This page describes exactly what Expressions ("the Service"), operated by Merson316, does and doesn't do with your data. There's no analytics, no tracking scripts, and no advertising anywhere in the Service.
Cropping, resizing, and encoding all happen locally in your browser. Files you add are never uploaded to any server operated by this project for processing, and never leave your device unless you explicitly choose to download or upload the result.
If you import an image or video by pasting a URL, the file is fetched through a same-origin relay
(/api/fetch-image) solely to work around cross-origin restrictions that would otherwise block
your browser from reading the pixels. The relay streams the file straight through. It isn't logged,
stored, or inspected beyond basic safety checks (file size limits, blocking requests to private/internal
network addresses), and responses are sent with Cache-Control: no-store.
If you choose to connect Discord to upload directly, you're redirected to Discord's own sign-in and consent screen. In return, Discord shares with the Service your Discord user ID and username, plus, for each server you're a member of, its ID, name, icon, and your permission level there. This is used only to compute which servers you're authorized to direct the shared bot to act on.
That authorization result is stored as a single signed cookie in your browser, valid for one hour, and
marked httpOnly so no page script (including the Service's own frontend code) can read it.
This cookie is the only place that information is kept. The Service has no database or server-side
account system of any kind, and nothing is retained once the cookie expires or you disconnect.
Emoji and sticker files you choose to upload are sent directly to Discord's API, using the shared bot's credentials, scoped to the specific server you selected. The Service's infrastructure does not keep a copy of what you upload. The shared bot's own credentials are stored only as an encrypted secret on the Service's hosting infrastructure (Cloudflare Workers) and are never exposed to your browser or any third party.
The only third party your data passes through is Discord itself, governed by Discord's own Privacy Policy. The Service does not share data with any other third party, and runs no analytics or tracking of any kind.
This policy may be updated from time to time. Continued use of the Service after a change constitutes acceptance of the revised policy.
Questions about this policy can be sent to contact@merson.dev.