MoreMoji Browser Extension — Privacy Policy
Last updated: 2026-06-22
Full version (Korean / English): https://moremoji.site/privacy

1. We do NOT collect, store, or transmit any of the following:
   • Personally identifiable information (name, email, phone, etc.)
   • Login credentials, cookies, or authentication tokens
   • Chat messages you read or send
   • Browsing history or visited pages
   • Location, device identifiers, advertising IDs
2. All processing happens entirely inside your browser (locally).
   The extension reads the chat DOM on https://chzzk.naver.com only to
   display channel-specific custom emotes, and rewrites your own
   [keyword] input into a standard emoji before submission. No content
   leaves your browser.
3. Only ONE outbound network call is made:
   GET https://moremoji.site/api/c/<channel-id>/meta
   It fetches the channel's PUBLIC emote metadata (keywords + image URLs).
   The request contains the channel ID only — no viewer identifier, no
   cookies, no tracking parameters. Emote images are then loaded directly
   from the public image URLs returned by that metadata.
4. Optional self-eligibility detection (subscriber / tier-2 / manager):
   For locked emotes (set by the streamer to subscribers / managers only),
   the extension makes a one-time call to CHZZK's own profile endpoint
   (comm-api.game.naver.com) to read YOUR OWN role / subscription tier
   for THIS channel. This response is used only to enable/disable picker
   items in your local UI — it is never sent to MoreMoji's servers.
5. Permissions used and why:
   • host_permissions: chzzk.naver.com → Read the chat DOM and inject
   the picker next to the chat input.
   • host_permissions: api.chzzk.naver.com, comm-api.game.naver.com →
   Read your own role / subscription tier for the channel you are
   viewing (eligibility detection only).
   • host_permissions: moremoji.site → Fetch the channel's public emote
   metadata.
   • No permissions requested. No storage, tabs, cookies,
   webRequest, or any data-related permission.
6. No third-party trackers, analytics, or advertising SDKs.
   No remote code execution. All scripts are packaged in the extension;
   no executable code is fetched from any server.
7. Data retention: not applicable (no data is stored).
8. Contact: milkywaylifeform@gmail.com