data, but the related online purchase, license validation, update, download, refund, or website function cannot be provided. For provider-held information, you may also submit a rights request to us and we will coordinate with the provider where required.

Retention and Deletion

License activation data is retained by Polar for the duration of your license. If you request a refund, your license key is deactivated. Polar may retain transaction records for tax and legal compliance as required by law.

Refund and transaction records that Magsmi receives or creates are retained for up to five years where the corresponding contract, withdrawal, payment, or supply record must be kept. Consumer complaint or dispute records are retained for up to three years. Support correspondence is normally retained for up to 24 months after the request is closed, unless it remains necessary for an active dispute, fraud prevention, security, or a legal obligation. Local preferences, favorites, recents, and settings remain until you remove them or uninstall the app.

Easymoji does not currently use Cloudflare Web Analytics and does not keep a separate website visitor profile or analytics database.

Korean law requires the following e-commerce records to be kept separately from ordinary use: advertising records for 6 months; contract and withdrawal records for 5 years; payment and supply records for 5 years; and consumer complaint or dispute records for 3 years. Polar keeps the transaction records it holds as seller. Magsmi applies these periods only to the corresponding records it actually receives or creates.

Terminal failed refund-operation locks that never received a provider refund ID are retained for 30 days and then deleted during an operator-run cleanup. Settled refund or withdrawal records with a provider refund ID, and the matching revoked-license receipt, are retained for five UTC calendar years from the first settled or receipt record; later reconciliation retries do not restart that period. Processing, ambiguous, pending, or reconciliation-required rows are kept until manual investigation resolves them, then enter the applicable period. The cleanup is run manually when eligible records require deletion and has no recurring schedule. Other records are reviewed and securely deleted or isolated when their applicable period ends. Provider systems and backups can have separate deletion cycles. Paper records, if any, are cross-shredded or securely destroyed.

Security Measures

We use measures appropriate to the scale and sensitivity of the processing, including encrypted HTTPS transport, restricted access to production and provider accounts, least-privilege credentials, software dependency and access review, rate limiting on the refund endpoint, and provider agreements and safeguards. No internet service can guarantee absolute security.

Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Request suspension or restriction of processing, or object where applicable
  • Receive portable data where applicable
  • Withdraw consent without affecting earlier lawful processing
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, contact support@easymoji.com. We may ask for information reasonably necessary to verify your identity. We will respond within the period required by applicable law and will explain any lawful restriction on a request.

If you believe your privacy rights were infringed, you may also contact the Korean Personal Information Infringement Report Center at privacy.kisa.or.kr or 118, or the Personal Information Dispute Mediation Committee at 1833-6972. You may lodge a complaint with your local data-protection authority where applicable.

Children's Privacy

Easymoji is a general-audience productivity tool and is not directed at children under 14. We do not knowingly collect personal information from a child under 14 without the consent of a legal representative where required. If you believe a child provided personal information, contact us so we can review and delete it as appropriate.

Changes

We may update this policy to reflect changes in the product, providers, or law. We will post the revised policy and effective date here and provide additional notice when a material change or applicable law requires it.

Contact

For privacy-related questions, email support@easymoji.com.