Locket Widget

"Contact information of your friends: Locket may, with your permission, access your mobile contact list including saved phone numbers and names, to help you connect with people you know on Locket. Device data: We collect information about your device such as your mobile device's operating system type and version, manufacturer and model, browser type, device type, IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 4G)."

Locket accesses the full mobile contact list and collects extensive device data including unique identifiers, carrier info, and radio/network information, which goes beyond what a photo-sharing widget requires.

"We collect information about your device such as your mobile device's operating system type and version, manufacturer and model, browser type, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 4G), and general location information such as city, state or geographic area."

Locket collects general location data including city, state, or geographic area, derived from IP address and network information, for a photo widget app that doesn't need location functionality.

"We engage advertising partners, including third party advertising companies and social media companies, to display ads on the Services. We use technologies provided by such parties, such as SDKs, to collect information about you over time across the Services, and we and our partners use that information to serve online ads that may be interesting or useful to you."

Locket embeds third-party advertising SDKs that directly collect user data over time, and shares data with affiliates, service providers, advertising partners, and advisors.

"We share information that you provide through the Services or that we automatically collect, such as the links you click, pages you visit, IP address, advertising ID, and device type, with advertising companies for interest-based advertising. We use technologies provided by such parties, such as SDKs, to collect information about you over time across the Services."

Locket shares advertising IDs and uses third-party SDKs to track users over time, enabling cross-service profiling for interest-based advertising.

"We will update this Policy from time to time. Please review this Policy periodically for any changes. Changes to this Policy are effective when they are posted on this page. If we make material changes, we will let you know."

Changes take effect immediately upon posting, placing the burden on users to periodically check for updates. While material changes get notification, non-material changes do not require any user consent.

"We retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention procedures, and in accordance with applicable laws or until you withdraw your consent (where applicable). To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure."

No specific retention periods are provided — retention is described only in vague terms like 'as long as necessary,' giving Locket broad discretion to keep data indefinitely.