Privacy Policy — Emoji Subtitles™

Emoji Subtitles™ is operated by Emoji Subtitles ("we," "us," or "our"). The service is intended for adults age 18 and older. This Privacy Policy explains, in plain language, what information is involved when you use the service and the choices you have.

Information users provide

You voluntarily provide:

Text messages and emojis you paste for interpretation.
A selected sender relationship (for example, "friend").
If you create an account, an email address and a password. Our authentication provider stores your email, a protected hashed password, and your email-verification status. Emoji Subtitles never sees your plain-text password.
Payment details for a purchase, which are collected and handled by Stripe for direct web subscriptions or by the applicable marketplace or app-store provider for purchases through those channels. Emoji Subtitles does not receive or store your full payment-card number.
Contact information and message content if you email Emoji Subtitles support.

Please remove names and identifying details from messages whenever possible.

Information We Store

In our own application database, we store:

Subscription and entitlement records for paying users. Depending on the billing channel, these may include your user ID, provider and plan, provider-issued customer, subscription, license, account, or agreement identifiers, subscription status, entitlement dates, and whether cancellation is scheduled. These identifiers help us recognize and maintain the access purchased through the applicable billing provider.

Our authentication provider separately stores:

Your email address, a protected hashed password, and your email-verification status.

Aggregate usage counters (signups, upgrade-button attempts, checkouts started, checkouts failed, subscription activations, scheduled cancellations, subscription cancellations, and per-plan translation counts) are stored so we can operate and improve the service. Each counter row contains only the event type, an optional account ID for signed-in actions, and a timestamp. Raw event rows are retained for 90 days and then reduced to daily totals with no user identifiers. We do not store message text, interpretations, IP addresses, card details, email addresses, user-agent strings, or referrer URLs in these counters.

Interpretation counts are used to enforce Premium limits of up to 25 per day and 500 per applicable monthly usage or billing period. Daily allowances reset daily, currently at midnight UTC where applicable. The monthly allowance resets at the start of the next applicable usage or billing period. For signed-in users, per-request reservation rows are stored in the database so limits cannot be bypassed by refreshing or switching browsers.

Emoji Subtitles does not save the full text of pasted messages, AI interpretations, or conversation histories in its own database. Message content is processed temporarily to produce the requested result and then discarded.

AI processing of your messages

When you ask for an interpretation, the message text and any sender relationship you chose are sent temporarily to an external AI service provider to generate the result. We currently use a Google Gemini model, accessed through the Lovable AI Gateway. The text is sent only to produce the interpretation you requested. Emoji Subtitles does not save your message text or the result as conversation history. The AI provider handles the request under its own service terms.

This AI processing is separate from advertising measurement: your message text is never sent to Google Ads or Meta for advertising.

The homepage Emoji Decoder examples and texting quiz are prewritten and run in your browser. They do not send a selected example or quiz answer to an AI provider, reserve interpretation usage, or store the selection in our database.

Cookies and Local Storage

Some storage is essential and is always used; advertising measurement is optional and is switched off until you accept it.

Essential (always used)

If you sign in, your browser stores a session token in local storage so you stay signed in. Signing out clears it.
After a purchase, a small marker is stored in your browser so the same purchase is not counted twice if you refresh the confirmation page, and a per-visit marker in session storage prevents duplicate first-party usage events.
Your choice about optional advertising measurement is stored in your browser so we do not ask again.
During AWS Marketplace onboarding and setup only, a short-lived temporary session cookie (aws_mp_session) keeps the setup session active.
Some pages remember an interface preference (such as whether a side panel is open) in a cookie or local storage. It contains no personal information.
Page fonts are requested from Google Fonts, which means your browser contacts Google to download the font files; Google receives your IP address and browser information as part of that request.
Payments run on Stripe’s hosted checkout and billing pages. Stripe may set its own cookies there for fraud prevention and to keep checkout working. Other billing providers handle their own account and transaction data under their privacy practices. These provider technologies are not set by Emoji Subtitles.

Optional advertising measurement (only with your consent)

We use the Google Ads measurement tag and the Meta (Facebook/Instagram) Pixel to understand whether our advertising leads people to the service. Each records which pages of this site a browser viewed, and after a purchase, the amount paid, the currency and a payment transaction reference — never what you typed.
Until you accept, neither the Google tag nor the Meta Pixel is loaded, and nothing is sent to Google Ads or Meta.
You can change your mind at any time using the “Cookie preferences” link at the bottom of this page, or by clearing your browser storage for this site. Rejecting does not affect signing in, translating, or purchases.
We never send your submitted messages, translations, quiz answers, or contact details to Google or Meta, and we do not use behavioral advertising trackers beyond these measurement tags. Hosting and service providers may collect limited operational logs and technical information for security, reliability, and fraud prevention.

