Emoji+

"The Company may track or otherwise keep record of keystrokes for statistical purposes and will do so in an anonymized and non-identifiable manner. The Company may also share such statistical data with third parties or persons or make it available for the general public on its Website or in any other form."

The company records keystrokes from its emoji keyboard extension and shares this data with third parties, which is highly sensitive device data collection even if claimed to be anonymized.

"We may share Your personal information identified in the above categories with the following categories of third parties: Service Providers, Payment processors, Our affiliates, Our business partners, Third party vendors to whom You or Your agents authorize Us to disclose Your personal information in connection with products or services We provide to You."

The policy permits sharing personal information with a broad set of third parties including business partners and affiliates, with vague boundaries on what data is shared and for what purposes.

"We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page. We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy. Changes to this Privacy Policy are effective when they are posted on this page."

While the company says it will notify users, changes become effective simply by being posted on the page, meaning continued use constitutes acceptance of new terms without requiring explicit consent.

"The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies."

No specific data retention periods are defined — data is kept for as long as the company deems 'necessary,' which could effectively mean indefinite retention.

"Tracking and Performance Cookies — These Cookies are used to track information about traffic to the Website and how users use the Website. The information gathered via these Cookies may directly or indirectly identify you as an individual visitor. This is because the information collected is typically linked to a pseudonymous identifier associated with the device you use to access the Website."

Third-party tracking cookies link user activity to pseudonymous device identifiers, and social media login connections allow the company to link user identities across platforms like Apple, Google, Facebook, and others.

"In order to exercise any of Your rights under the CCPA, and if You are a California resident, You can contact Us: By visiting this page on our website: www.EmojiPlus.com. By sending us an email: support@emojiplus.com. Only You, or a person registered with the California Secretary of State that You authorize to act on Your behalf, may make a verifiable request related to Your personal information."

There is no self-service account or data deletion option; users must contact the company directly, go through an identity verification process, and the company lists numerous broad exceptions under which it can deny deletion requests.