Privacy

Moji Locker is built to need as little of your data as possible. Last updated September 28, 2026.

Images you upload

Uploaded images are resized, animated and exported entirely in your browser. They are never sent to our servers.

Your gallery

Emoji you choose to save to the Gallery are stored in your browser's own storage on this device. They are never uploaded, and clearing your browser data deletes them. Nothing is saved unless you press Save or turn on saving every download.

AI generation

When you generate an emoji, your description and chosen style are sent to our server and on to OpenAI, which creates the image. OpenAI handles that request under its API terms and does not use API data to train its models by default. We don't store your description. We store the generated image in a private cache, keyed by a one-way hash of the description and style, so the same request can be answered without generating it again. Every description is also checked by OpenAI's moderation model first, and blocked descriptions are not generated.

Usage limits

To enforce daily limits we log each generation with a one-way hash of your IP address combined with the date. The raw IP address is never stored, and the hash changes every day, so it can't be used to follow you over time.

Server logs

Like any website, our hosting providers (Netlify and Supabase) briefly keep standard request logs, which include IP addresses, for security and troubleshooting. We don't use them to identify or track visitors.

Slack app

When you use /moji in Slack, Slack sends us your description plus your workspace and user IDs. The description is handled like any other generation. The IDs are combined with the date and hashed to enforce daily limits; the raw IDs are not stored. The finished emoji is kept in our private storage, and its download link expires after 7 days. Installing the app doesn't give us a token we keep, and the app can't read your messages or channels.

Analytics

We don't currently run analytics. If we ever turn on Cloudflare Web Analytics to count visits, it uses no cookies and collects no personal data.

Ads and cookies

Moji Locker is free because it shows ads from Google AdSense. Moji Locker itself doesn't set cookies, but Google and its partners, as third-party vendors, use cookies to serve ads based on your prior visits to this and other websites, and to measure them. Google's advertising cookies let it and its partners show you ads based on those visits. In the EEA, the UK and Switzerland you're asked for consent before personalized ads are shown.

You can opt out of personalized advertising in Google's Ads Settings or, for other vendors, at aboutads.info. Google explains how it uses data from sites that show its ads at policies.google.com/technologies/partner-sites.

Service providers

Netlify hosts the site, Supabase runs the generation server and cache, OpenAI generates and moderates images, Slack delivers /moji requests, and Google serves ads. Each only receives what it needs to do that job, and some of them process data in the United States. We don't sell your data.

How long we keep things

Hashed usage log entries are kept only as long as needed to enforce limits and spot abuse. Cached images are kept so repeat requests stay fast, and may be cleared at any time. Your Gallery stays on your device until you delete it.

Children

Moji Locker isn't directed at children under 13, and we don't knowingly collect information from them.

Your choices

You can use Moji Locker without generating anything, in which case nothing you make leaves your device. For questions, or to exercise your privacy rights (such as access or deletion under laws like the GDPR or CCPA), email hello@moji.locker. Because we don't store raw IPs, account details or descriptions, there's usually nothing that can be linked back to you.

Changes

If this policy changes, we'll update it here and change the date at the top.