Ekoji

Last Updated: June 28, 2026

Ekoji ("we", "our", or "us") values your privacy. This Privacy Policy describes how the Ekoji Browser Extension and Web Application handle information and data.

1. No Personal Data Collection

Ekoji is designed as a secure, decentralized cryptographic clipboard tool. We do not collect, harvest, track, store, or sell any of your personal data, browser history, webpage access logs, or device-identifying information.

2. Data Processing (Encryption & Decryption)

All encryption and decryption activities handled by Ekoji are executed locally inside your browser or routed directly to your own self-managed Supabase instance (Key Management System):

• Selected Text: Any text range or emoji payload you select on a webpage for translation is processed strictly in memory. We never transmit your plain text, ciphertexts, or translation logs to external servers under our control.
• Keys and Passwords: The passwords and cryptographic keys you use to encrypt/decrypt messages are either processed temporarily in your browser's local memory (in Offline/Manual mode) or stored securely inside your private Supabase database. We do not have access to your database instances, keys, or passwords.

3. Use of Permissions

The Ekoji Chrome/Firefox extension requests specific permissions only to perform its core functions:

• activeTab: Used to temporarily read the active text selection on the webpage you are viewing and replace it with the encoded or decoded translation when you click the action buttons.
• contextMenus: Used to display handy right-click shortcuts ("Ekoji: Encode" and "Ekoji: Decode") on your browser tabs.
• storage: Used strictly to store local preferences, session tokens, and key identifiers on your device.
• Host Permissions (<all_urls> & supabase.co): Used to securely contact your Supabase KMS edge functions and allow the content script to monitor selections on current browsing tabs.

4. Third-Party Services

If you connect the extension to your custom Supabase database for Key Management (KMS), your database usage is governed entirely by Supabase's Privacy Policy. Ekoji does not monitor, share, or track your interactions with Supabase.

5. Security

We employ standard security practices to ensure your locally stored tokens and session configurations are protected within the browser sandbox. However, you are solely responsible for managing the complexity of your custom passwords and restricting access to your shared Supabase invitations.

6. Account Deletion & Data Removal

If you have registered an account to use the Key Management System (KMS) and wish to permanently delete your account and all associated keys, invitations, and access privileges, you can do so instantly by visiting our Account Deletion Page. Logged-in users can delete their accounts instantly with a double-confirmation flow. Alternatively, if you are unable to log in, you can use the same page to submit a manual deletion request.

7. Contact Us

If you have any questions or feedback regarding our privacy practices, please contact us directly through our official GitHub project repository.