Privacy Policy

Last updated: 22 June 2026

This policy explains what personal data emoji.fan ("we", "us") collects, why, and what rights you have. We are the controller of your personal data. Questions? Email hi@emoji.fan.

1. Information we collect

Account data: your username (public), an optional email address, and a password (stored only as a salted hash — we never see or store it in plain text).
Payment data: when you add a payment method or set up payouts, our payment processor Stripe collects and stores your card and payout details. We store only Stripe identifiers (such as a customer or connected-account id and a payment-method id) — never your full card number.
Activity data: your bids, offers, transactions, and emoji ownership, plus timestamps. Some of this (e.g. emoji you own, trade history) is shown publicly on your profile.
Technical & usage data: IP address, device/browser information, and how you interact with the site, collected through cookies and the analytics tools below.

2. Cookies and analytics

Essential: a session cookie keeps you logged in. The Service does not work properly without it.
Google Analytics: we use Google Analytics to understand traffic and usage. It sets cookies and processes usage data.
Statsig: we use Statsig for product analytics, feature management, and session replay, which may record your interactions with pages (clicks, navigation, and page content) to help us improve the Service.
Cloudflare Turnstile: our sign-up and login forms use Cloudflare Turnstile to detect bots.

3. How we use your data

To provide the Service — run auctions, process bids/offers/trades, and record ownership.
To process payments and payouts (via Stripe).
To send transactional email (verification, password resets, receipts, auction and offer updates) and, if you opt in, "new emoji released" alerts. You can unsubscribe from alerts at any time via the link in those emails or in your settings.
To secure the Service, prevent fraud and abuse, and analyse and improve how it works.
To comply with legal obligations.

4. Legal bases

Where UK/EU data-protection law applies, we rely on: performance of a contract (running your account and transactions); legitimate interests (securing and improving the Service, analytics); consent (optional marketing emails, where required); and legal obligation (e.g. financial record-keeping).

5. Sharing and processors

We don't sell your personal data. We share it with service providers who process it on our behalf, including:

Stripe — payments and payouts.
Google — cloud hosting (Google Cloud) and Google Analytics.
Statsig — analytics and session replay.
Cloudflare — bot protection.
Mailtrap — to deliver email.

These providers may process data in countries outside your own; where they do, appropriate safeguards apply. We may also disclose data where required by law.

6. Retention

We keep your data for as long as your account is active and as needed to provide the Service. After you delete your account we remove or anonymise your data, except where we must retain certain records (for example, transaction records for legal, tax, or fraud-prevention purposes).

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing or withdraw consent. You can:

view and update your email and notification preferences in your account settings;
unsubscribe from alert emails in one click;
delete your account from your settings; and
contact us at hi@emoji.fan to exercise any other right.

If you are in the UK or EU, you also have the right to complain to your data-protection authority.

8. Security

We protect your data with measures including encrypted connections (TLS) and password hashing. No method of transmission or storage is completely secure, but we work to protect your information and limit access to it.

9. Children

emoji.fan is for users aged 18 and over. We do not knowingly collect personal data from anyone under 18; if you believe a child has provided us data, contact us and we will delete it.

10. Changes

We may update this policy from time to time. We'll update the "Last updated" date above and, for material changes, may notify you.

11. Contact

For privacy questions or requests, email hi@emoji.fan.