Privacy notice

Who runs 3moji

3moji is run by Joshua Stothard, based in the UK. Under UK data protection law we are the controller of the personal data described on this page. You can contact us about it at [Contact address — the owner adds this before launch].

What we store, why, and for how long

We only ask for an email address and a password. We never ask for your real name. Here is everything we store:

• Your email address. We use it to verify your account, to let you sign in, and to send you emails about your account, such as verification and password reset emails. It is never shown on your Profile. We keep it until your account is deleted.
• Your password, as a hash. We never store your password itself, only a scrambled version that can check the password you type but cannot be turned back into it. We keep it until your account is deleted, and replace it if you reset your password.
• Your Handle. The three emoji you claim are your public web address, and they are also stored as your account's name. While a Handle is held waiting for you to verify your email, we store when the hold ends; once you verify, we store when your claim became final. We keep it until your account is deleted.
• Your Profile: the display name, bio and Links you choose to add, where each Link is a title and a web address, and when you last saved them. Your Profile is public: anyone who visits your Handle can see it. Once your Handle is claimed, anyone can also find it and your display name through the site's search. Saving replaces what was there before, and we do not keep old versions. We keep it until you change it or your account is deleted.
• Sign-in sessions. Each time you sign in, we store a session with your IP address, your browser's user agent (a short description of your browser and device) and when the session expires. This keeps you signed in and helps us keep accounts secure. A session expires after 7 days without use, and using the site renews it at most once a day. It is deleted when you sign out, when you reset your password, when your account is deleted, or when it is next used after it has expired.
• Verification email records. For each verification email we send, we store a fingerprint of the link (never the link itself) and when it was sent, so that only the newest link works and we can limit how many are sent. We keep these until your account is deleted.
• Password reset tokens. When you ask to reset your password, we store a single-use token that works for 1 hour. It is deleted when it is used, and an expired one is cleared the next time the site checks a token.
• Rate-limit counters. To stop abuse, we count recent attempts to claim a Handle, to sign in, to resend emails and to search. Every counter holds a keyed hash of your IP address or email address, never the address itself, and the hash cannot be turned back into the address without our secret key. They hold about an hour of history, and older counts are cleared as new attempts arrive.
• Released Handles. When an account is deleted, we record which Handle was released and when, and nothing else. That record does not name you or link to your account. We keep it indefinitely.

If you do not verify your email

A Handle is held for 24 hours while you verify your email address. If you do not verify it in time, the hold ends. Your unverified account, with its email address, password hash and sessions, is deleted the next time anyone tries to claim that Handle. Until that happens it stays stored, even after the 24 hours have passed.

Logs and backups

Our application logs record what kind of request was made, whether it worked and a random reference number. They are designed not to contain your email address, your password, your IP address or your Profile. Our providers also keep their own records for a limited time, so deleted data can remain in them for a short while before it is gone:

• Vercel keeps our application's runtime logs for 1 hour. It keeps our page-view analytics for at least a month, and may keep them for longer.
• Neon keeps a history of our database for 6 hours, so that it can be restored to an earlier point. Data deleted from the database can still be recovered from that history until those 6 hours have passed.
• Resend keeps the emails it sends for us, with their delivery records and logs, for 30 days.

Cookies

We only use the cookies needed to keep you signed in. We do not use advertising or analytics cookies.

Who else handles your data

We use three providers to run 3moji. They handle your data only to provide their service to us:

• Vercel hosts the website and runs the application, so every request you make, including your IP address, passes through it. Vercel also provides our page-view analytics, which does not use cookies. For each page view it records the page you visit, when, the site that referred you, your browser, operating system and type of device, and your approximate location. It tells visits apart by a hash of your request that resets every day, and what it records is not tied to you or to your IP address.
• Neon hosts the database where everything described on this page is stored.
• Resend sends our emails, so it receives your email address and the emails we send you.

We do not sell your data, and we do not use it for advertising.

Vercel's main processing facilities are in the United States. Resend stores its account data, email records and logs in the United States, whichever region our emails are sent from. Neon stores the database in the United States, in AWS US East 1 (N. Virginia).

Where your data is transferred to the United States, it is protected by the UK Extension to the EU-US Data Privacy Framework, under which Vercel and Resend are certified, and Neon is covered through the certification of its parent company, Databricks. Vercel's and Resend's data processing agreements also include the UK's addendum to the EU Standard Contractual Clauses.

Why we are allowed to use your data

UK data protection law says we need a lawful basis for each way we use your data. These are ours:

• Your account, Handle and Profile: your email address, password hash, Handle, Profile and verification records. We need them to provide the service you signed up for, so the basis is contract.
• Security: your sessions, rate-limit counters and logs. We use them to keep 3moji and your account secure and to stop abuse, which is in our and our users' legitimate interests.
• Understanding how 3moji is used: our page-view analytics, described above. We use them to see which pages are visited so we can improve 3moji, which is in our legitimate interests, and what they record is not tied to you.

Where the basis is legitimate interests, you have the right to object, as described below.

Deleting your data

You can clear your display name, bio and Links at any time by removing them from your Profile and saving.

Deleting your account gives up your Handle and deletes your email address, password hash, sessions, verification records, Profile and Links. The only thing that remains is the released Handle record described above, which does not identify you. Your Handle becomes available for someone else to claim straight away.

To delete your account, use the option to delete it on the site where it is offered, or contact us at [Contact address — the owner adds this before launch] and we will do it for you.

Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the data we hold about you
• ask us to correct data that is wrong
• ask us to delete your data
• ask us to limit how we use your data, or object to how we use it
• ask for your data in a format you can take elsewhere

To use any of these rights, contact us at [Contact address — the owner adds this before launch]. We will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this notice

If we change what we store or why, we will update this page first. Last updated: 14 September 2026.