Privacy Policy

1. Data Controller

The data controller responsible for this website is:

(See also our Impressum for the full legal notice.)

2. What We Collect

Emojar is an online-tools and emoji website. You do not create an account or submit personal data directly. Files and text you use with our online tools are processed in your browser — they are not uploaded to, stored on, or logged by our servers. A few optional features contact a third party; they are listed in section 4 and labelled on the tool page. We may receive:

• Server logs: IP address, browser user-agent, pages visited, referrer URL, and timestamps — generated automatically by our hosting infrastructure.
• Analytics data: aggregated page views (page URL, referrer, country, device and browser type) via Vercel Web Analytics. It sets no cookies and does not identify you across sites or days.
• Advertising data: Google AdSense serves ads on this site. Visitors in the EEA, the UK and Switzerland see Google's consent message first; Google sets advertising cookies for personalised ads only if you agree there.

3. Legal Basis (Art. 6 GDPR)

• Consent (Art. 6(1)(a)): personalised advertising and the cookies Google sets for it — only after you agree in Google's consent message.
• Legitimate interest (Art. 6(1)(f)): server security logs, fraud prevention, basic site functionality, and cookieless, aggregated usage statistics (Vercel Web Analytics).

4. Recipients of Data

• Google LLC — Google AdSense (ad serving) and Google's consent management (Privacy & messaging). Privacy policy: policies.google.com/privacy.
• Vercel Inc. — hosting, CDN and server logs for site delivery, and Vercel Web Analytics (cookieless page-view statistics).

Only when you use these optional features:

• jsDelivr (CDN) — Image to Text and the OCR option in PDF to Text download the open-source Tesseract engine and language data. Your image or PDF stays on your device.
• Have I Been Pwned — the opt-in breach check in the Password Strength Checker sends only the first five characters of your password's SHA-1 hash, never the password.
• Google (gstatic.com) — Emoji Kitchen loads the combined emoji images from Google; the request contains the two emoji you picked.
• Your browser's speech service — in Text to Speech, voices marked "online" send the text to your browser vendor (for example Google, Apple or Microsoft); local voices do not.

5. International Transfers

Google LLC is certified under the EU–US Data Privacy Framework (DPF) and uses Standard Contractual Clauses (SCCs) for transfers of personal data to the United States. More details: business.safety.google/gdpr.

6. Retention Periods

• Server logs: retained for up to 7 days for security and operational purposes.
• Analytics data: stored only in aggregate in Vercel Web Analytics; no profile of you is kept.
• Advertising cookies: lifespan as set by Google (typically up to 13 months); see Google's cookie policy.

6a. Data Stored in Your Browser

Some tools and games save your work or settings in your browser's local storage — for example Kanban boards, timelines, pixel art, alarms, world clocks, invoices, how often you copied each emoji, and game high scores. This data never leaves your device, we cannot see it, and it is needed for the feature you use (§ 25(2) TDDDG). You can delete it with the tool's "Clear" button or by clearing this site's data in your browser.

7. Your Rights

Under GDPR you have the right to:

• Access the personal data we hold about you (Art. 15).
• Rectification of inaccurate data (Art. 16).
• Erasure ("right to be forgotten") (Art. 17).
• Restriction of processing (Art. 18).
• Data portability in a machine-readable format (Art. 20).
• Object to processing based on legitimate interest (Art. 21).
• Withdraw consent at any time without affecting the lawfulness of prior processing: use the privacy and cookie settings button from Google's consent message, or clear this site's cookies in your browser and reload the page to be asked again.

To exercise any of these rights, email hi@emojar.com with "GDPR Request" in the subject. We will respond within 30 days.

8. Right to Lodge a Complaint

If you believe we have violated your rights, you may lodge a complaint with the supervisory authority in your EU member state. As this site is operated from Berlin, the lead authority is:

9. Children's Privacy

Emojar is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us for immediate removal.

10. Changes to This Policy

We may update this page and will revise the "Last updated" date accordingly. Continued use of the site after changes are posted constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions: hi@emojar.com or visit our Contact page.