Information processed automatically

When you use the service, limited technical information may be processed, such as:

IP address (used to enforce rate and daily limits)
Date and time
Browser or device type
Character count
Request volume and rate-limit information
AI model usage
Success or failure status and general error information
Subscription and entitlement status

How information is used

Information is processed to:

Provide emoji translations and explanations.
Suggest replies.
Operate and secure the service.
Enforce Premium daily and monthly usage limits.
Prevent fraud, abuse, and automated overuse.
Troubleshoot errors.
Manage subscriptions and billing.
Respond to questions and privacy requests.
Comply with legal obligations.

Service providers

Necessary service providers include:

Cloudflare — application hosting and network security
Supabase — database and user authentication
Lovable AI Gateway — routes AI requests to the underlying model
Google Gemini — the AI model that produces the interpretation, accessed through the Lovable AI Gateway
Stripe — subscription billing and payment processing
Google Ads — advertising measurement (the Google Ads tag on our pages)
Meta Platforms — advertising measurement (the Meta Pixel on our pages; no message content or contact details is shared)
AWS Marketplace — marketplace agreements, billing, and entitlement verification
Apple App Store — app-store billing and subscription management when supported

Gift purchases

When someone buys a gift, we store the purchase record (who bought it, the payment reference from the payment processor, the amount, and the date) and a one-way hash of the gift code — never the code itself. When a code is redeemed we record which account redeemed it and when, so the one-year access can be applied and so a code cannot be used twice. Failed redemption attempts are counted to prevent guessing. No payment card details are stored by Emoji Subtitles.

One-time annual purchases

When you buy One-Year Premium for your own account, we store the purchase record (your account, the payment reference from the payment processor, the amount, the currency, and the date) and the start and end dates of the year of access. Your subscription record notes that the access came from a one-time annual purchase rather than a monthly or marketplace subscription, so the correct plan and end date are applied. No payment card details are stored by Emoji Subtitles.

Business API processing

The business API is available only to approved business customers using an issued API key. For those requests:

We do not store the message text sent to the API or the interpretation returned by it in our database.
We store metering records only: the business account and key identifier, a timestamp, the number of characters processed, and whether the request succeeded or failed.
Message text is still transmitted to the AI provider listed above in order to produce the result.
Business customers are responsible for the content they submit and for their own notices and permissions regarding their customers' messages.

Technical usage and cost measurement

So that we can understand how much AI processing the service uses, we keep aggregate technical records of AI requests. Each record contains only: the date and time, the name of the AI model used, a general plan category (demo/non-subscriber, premium, or business), an internal account identifier where one applies, the number of processing units ("tokens") reported for the request, and an estimated model cost calculated from published reference rates. These estimates are approximations for our own planning and are not a statement of the exact amount any provider charges us.

These records contain no message text, no interpretation text, no IP address, no email address, and no payment information.

No advertising

Emoji Subtitles does not display third-party advertising.
Emoji Subtitles does not use submitted messages for targeted advertising.
Emoji Subtitles does not sell personal data for money.
Optional advertising measurement with Google and Meta runs only if you accept it; see “US state privacy rights” below.
Emoji Subtitles does not use personal data for profiling that produces legal or similarly significant decisions.

If any of these practices change, this Privacy Policy will be updated before they are introduced and any legally required choices will be provided.

Your Privacy Choices and Rights

Subject to applicable law and whether Emoji Subtitles actually controls the information, you may request:

Confirmation of whether personal information is being processed
Access
Correction
Deletion
Portability
Information about categories of data and service providers
An appeal if a privacy request is denied

Direct requests to privacy@emojisubtitles.com using the subject line "Privacy Request."

If you have an account, you can also delete your account and its associated subscription records at any time from Your Account → Delete Account. Deleting the account may not cancel a subscription held by a marketplace or app-store provider; cancellation must be completed through the billing channel where Premium was purchased.

Your identity may need to be reasonably verified. We aim to respond within 45 days, and will let you know if additional time is reasonably necessary. Emoji Subtitles will not discriminate against anyone for exercising a privacy right.

Appeals. If a request is denied, reply to the decision email with the subject line "Privacy Appeal" and explain why you believe the decision should be reconsidered.

US state privacy rights

Some US states (for example, California, Colorado, Connecticut, Virginia, and others) give residents specific privacy rights. Whether a particular law applies to Emoji Subtitles depends on its thresholds. Where one applies, this section describes how we handle your information under it.

