Privacy Policy
Last updated: 14 October 2026
Lyrimoji (“we”, “us”) lets you turn a song into a beat-synced emoji lyric video at lyrimoji.com. This policy explains what we collect, why, and the choices you have. Lyrimoji is operated by [OPERATOR LEGAL NAME], [POSTAL ADDRESS]. Contact: support@lyrimoji.com.
1. What we collect
| Data | When | Why |
|---|---|---|
| Email address; name and profile picture if you sign in with Google | When you create an account | To sign you in, keep your creations, and contact you about your account |
| Audio file you upload | Only when you use “Auto-detect lyrics” | To separate the vocals and recognise the lyrics. The file is deleted right after processing. |
| A one-way fingerprint (SHA-256 hash) of that file, plus the recognised lyrics and timing | After auto-detection | So the same file doesn't have to be processed again. This record contains no information about you. |
| Song title and artist you enter; lyric text | When you search for lyrics or use the AI Director | To look up synced lyrics and plan the video |
| Share pages: a short silent preview video, a still image, title and artist | Only when you click “Create share page” | To show your video to anyone you send the link to. Share pages are public to anyone with the link. |
| Random visitor ID (stored in your browser), language choice, referral code | When you use the site | To remember your settings, count template use and know which shared links bring visitors |
| IP address, daily usage counts, basic server logs | When you use the site | Security, preventing abuse, and enforcing daily AI limits |
We don't collect payment card details. When paid plans launch, payments are handled by our payment provider, which will be named here.
2. Cookies and browser storage
- lm_session — keeps you signed in (essential, set only when you sign in, lasts up to 30 days).
- lm_oauth — protects Google sign-in against forgery (essential, lasts 10 minutes).
- Browser storage: your visitor ID, chosen language and the referral code of the link you arrived from.
We use no advertising or third-party analytics cookies, so there is nothing to opt out of.
3. Service providers we use
We share data only with providers that help us run the service, under contracts that limit their use of it:
- Cloudflare — domain, network protection, content delivery, file storage
- Fly.io — web hosting (United States)
- Modal — GPU processing for lyric detection (uploaded audio)
- Anthropic — AI Director and song recognition from lyrics (lyric text, title, artist)
- LRCLIB — public synced-lyrics database (title and artist searches)
- AudD — audio fingerprinting, if enabled (a 15-second excerpt)
- Our email provider — sending sign-in emails (your email address)
- Google — only if you choose “Continue with Google”
- Google Fonts and jsDelivr — your browser downloads typefaces and a video-encoding library from them, so they see your IP address
We do not sell or rent personal data, and we do not share it for cross-context behavioural advertising.
4. Legal bases (EEA/UK)
We process data to provide the service you asked for (contract), to keep it secure and prevent abuse (legitimate interests), and where required, with your consent.
5. How long we keep data
- Uploaded audio: deleted immediately after processing.
- Sign-in links: expire after 15 minutes and can be used once.
- Account and share pages: until you delete them or your account.
- Usage counts and logs: kept only as long as needed for security and limits.
6. Your rights
You can access, correct, export or delete your data, and object to or restrict processing. You can delete your account at any time from the account menu (this also deletes your share pages). For anything else, email support@lyrimoji.com; we reply within 30 days. You may also complain to your local data-protection authority.
7. International transfers
Our servers and several providers are in the United States. Where required, transfers are protected by standard contractual clauses or equivalent safeguards.
8. Children
Lyrimoji is not intended for children under 13 (or under 16 in the EEA without parental consent). If you believe a child has given us personal data, contact us and we will delete it.
9. Changes
If we make significant changes we'll update the date above and, where appropriate, notify signed-in users by email.