Privacy policy
- Effective
- 2026-10-19
- Operator
- Judahs, Seoul, Korea
- Contact
- Contact page or contact@motifly.io
This policy explains what Motifly (the "service") collects when you use it, why, and how long we keep it. We collect as little as we can and do not use it for anything this policy does not describe. One account works on both the English site (motifly.io/en) and the Korean site (motifly.io), so this policy covers both. Rows marked "Korean site" describe features that are only on the Korean site.
1. Your files stay in your browser, with one exception
The files you convert, and their names, are processed inside your browser. We do not upload or store them. The exception is the Office and Visio tools, which say "converted on the server" on their page (Word, PowerPoint and Excel to PDF, and Visio conversions). Those tools upload your file to encrypted temporary storage, convert it on our server, delete the original as soon as the conversion finishes, and delete the result when you download it. Anything left over is deleted automatically within 1 day. We do not log file names or contents. Usage statistics never include your input or file names, only the tool ID, whether it succeeded, and the number and size range of files. Page addresses sent to Google Analytics have the query part removed, so calculator entries are not included. Most calculators put your entries in the page address so you can share a result, and anyone you send that address to sees them. Health and family calculators (pregnancy, weight, child growth and similar) never put your entries in the address.
2. What we collect, why, and for how long
| When | What | Why | How long |
|---|---|---|---|
| Sign in with Google | Google account ID, email address (only an address Google has verified), name | Sign-in, identifying your account | Deleted when you delete your account |
| Sign in with Naver | Naver account ID, email address, name or nickname. If you let Naver share your gender and birth year, we use them only to prefill the sign-up form and delete them once the form is saved. We do not use your birthday. | Sign-in, identifying your account, prefilling sign-up | Deleted when you delete your account (prefill values are deleted as soon as sign-up completes) |
| Sign up or sign in with email | Email address, password (stored only as a hash that cannot be reversed), verification and password reset codes (hashed, valid 5 minutes), counts of failed sign-ins and codes sent per 15 minutes, number of password changes | Sign-in, confirming you own the email address, blocking brute force attempts | Deleted when you delete your account (codes expire after 5 minutes, counts after 15 minutes) |
| Completing sign-up | Birth year (required), gender (optional, only if you choose one), time you agreed to the terms and this policy | Age check, grouping poll results on the Korean site | Deleted when you delete your account |
| Office and Visio tools (converted on the server) | The uploaded file and the converted PDF (temporary), a one-way hash of your account or anonymous cookie, and a per-day conversion count | Converting Word, PowerPoint, Excel and Visio files, applying the daily conversion limit | Original deleted right after conversion, result deleted when you download it, anything left deleted within 1 day. The conversion count is deleted after 2 days. |
| Daily poll (Korean site) | Question ID, the options and the one you chose, your reason or conditions if you gave any, an anonymous ID created by your browser, the page you voted on, time of the vote | Saving your answer, showing results and reasons, improving the service | Individual answers are deleted after 2 years. Per-question totals (anonymous statistics) are kept. |
| Linking anonymous IDs at sign-in | The poll anonymous IDs your browser used before signing in (up to 10) | Telling your own anonymous answers apart from your account | Deleted when you delete your account |
| Reward points (Korean site, signed in) | Point balance, history (type, amount, the question or template it came from, time), per-day earning count, templates unlocked with points | Granting and checking poll rewards, preventing duplicate rewards | Deleted when you delete your account (per-day counts after 2 days) |
| Profile picture (optional) | A 512 by 512 WebP copy of your picture (we do not keep the original, camera data or location), and a moderation record (result, reason, model version, detected labels, original format and size) | Showing your profile, blocking inappropriate images, limiting uploads to 5 a day | The image is deleted when you remove it or delete your account. Moderation records are deleted after 90 days. |
| Site analytics (Google Analytics) | Google Analytics ID, pages visited, device and browser information, tool events (tool ID, success or failure, number of files and size range, and on the Korean site the poll question and answer) | Visit and tool usage statistics | 14 months (Google Analytics retention setting) |
| Contact messages (signed in) | Category, subject, message, replies in the thread, attached images (optional, up to 5 per message, re-encoded as WebP without camera data or location), your account ID, time sent, our reply, whether you have read it | Answering you and continuing the thread, applying the limit of 10 messages a day | Deleted 1 year after the message was sent, including replies and images |
| Moderation (profanity warnings, suspensions) | Warning count, suspension period and reason, an operations log (account ID, action, reason, the flagged expression, time). The full message, your name and email are not stored in the log. | Automatic warnings for abusive language, suspending repeat cases, keeping a record for appeals | Warning count and suspension data are deleted with your account. The operations log is deleted after 1 year. |
You can sign up with Google, Naver, or an email address and password. Email sign-up requires a verification code sent to your address, and we store the password only as a hash that cannot be reversed. If you sign in with Google or Naver, no password is created or stored. Birth year is required at sign-up and gender is optional. Neither is shown to other users, and we never ask for your full date of birth. We do not keep access logs with IP addresses or browser details. Our hosting provider (Amazon Web Services) may keep runtime logs for error diagnosis, and we do not write anything in them that identifies you.
3. Cookies, browser storage and advertising
The server sets these cookies. All of them are HttpOnly and SameSite=Lax, and in production they are sent over HTTPS only.
| Cookie | Purpose | Expires |
|---|---|---|
| mf_session | Keeps you signed in | 30 days, or when you sign out |
| mf_oauth | Protects the sign-in flow from forged requests | 10 minutes |
| mf_anon | Random anonymous ID that older visits may still carry. It is no longer set, and the server-converted tools can use it for the daily limit. | 1 year |
Separately, the site keeps these values in your browser's local storage. You can clear them in your browser settings.