Categories of personal information we collect

Identifiers: email address, account ID, IP address (used for rate limits and security), and billing-provider customer or subscription identifiers.
Commercial information: plan, subscription status, entitlement dates, and purchase records (amount, currency, date, payment reference). Card numbers are handled by the payment provider, not by us.
Internet or device activity: browser or device type, request timing and volume, and — only if you accept advertising measurement — pages viewed on this site and purchase events measured by Google Ads and the Meta Pixel.
Content you submit: message text you paste, processed temporarily to produce a result and not saved as conversation history.
Communications: what you send us by email.

We do not intentionally collect sensitive personal information and ask you not to include it in messages.

Selling and “sharing”

We do not sell personal information for money.
If you click Accept in the cookie banner, the Google Ads tag and Meta Pixel receive information about pages viewed on this site and completed purchases so we can measure our advertising. Some state laws treat this as “sharing” for cross-context behavioral advertising, or as targeted advertising. It never includes the text you type, your translations, quiz answers, or your email address.
If you click Reject, or make no choice, neither tag is loaded and nothing is sent to them.

Your rights and how to opt out

Where an applicable state law gives you these rights, you may request to:

Know or access the personal information we hold about you
Correct inaccurate personal information
Delete personal information
Receive a portable copy of your information
Opt out of “sharing” or targeted advertising — do this at any time by choosing Reject in Cookie preferences at the bottom of this page
Appeal a decision on your request, as described above

Use the contact details in “Your Privacy Choices and Rights” above. An authorized agent may submit a request where the law allows, with proof of authorization. We will not treat you differently for exercising these rights.

Global Privacy Control

Global Privacy Control is a browser signal used to communicate opt-out preferences. Our optional advertising measurement stays off unless you click Accept, and you can switch it off at any time in Cookie preferences. We do not currently read the Global Privacy Control signal automatically, so please use Cookie preferences to opt out. We do not add tracking code merely to detect Global Privacy Control.

Visitors in the European Economic Area and United Kingdom

If the EU General Data Protection Regulation (GDPR) or the UK GDPR applies to your use of the service, the following information applies in addition to the rest of this policy.

Who is responsible

Emoji Subtitles is the controller of the personal information described in this policy. You can contact us at privacy@emojisubtitles.com. We have not appointed a representative in the EU or UK.

Why we use information and our legal bases

Providing the service (translations, accounts, Premium access, billing, gift codes): performance of our contract with you.
Security, abuse prevention, rate limits, troubleshooting, and aggregate usage counts: our legitimate interest in running a safe, reliable service.
Optional advertising measurement (Google Ads tag, Meta Pixel): your consent, given by clicking Accept.
Tax, accounting, and legal requests: compliance with legal obligations.

Who processes information for us

We use service providers for hosting and network security, database and authentication, AI processing, payments and marketplace billing, and — only with your consent — advertising measurement. They are listed under “Service providers” above.

International transfers

Emoji Subtitles is based in the United States, and our providers may process information in the United States and other countries. Where information is transferred from the EEA or UK, we rely on the safeguards our providers make available, such as the European Commission’s Standard Contractual Clauses (and the UK addendum) or, where a provider participates, the EU-US Data Privacy Framework and its UK extension.

How long we keep information

Message text: not saved; discarded once the result is produced.
Account and subscription records: while your account is open, until you delete it.
Purchase and gift records: as long as needed for billing, fraud prevention, and tax and accounting obligations.
Individual usage-counter rows: 90 days, then reduced to daily totals with no user ID.
Support emails: as long as needed to handle your request.

Your rights

You have the right to access, correct, and delete your personal information, to restrict or object to certain processing (including processing based on legitimate interests), to receive a portable copy, and to withdraw consent at any time. Withdrawing consent does not affect processing that happened before. To withdraw consent for advertising measurement, choose Reject in Cookie preferences at the bottom of this page. For other requests, email privacy@emojisubtitles.com.

You also have the right to complain to a data protection supervisory authority, such as the authority in the EU country where you live or work, or the UK Information Commissioner’s Office (ICO). We would appreciate the chance to address your concern first.

Sensitive information

Please do not submit:

Passwords
Financial account information
Social Security or government-identification numbers
Payment-card numbers directly into the message box
Medical records or diagnoses
Exact addresses
Information about children
Private legal, workplace, family, or business information
Names or identifying details not needed for the translation

Emoji Subtitles is not intended to process sensitive personal information.

Children

The service is intended for adults age 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.

Security

Reasonable safeguards are used, including:

Server-side AI credentials
Input limits and rate limiting
Authentication handled by a dedicated provider that stores only a protected hashed password
Private source-code storage and security scans
Secure payment processing by Stripe or the applicable marketplace or app-store provider
Server-side subscription verification

No internet service can guarantee absolute security.

Policy changes

Material changes will be reflected by updating the effective date and, when appropriate, by a visible notice.

Contact

Privacy contact: privacy@emojisubtitles.com