Soft Felt Icon Pack — Privacy Policy
EzPz Codes
Effective date: October 20, 2026
Contact: hello@ezpz.codes

Soft Felt provides an icon library, launcher setup guidance and missing-icon request drafts with optional email handoff. EzPz Codes also operates an optional icon-request web page at https://ezpz.codes/soft-felt/requests/. This policy describes app version 1.5.2 and that request page.

On your device
The icon collection works locally. When you choose to prepare missing-icon requests, the app checks launchable apps on your device and compares their package/activity names with the included icon mappings. This comparison happens on your device. Selected app names, package/activity mappings and launcher icon references are saved in local drafts. The app does not automatically upload your installed-app inventory or drafts.

Local drafts and deletion
Drafts are stored in the app's private storage. You can delete individual drafts in the Requests tab. Clearing app storage or uninstalling the app removes locally stored app data. No account is required to use the app. The app itself has no request-server connection settings or creator inbox and does not contact the request page. You may choose to email a saved draft, or upload it on the request page, as described below. Opening an email composer does not send the request, and Soft Felt does not mark it as delivered.

Email icon requests
If you tap Email request, Soft Felt explains the information included, creates a ZIP with only the selected app names, package/activity mappings and launcher icon references, and passes it to an email app addressed to hello@ezpz.codes. Your email app provides your sender address and lets you review, change, cancel or send the message. EzPz Codes receives your email address, request attachment and any message you include only if you send the email. This is optional; the icon library and launcher setup work without it. Your email provider handles transmission under its own policies. Soft Felt cannot guarantee the transport encryption used by your chosen email service. We use emailed requests to consider missing icons and respond to you, not for advertising or sale. A request does not guarantee an icon or update date.

Email request retention and deletion
Request emails and their attachments remain in the EzPz Codes support mailbox until deleted by the support team. No automatic retention period is promised. To request deletion of your request or support correspondence, email hello@ezpz.codes with the subject and date or other details needed to locate it. Deleting a local draft does not delete an email already sent or copies held by your email provider; manage those with your provider.

Online request page (optional)
Instead of emailing a draft, you can open https://ezpz.codes/soft-felt/requests/ in a web browser. To use it you complete a Cloudflare Turnstile human-verification check, enter your email address, confirm it with a six-digit code we email to you, complete the check again and upload a Soft Felt request ZIP you saved earlier. Each request accepts 1–20 apps. The page is optional; the app and its email handoff work without it. The page checks that you control the email address. It does not check whether you bought Soft Felt.

Information the request page processes
We store your verified email address so we can link your requests, apply request limits and reply to you. From the ZIP you upload we store only the selected app names, package/activity names and launcher icon images, together with a request reference, status, any status message, creation and update times, and a random key that prevents the same submission from being recorded twice. Verification codes are stored only as keyed hashes, expire after 10 minutes and allow five attempts. After you verify, the page receives a sign-in token that is kept in the open page only and is stored on our server as a hash; it expires after 24 hours. To limit abuse we count attempts per email address and per network (IP) address in keyed, non-reversible counters that are deleted automatically within three days. The request service does not write your raw IP address, request contents or tokens to access logs. The page sets no cookies of its own and contains no advertising or analytics tools. Each accepted request is emailed to the hello@ezpz.codes mailbox with your email address as the reply-to address, the app names and the request ZIP.

Request page providers
Cloudflare, Inc. provides DNS, content delivery and security for ezpz.codes and runs the Turnstile check. When you load the page or complete the check, Cloudflare processes your IP address, browser and device characteristics and interaction signals to tell people from automated traffic, under the Cloudflare Privacy Policy at https://www.cloudflare.com/privacypolicy/. The request service and its database run on a Google Cloud Compute Engine server in Iowa, United States. Google Workspace (Gmail) sends verification emails and receives request emails in the hello@ezpz.codes mailbox, under Google's terms for Workspace customers. These providers process data on our behalf and may keep their own operational and security logs under their own terms. Your information may therefore be processed in the United States and other countries where these providers operate.

Request page retention and deletion
Your verified email address and requests stay in the request database, and request emails stay in the hello@ezpz.codes mailbox, until you ask us to delete them or we delete them because they are no longer needed to handle icon requests. Unused verification codes are deleted within a day after they expire, and expired sign-in tokens within a day after expiry. The database is backed up daily and each backup is kept for 14 days. The server's disk is also snapshotted daily and each snapshot is kept for 14 days. To delete your request-page data, email hello@ezpz.codes from the address you verified, or tell us that address and confirm you control it. We then delete your email address, requests, request history and sign-in tokens from the live database and the related request emails from the mailbox. Copies in backups and snapshots are removed as those expire.

Data collection and security
The Soft Felt app has no Internet permission and sends no email itself; optional email handoff uses a separate email app. It includes no advertising or analytics SDK and does not use an advertising ID, hardware device identifier, contacts, photos or location. Android manages access to private app storage. App data backup is disabled. The request page uses HTTPS. Server credentials are kept only on the server. No system can guarantee absolute security.

Support
If you choose to contact hello@ezpz.codes using a separate email app, EzPz Codes receives your email address and any information you choose to send so we can respond. Do not include sensitive information in support messages. Contact the same address with privacy or deletion questions about support correspondence or request-page data.

Google Play and launchers
Google Play handles purchases under its own policies. The app does not receive your payment card details. Google Play may provide licensing, installation-integrity or protection services under Google's policies when enabled for the distributed version. Applying icons through another launcher or Samsung Theme Park is handled by that application under its own policies. When you visit ezpz.codes, including this policy and the request page, Cloudflare and Google Cloud process your connection as described under Request page providers.

Changes
We will update this policy if the app's or request page's data practices change. The effective date above identifies this version. Contact hello@ezpz.codes for privacy questions.