- mf_work_session, mf_work_u_<id>: Your list of recent conversions. Signed-out visitors keep up to 5 in the current tab, signed-in users keep up to 50 on this device. Files for those jobs are kept in your browser's IndexedDB, up to 200 MB.
- mf_sid, mf_profile: Anonymous poll ID and the conditions you picked in a poll (Korean site). Sent with poll answers.
- mf_q_*: Questions you already answered, so the same question is not asked again (Korean site)
- mf_first_seen, mf_gate_done: The date you first visited, so the first-day poll prompt shows once a day (Korean site)
If you block or delete cookies you may be signed out. We do not fingerprint your browser and we do not block anyone by IP address alone.
Advertising (Google AdSense)
Some pages show Google AdSense ads to cover running costs. Google and other ad vendors use cookies to show you ads based on your visits to this site and other sites.
- What ad vendors may receive: ad cookies or device advertising IDs, browser and device information, IP address, and the address of the page where the ad appeared. On most calculators that address can include the numbers you entered; on health and family calculators it never does. We do not send them your files, your conversion results or your account details (email, name, birth year).
- Where it is processed: Google data centers in the United States and elsewhere. See how Google uses data from partner sites.
- Opting out: turn off personalized ads at adssettings.google.com, and opt out of other vendors at aboutads.info. You can also block third-party cookies in your browser. You will still see the same number of ads, but they will not be based on your interests.
- Visitors in the European Economic Area, the United Kingdom and Switzerland see Google's consent message before ad cookies are used.
- We do not show ads on the sign-in, account, contact or legal pages.
4. Who else processes your data
We do not sell personal information. The companies below process data on our behalf to provide the service. We do not share your data with anyone not in this table.
| Company | Role and data | Location |
|---|---|---|
| Google LLC | Sign in with Google (account ID, email, name), Google Analytics (usage statistics), Google AdSense (ads: ad cookies, device information, pages visited, see section 3) | United States and other Google data centers |
| Naver Corporation | Sign in with Naver (account ID, email, name and any profile fields you agreed to share) | Republic of Korea |
| Amazon Web Services | Storing accounts, poll answers and reward points (DynamoDB), profile pictures (S3), image moderation (Rekognition), sign-up and password reset email (SES), temporary storage for server-converted files (S3) and the conversion server (Lambda) | Seoul region (ap-northeast-2), Republic of Korea |
| Amazon CloudFront | Delivering the site and profile pictures from a cache | Edge servers worldwide (cached copies) |
| jsDelivr (font CDN) | Serving the Pretendard web font. Your browser sends connection details to the CDN when it downloads the font. | CDN worldwide |
5. International transfer
Motifly is operated from the Republic of Korea and our servers are in Seoul. If you use the service from another country, your account data is stored in Korea. Google services (sign-in, analytics, ads) process data in the United States and other countries, and CloudFront and the font CDN may keep cached copies at edge servers worldwide. If you prefer not to have Google process your data, you can use the service without signing in and turn on tracking protection in your browser. Sign-in will not work in that case.
6. Deletion and closing your account
We delete data when its retention period ends or its purpose is served. Records with a set expiry (conversion counts, moderation records) are deleted automatically at that time.
You can delete your account from My account or by asking on the contact page. Deleting your account removes your account record (email, name, birth year, gender, consent time), linked social accounts, linked anonymous IDs and your profile picture right away. These are not removed immediately:
- Profile picture moderation records (no image): kept up to 90 days so the upload limit cannot be bypassed
- Cached copies of your profile picture: may remain reachable at the old address until the cache expires (up to 1 year)
- Database backups: expire after 35 days
- Poll answers (Korean site): remain as anonymous statistics with no link to your account. Individual answers are deleted after 2 years.
- Contact messages: deleted 1 year after they were sent, so our reply history stays intact
7. Your choices
You can ask to see, correct or delete your personal information, to stop its processing, or to withdraw consent. Signed-in users can remove their profile picture and delete their account from My account. For anything else, send a message on the contact page or email contact@motifly.io. We will confirm it is you and tell you the outcome. If a legal duty or someone else's rights limit what we can do, we will explain why.
8. How we protect your data
- All traffic uses HTTPS. The sign-in cookie cannot be read by scripts (HttpOnly) and sessions are verified with signed tokens only.
- Sign-in requests are checked against forgery (state verification), and after sign-in you can only be returned to an address on this site.
- Profile pictures are re-encoded before storage, which strips camera and location data, and are screened automatically for inappropriate content. The storage bucket is not publicly accessible.
- Server functions have access only to the storage they need, and the database has point-in-time backups.
9. Children
You must be 13 or older to create an account. We check the birth year you enter at sign-up. The form only accepts birth years at least 15 years before the current year, and we do not run any further age verification. If you believe a child under 13 has created an account, a parent or guardian can ask us to delete it on the contact page or at contact@motifly.io. Using the tools without signing in has no age limit.
10. Automated decisions
Profile pictures are screened by Amazon Rekognition. A rejected picture is not stored, and you can upload a different one (5 tries per 24 hours). If you disagree with a result, ask for a review on the contact page. No other automated decision on this site affects your rights.
11. Changes to this policy
When the law, the service or the way we process data changes, we update this page with the new effective date and what changed. If we start collecting something new, we post a notice here 7 days before it takes effect.
- 2026-10-19: first version of the English policy